GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links.
Our commitment
Independent research methodology
Our researchers use a mix of verified reviews, independent research, and objective methodologies to bring you selection and ranking information you can trust. While we may earn a referral fee when you visit a provider through our links or speak to an advisor, this has no influence on our research or methodology.
How GetApp verifies reviews
GetApp carefully verified over 2 million reviews to bring you authentic software experiences from real users. Our human moderators verify that reviewers are real people and that reviews are authentic. They use leading tech to analyze text quality and to detect plagiarism and generative AI.
How GetApp ensures transparency
GetApp lists all providers across its website—not just those that pay us—so that users can make informed purchase decisions. GetApp is free for users. Software providers pay us for sponsored profiles to receive web traffic and sales opportunities. Sponsored profiles include a link-out icon that takes users to the provider’s website.

IncMan SOAR
Security orchestration, automation and response platform
IncMan SOAR Reviews (2025)
13 reviews
Recommended
Verified reviewer
Computer Software, 11-50 employees
Share this review:
Being an automation enthusiast my favorite part is Playbook. I really like the idea that I can setup workflows, and this way basically also "document" all processes related to security incident handling within the organization. With a solid planning the daily SecOps manual efforts and the resolution time will drop dramatically.
You really need to understand the concept of IncMan and get some expertise before starting a real life implementation by your own. This might take some time as it is a really complex and roboust solution, but it's not a real con.
Piotr B.
Information Technology and Services, 11-50 employees
Used daily for 2+ years
Share this review:
Minimises the time to respond to incidents. Prioritises responses to security incidents. Reduces false positives. Improves SecOps processes. Automates of time-consuming activities and mundane tasks.
Product is easy to use and integrates with our processes. The strength are immediate and detailed incident reports with related IOC's, timeline, and corrective actions executed; customised KPIs, analysis of alarms before incidents are created; merging incidents with similar characteristics; Community portal to share integrations, playbooks, and Service Packs. Very important is that API actions (integration creating) can be developed by everyone in a few standard languages.
We are in permanent contact with DFLabs and we submit our comments and suggestions on an ongoing basis to the manufacturer, who as a standard quickly implements them in subsequent versions of its software.