System Overview
v2.4.1
Active
The SOAR Engine automates security response workflows by processing trigger events and executing predefined playbooks. Built on a modern tech stack, it provides reliable, scalable security automation with minimal human intervention.
FastAPI
High-performance API layer for event ingestion and playbook management with automatic OpenAPI documentation.
SQLAlchemy
ORM for database schema management, supporting PostgreSQL, MySQL, and SQLite with advanced query capabilities.
Jinja2
Templating engine for dynamic playbook execution, enabling context-aware automation with event data.
Playbook Analytics
Quantitative breakdown of playbook components showing the structure of automated workflows.
Triggers
Events that initiate playbook execution
Conditions
Logic gates for workflow branching
Action Steps
Individual automated tasks