Phantom Cyber (acquired by Splunk)

splunk.com · Palo Alto, United States of America

Phantom Cyber, acquired by Splunk in 2018, developed a security orchestration, automation, and response (SOAR) platform that integrated with security tools to automate incident response workflows for enterprise security operations teams. The company generated revenue through subscriptions and licenses to its software platform, along with related support and services, before being integrated into Splunk’s security product portfolio.

  • Security Operations (SIEM/SOAR)
Revenue
$20.0M
Employees
80
Founded
2014
Headquarters
Palo Alto, United States of America

What 167 Arbolus experts think of Phantom Cyber (acquired by Splunk)

NPS scores are predominantly in the 8-10 range, especially from high-spend and long-term enterprise users. Renewal intent is strong among larger organizations, tied to automation and integration gains. Implementation is nearly always at the MoreThan1Year stage, with some pilot use in new adopters. Thematic strengths include automation depth, process standardization, and improved SOC efficiency. Weaknesses include administrative overhead, playbook maintenance burden, and complexity in dynamic threat scenarios. Overall Customer Sentiment: Positive

Who reviewed Phantom Cyber (acquired by Splunk)

Total customers 167 155 current · 12 former
Reviews growth +130 in six months
Seniority of respondents
  • C-Suite 72% (120)
  • Director 18% (30)
  • Manager 10% (17)
Engineering Executive C-Suite NPS 9
Engineering Leader C-Suite NPS 7 Will renew
Executive C-Suite NPS 9

Employer names and spend open in the full report, along with the other 164 customers.

Everything 167 customers told us about Phantom Cyber (acquired by Splunk).

Employer names, spend, renewal intent and every written answer behind the numbers on this page.

Open the full report

Sentiment

25 Net Promoter Score, from 165 scored reviews
  • Promoters 60
  • Passives 87
  • Detractors 18

Cumulative NPS by month

+0 over 6 months
  • May 8
  • Jun 8
  • Jul 8
  • Aug 8
  • Sep 8
  • Oct 8

Net Promoter Score across 4 reviews, accumulated up to each month. Category median 42 across 4 companies.

Praised

  • AI-driven SOC Automation
  • No-Code and Hyperautomation Integration
  • Broadening Security-Tool Integrations
  • Automation and Efficiency Gains

Criticised

  • Technical Maintenance Overhead
  • Playbook Development Burden
  • Resource Constraints for Smaller Teams
  • Integration Fragility

What customers say

Automation and Efficiency Gains
“I have seen a major reduction in repetitive SOC work and faster incident-response times thanks to Phantom’s orchestration and automation capabilities.”
Integration Across Security Platforms
“The main reason I rely on Phantom Cyber is its ability to integrate with multiple security and IT tools, allowing more coordinated and automated incident management.”
Standardization and Consistency
“Phantom’s structured case handling and automated playbooks provide clear, repeatable response across multiple security environments, which is crucial for enterprise SOCs.”

Renewal intent

Plan to renew 60%
  • Will renew 39
  • Undecided 20
  • Not renewing 6

Plan to renew, by seniority

  • C-Suite 60% 45 answers
  • Director 75% 12 answers
  • Manager 38% 8 answers
  • 8.5/10 Average score from customers who will renew
  • 7.4/10 Average score from undecided customers
  • 6.8/10 Average score from customers not renewing

Top alternatives

Most weighed by Phantom Cyber (acquired by Splunk) customers

Report

For people who use Phantom Cyber (acquired by Splunk)

Do you use Phantom Cyber (acquired by Splunk) at work?

Share your software review and get matched to paid projects. Arbolus pays you every time a client reads your review.

  • 167 customers of Phantom Cyber (acquired by Splunk) have already contributed
Share your experience

Takes a few minutes. Your identity stays anonymous.