What Splunk is
Splunk is still one of the best siems for security teams willing to invest the time to learning their query language. They have robust features and integration options, but have a steep learning curve and can be expensive. If you're an organization looking to make a substantial investment in dedicated security teams, Splunk is a great option. The vendor site is www.splunk.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Splunk covers
Splunk is in the catalog for these capabilities. Categories: SOC Platform. Catalog tags: Hands-on, Nerdy, and Best for Enterprise.
How to evaluate Splunk in a security program
Use Splunk as a stack candidate, not as diligence evidence. The oneNorma score for Splunk is 5.8/10 (percentile 75). If the real gap is in SOC Platform, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.splunk.com publishes. Contrast it with pentesting and Security Cloud & Compliance.