- Home
- Runbook Automation Software
- D3 SOAR
D3 SOAR
D3 lists its Vancouver office as headquarters at #300, 1075 W Georgia St, Vancouver, British Columbia, Canada.
What it is
D3 SOAR, also called D3 Smart SOAR, is a security operations platform for automating workflows and incident response. Its Event Pipeline normalizes, removes duplicates, triages, and enriches alerts, with D3 claiming up to a 99% reduction in events that need human attention. A codeless playbook editor, ready-made library, and reusable automation blocks support response workflows. Smart SOAR connects with hundreds of tools across SIEM, EDR, NDR, TIP, and ITSM categories, and D3 says missing integrations can be built free of charge. Threat intelligence platforms provide IOC reputation results that contribute to an overall risk score. Existing playbooks cover phishing, ransomware, and password resets. Full multi-tenancy is intended for MSSPs and MDR firms. Deployment is available on premises or as D3-hosted SaaS. Pricing is paid and available on request. The platform supports approvals, scheduled runs, event triggers, incident integrations, and audit logs.
For and against
For
- Event Pipeline triages and enriches alerts
- Codeless playbook editor and reusable blocks
- Hundreds of security and IT integrations
- Full multi-tenancy for MSSPs and MDR firms
- On-premises or hosted SaaS deployment
Against
- Paid pricing requires a request
- Some integrations may need to be built
- Deployment options require platform administration
The verdict
D3 SOAR combines alert processing, playbook automation, threat intelligence, and multi-tenant operations. It is a fit for organizations seeking configurable response workflows across many security tools.
Who it suits
It suits security teams, MSSPs, and MDR firms that need automated incident workflows, broad integrations, and self-hosted or hosted deployment.
Plans and prices
D3 Smart SOAR
SaaS or on-premises software-only deployment · hundreds of integrations · custom integrations built free of charge
Read 30 Sep 2026 · d3security.com
On the record
- Company history
- D3's about page says founder Gordon Benoit built its first incident response automation solution in 2015.d3security.com · read 30 Sep 2026
- Deployment
- Smart SOAR can run as on-premises software or as a SaaS service hosted by D3.d3security.com · read 30 Sep 2026
- Event Pipeline
- The Event Pipeline normalizes, deduplicates, triages, and enriches alerts, with the maker claiming up to a 99% reduction in events requiring human attention.d3security.com · read 30 Sep 2026
- Integrations
- Smart SOAR integrates with hundreds of tools across SIEM, EDR, NDR, TIP, and ITSM categories, and D3 says it will build missing integrations free of charge.d3security.com · read 30 Sep 2026
- MSSP support
- Smart SOAR supports full multi-tenancy and is positioned for MSSPs and MDR firms.d3security.com · read 30 Sep 2026
- Playbooks
- Smart SOAR includes a codeless playbook editor, an out-of-the-box library, and reusable automation blocks.d3security.com · read 30 Sep 2026
- Purpose
- D3 Smart SOAR automates security operations workflows and incident response.d3security.com · read 30 Sep 2026
- Security certification
- The product page displays a SOC 2 Type II certified badge for D3.d3security.com · read 30 Sep 2026
- Support
- D3's customer success program describes Customer Success Manager support, implementation planning, training, integration optimization, and technical documentation.d3security.com · read 30 Sep 2026
- Supported use cases
- Out-of-the-box playbooks and integrations cover phishing, ransomware, and password resets.d3security.com · read 30 Sep 2026
- Threat intelligence
- It enriches incidents with IOC reputation results from threat intelligence platforms and applies those results to an overall risk score.d3security.com · read 30 Sep 2026
