ManageEngine, the enterprise IT management division of Zoho Corporation, has announced a major upgrade to its Log360 security platform, adding built-in security orchestration, automation, and response (SOAR) capabilities aimed at helping companies respond faster to cyber threats.
The update introduces native SOAR tools, seven new integrations with leading cybersecurity vendors, and cross-domain orchestration features that combine threat detection, AI-powered investigation, and automated response into a single platform.
The announcement comes as security operations centers (SOCs) face growing pressure from increasingly complex cyberattacks and an overload of disconnected security tools. Many organizations struggle with multiple systems that operate separately, creating delays for analysts who must manually piece together information before responding to threats.
ManageEngine said the new architecture is designed to solve that problem by allowing AI investigation tools and automated response systems to work from the same shared data model.
“The next evolution in security operations is about rethinking the architecture so that AI, detection, and response share the same foundation,” said Manikandan Thangaraj. He added that the new setup removes the need for “API handoffs” and manual context rebuilding, enabling security teams to move more quickly from identifying a threat to taking action.
Among the new features is a library of prebuilt automated response playbooks that can be deployed immediately. These workflows can isolate compromised devices, revoke user access, enrich incidents with threat intelligence, open service tickets, and notify security teams automatically.
The platform also supports deeper customization through Zoho’s low-code workflow platform, Qntrl, as well as advanced scripting options using Python and Deluge.
Another key addition is broader endpoint coverage, allowing Log360 to combine endpoint, identity, and cloud telemetry into a unified response system. This is intended to help organizations detect and contain attacks across multiple environments from a single console.
Industry analysts view moves toward integrated AI-driven security automation as increasingly important as companies adopt more cloud services and face a shortage of cybersecurity professionals. By consolidating detection, investigation, and response into one system, vendors hope to reduce response times and ease pressure on security teams.
The new SOAR capabilities are available exclusively in the Enterprise edition of Log360. ManageEngine is also offering a fully functional 30-day trial version for customers evaluating the platform.
