Threat Centric or Alert Centric: What's the Best Strategy for SOAR in the SOC? Siemplify Sep 25, 2019 Siemplify Share: Share on Facebook Share on Twitter Share on LinkedIn Share through email Where SOAR vendors differ is how they deliver, or attempt to deliver, their value. While user interfaces differ, and investigation capabilities may vary, at the core a SOAR solution is either alert-centric or threat-centric.