Number of Seats/Users: IncMan SOAR offers discounts based on the number of users or seats. A higher volume typically leads to a better discount structure, especially for enterprise-level usage.

Commitment to a Long-Term Contract: Discounts are often provided to companies that commit to using the service for a longer period (e.g., 1-year or 3-year contracts). A longer commitment shows IncMan SOAR that the company is serious and willing to invest in the platform long-term.

No Active Discounts: Companies that are not already receiving other active discounts may have a better chance of qualifying for additional discounts from IncMan SOAR. IncMan SOAR reserves discounts for new customers or those not currently under promotional pricing.

Volume or Usage Commitment: IncMan SOAR offers discounts if you agree to a minimum amount of usage or transaction volume. This could be based on data storage, transactions, or other metrics tied to how much you will use the platform.

Enterprise-Level Negotiation: Companies that qualify as “enterprise” due to their size or complexity (e.g., having large teams, multiple departments, or geographical presence) may be eligible for additional discounts from IncMan SOAR. Such companies are often in a position to negotiate for better pricing.

Early Renewal or Prepayment: IncMan SOAR often offers discounts if you renew early or prepay for the entire contract period. This is a common approach to securing a lower price.

Here at Spendbase our internal data shows that IncMan SOAR is seen as a powerful, enterprise‑grade SOAR platform that delivers strong value once it’s properly implemented and adopted by the team.

Key strengths our Spendbase clients point out:

• Automation & Playbooks
• Playbooks are the standout feature: they help automate repetitive SecOps tasks and document incident response processes.

• Clients report:

  • Faster incident resolution
  • Reduced manual workload
  • Better standardization of SOC workflows

• Integrations & Openness

• Strong ability to integrate with many security and IT tools.
• Open Integration Framework and API actions that are easy to build in common languages.

• Good fit for environments with multiple existing security products.

• Incident Management & Reporting

• Detailed incident views with IOCs, timelines, and executed actions.
• Support for triage, digital forensics, and case management.

• Customizable KPIs and reports that management can easily consume.

• Ease of Use (after onboarding)

• Once teams get used to it, many call the interface user‑friendly and the workflows intuitive.

• Training (for example, 4‑day courses) is mentioned as very helpful in unlocking the platform’s value.

• Vendor Support

• Consistent praise for responsive, high‑quality technical support.
• Clients feel their feedback is quickly reflected in new versions.

Main friction points our clients highlight:

• Learning Curve & Complexity
• It’s a robust, complex platform; you need to understand IncMan’s concepts before real‑life implementation.

• Initial configuration can feel heavy and jargon can be intimidating for new users.

• Documentation

• Several clients would like:

  • More complete and detailed technical documentation
  • A clear quick‑start guide to speed up adoption

• Deployment Options

• Some are waiting for a SaaS version, which could reduce infrastructure and maintenance overhead.

From a Spendbase discount and cost‑optimization angle, this pattern is clear:
teams that invest early in training and integration design see higher ROI, with significant savings in analyst time and faster incident handling. When we negotiate pricing or renewals for IncMan SOAR, we typically focus on:

• Ensuring access to training and support in the package
• Aligning license tier with integration scope and SOC size
• Planning for growth in automation usage over time

Overall, our clients view IncMan SOAR as a high‑impact tool, especially for mature SOCs ready to lean heavily into automation.