SOAR can operate on Premises, that is called "Splunk SOAR (On-premises)" https://docs.splunk.com/Documentation/Phantom/5.0.1/PhantomIsNowSOAR/SplunkPhantomisnowSplunkSOAR or in Splunk Cloud Environment, that is called "Splunk SOAR (Cloud) Service" https://docs.splunk.com/Documentation/SOAR/current/ServiceDescription/SplunkSOARService Even when the binaries tend to be the same, in the Cloud environment, versions are released more often and some of them will become onPremises version as well.
... View more