Security Orchestration and Automation tools seek to bridge the gap between alert overload and analyst capacity by automating the detection, investigation, and remediation workflow, freeing skilled cyber professionals to focus on higher-value work. This mismatch between alerts and capacity causes many attacks to go undetected and lengthens attacker dwell time, increasingly leading to mega-breaches that destroy reputations and shareholder value. The security orchestration segment is forecasted to grow from $826M in 2016 to $1.7B by 2021, a 15.3% CAGR, with nearly 80% of companies believing that orchestration / automation tools would enable them to investigate more alerts. This report takes a closer look into the market as well as companies in the ecosystem, M&A and private placement activity.