In order to satisfy the scaling needs of SOCs who deal with exceptional amounts of data, Chronicle SOAR supports scale out architecture by deploying system modules on separate servers. This makes it possible to combine system components in different deployment combinations and customize deployment by customer requirements.

The system can be scaled by adding an additional node which adds up to 25k alerts per day.