Tines
by Tines
No-code security automation and SOAR platform. Tines is a no-code automation platform built specifically for security operations and IT teams. Founded in 2018 in Dublin by Eoin Hinchy and Thomas Kinsella, both former DocuSign security engineers, Tines treats incident response, phishing triage, vulnerability management, and SOC2 evidence collection as composable workflows ("stories") rather than scripts.
Performance Scores
1 ranking evaluated
Score range: 7.6 – 7.6
-
#7Best AI Agent Platforms in 2026
Score: 7.6 · Best for: Security operations AI automation and SOAR
Key Facts
pricing
| Attribute | Value | As of | Source |
|---|---|---|---|
| Tines pricing (July 2026) | Tines pricing (verified July 2026): a free Community Edition (1 builder + 3 flows, unlimited viewers/runs/integrations, SSO), plus quote-based "Business and Enterprise" and specialized editions (Federal / SLED / MSSP). There is no public "Professional" tier and no published price; paid pricing is custom, historically starting around $50,000+/year for small teams. | Jul 2026 | Tines pricing |
| Community Edition | Community edition free as of July 2026: 1 builder, 3 workflows, unlimited viewers, integrations, and parallel runs; SSO included | Jul 2026 | Tines pricing page |
| Enterprise Pricing | Enterprise pricing is quote-based as of 2026; published list pricing is not available | Jul 2026 | Tines pricing page |
General
| Attribute | Value | As of | Source |
|---|---|---|---|
| Security Tool Integrations | No fixed count published as of July 2026 — Tines connects to any tool with an HTTP API and offers pre-built library examples rather than counted integrations | Jul 2026 | Tines library tools page |
| Compliance | SOC 2 Type II certified | Apr 2026 | Tines |
| Funding | Raised over $119 million in total funding, including an $83 million Series B in 2022, achieving a $900 million valuation | Mar 2026 | Tines |
| Founded | 2018 | Apr 2026 | Tines |
| Headquarters | Dublin, Ireland | Apr 2026 | Tines |
| Security-First Origin | Originally built for security orchestration, automation, and response (SOAR); now positioned as an 'intelligent workflow platform' serving IT operations, infrastructure, and engineering teams while retaining a dedicated security focus ('born in security, used by everyone') as of July 2026 | Jul 2026 | Tines About page and tines.com homepage |
| Customer Base | Used by security and IT teams at Databricks, GitLab, Mars, Coinbase, and Elastic (named in the February 2025 Series C announcement); Tines describes its customer base as spanning Fortune 10 companies to startups (as of July 2026) | Jul 2026 | Tines Series C press release (PR Newswire, 2025-02-11) and tines.com homepage |
company
| Attribute | Value | As of | Source |
|---|---|---|---|
| Customer Count | Tines publishes no customer count as of July 2026; vendor states 1B+ automated actions run weekly, with customers including Coinbase, Databricks, and Reddit | Jul 2026 | Tines Series C announcement (Feb 2025) + tines.com pricing page logos |
| Funding history | Superseded by $125M Series C (February 2025) led by Goldman Sachs with SoftBank participation, at a ~$1.13B valuation (unicorn status) | Jul 2026 | Tines newsroom |
capability
| Attribute | Value | As of | Source |
|---|---|---|---|
| Platform Type | Positioned as an 'intelligent workflow platform' as of July 2026 — SOAR-origin, no-code workflows plus deterministic automation and agentic AI for security and IT teams | Jul 2026 | Tines homepage |
technical
| Attribute | Value | As of | Source |
|---|---|---|---|
| Integration library | 200+ named integrations plus arbitrary REST/GraphQL via HTTP Request action | Jul 2026 | Tines sitemap (library/tools) + Tines docs |
features
| Attribute | Value | As of | Source |
|---|---|---|---|
| AI feature | Workbench AI front-end launched in 2024, scoped to customer tenant | Jul 2026 | Tines newsroom + Workbench product page |
Strengths
- ●Purpose-built security automation
- ●Free community edition
- ●SOC 2 Type II certified
- ●30+ security tool integrations
Limitations
- ●Narrowly scoped to security operations
- ●Opaque enterprise pricing ($50K+/year)
- ●Learning curve assumes security expertise
Based on evaluations in 1 ranking: Best AI Agent Platforms in 2026
About Tines
Tines is a no-code automation platform built specifically for security operations and IT teams. Founded in 2018 in Dublin by Eoin Hinchy and Thomas Kinsella, both former DocuSign security engineers, Tines treats incident response, phishing triage, vulnerability management, and SOC2 evidence collection as composable workflows ("stories") rather than scripts. The company raised a $50M Series B in 2022 led by Felicis Ventures, reaching a reported $300M valuation, and has continued to ship enterprise features without re-priced funding rounds disclosed publicly through May 2026.
A Tines story is a directed graph of seven action types: Webhook, HTTP Request, Event Transform, Trigger, Send to Story, IMAP, and Email. Stories are versioned, can be exported as JSON, and can call any REST or GraphQL endpoint, which means the integration surface is effectively unbounded; the published library covers 200+ named tools (CrowdStrike, SentinelOne, Splunk, PagerDuty, Okta, Microsoft Graph) but custom HTTP actions cover the rest. Each action runs in an isolated container, and the platform records full event history for audit and replay.
Pricing has two anchors. The Community Edition is free for individuals and small teams, with limits on story complexity and concurrent runs but no time limit. Enterprise plans are quote-based; ShadowGen's view across multiple procurement cycles is that annual contracts typically land between $50,000 and $180,000 depending on seats, story volume, and SSO/SAML requirements. Tines does not bill per action, which is the main pricing differentiator from incumbent SOAR vendors (Splunk SOAR, Palo Alto XSOAR) where per-event consumption can dominate the bill.
In 2024 Tines added an AI workbench (Workbench), which lets analysts query stories and run common SOC tasks through an LLM front-end constrained to the customer's Tines tenant. The platform is SOC 2 Type II certified and is used in production by Box, Canva, Databricks, Mars, Reddit, and McKesson among others; as of July 2026 the company no longer publishes a customer count, stating instead that 1B+ automated actions run weekly.
flowchart LR
A[SIEM alert] -->|Webhook| B[Tines Story]
B --> C{Severity?}
C -- High --> D[Page on-call via PagerDuty]
C -- Medium --> E[Open Jira ticket]
C -- Low --> F[Auto-close, log to S3]
D --> G[Enrich via VirusTotal]
E --> G
G --> H[Post summary to Slack]
Editor's Note: A 110-person fintech client moved phishing triage from a 9-step Splunk Phantom playbook to a 6-action Tines story in 2025; mean-time-to-disposition fell from 14 minutes to 2 minutes 40 seconds across 3,200 sampled emails, and false-positive auto-closures stayed below 0.4%. Where it bites: the no-code abstraction tempts non-engineers to build stories without a second-pair review, and one client shipped a story that auto-acknowledged any alert containing the word "test", which an attacker can trivially set. Treat Tines stories as production code: peer review, staging tenant, signed exports. — Rafal Fila, ShadowGen
Integrations (6)
Other Workflow Automation Tools
Activepieces
No-code workflow automation with self-hosting and AI-powered features
Workflow AutomationAutomatisch
Open-source Zapier alternative
Workflow AutomationBardeen
AI-powered browser automation via Chrome extension
Workflow AutomationCalendly
Scheduling automation platform for booking meetings without email back-and-forth, with CRM integrations and routing forms for lead qualification.
Workflow AutomationSee How It Ranks
Best Automation Platforms for AI Orchestration 2026
This ranking answers one question: how many real business applications can an AI agent act on out of the box? It evaluates nine platforms as of August 2026 on the reach they give an agent, not on the workflow logic they can express. That boundary is deliberate, because two neighbouring pages on this site answer different questions. Best Process Orchestration Platforms 2026 scores multi-step process control, error handling and state management. Best AI Agent Platforms 2026 scores building and hosting the agent itself. This page scores the layer between them: the connective tissue that lets an agent already built elsewhere reach the applications a business actually runs on. A platform that leads one of those pages can place low here, and two of them do. Scores derive from application and action catalogue counts, the exposure model each platform uses to publish those catalogues to an agent, setup effort, failure handling and cost per agent action. Every figure was retrieved from a vendor-owned surface on 11 August 2026 unless an earlier date is stated against it.
Best Durable Workflow Engines for Production in 2026
A ranked list of the best durable workflow engines for production deployments in 2026. Durable workflow engines persist execution state to a database so that long-running workflows survive process restarts, deployments, and infrastructure failures. The ranking covers Temporal, Prefect, Apache Airflow, Camunda, Windmill, and n8n. Tools were evaluated on production reliability, developer experience, scalability, open-source health, and documentation quality. The shortlist intentionally mixes code-first engines (Temporal, Prefect, Airflow) with hybrid visual platforms (Camunda, Windmill, n8n) to reflect how production teams actually choose workflow engines in 2026.
Questions About Tines
What are the best automation tools for support engineers in 2026?
Support engineers in 2026 typically combine Zendesk or Intercom (ticketing automation and macros), Tines or n8n (incident and runbook automation), and PagerDuty plus Jira (escalation and engineering handoff). The split between customer-facing automation and internal incident automation matters more than picking a single tool.
What is SOAR and which platforms lead in 2026?
SOAR (Security Orchestration, Automation and Response) is a category of platforms that connect security tools and automate analyst workflows like triage, enrichment, and containment. As of May 2026, market leaders include Tines, Torq, Swimlane, Splunk SOAR (formerly Phantom), and Palo Alto Cortex XSOAR (formerly Demisto), with vendor-bundled options inside Microsoft Sentinel and Google Chronicle filling the SIEM-attached segment.
Tines vs Torq vs Swimlane: which SOAR fits in 2026?
Tines is the strongest pick for mid-market SOCs that want low-code playbooks and lightweight case management. Torq fits cloud-native SecOps teams that need deep integration breadth and per-execution pricing. Swimlane suits regulated enterprises that need built-in case management, FedRAMP-authorised hosting, and code-level extensibility, as of May 2026.
Torq vs Tines: which SOAR platform is better in 2026?
Torq (founded 2020, NYC/Tel Aviv) is a hyper-automation SOAR with 350+ integrations and quote-based enterprise pricing, suited to cloud-native security operations. Tines (founded 2018, Dublin/Boston) is a no-code workflow platform with 500+ integrations, a free Community Edition, and self-host options, suited to teams that prefer HTTP-first integration and gradual ramp-up.
Learn More
How to Choose an SOAR Platform in 2026: Decision Framework
A six-step decision framework for selecting an SOAR (Security Orchestration, Automation and Response) platform in 2026. Covers SecOps maturity, integration inventory, case management style, pricing models, deployment options, and low-code vs code build preferences, with shortlist guidance for both mid-market and enterprise SOCs.
Torq vs Tines 2026: SOAR Platforms Compared
Torq (2020, NYC/Tel Aviv) is a hyper-automation SOAR with 350+ integrations and quote-based enterprise pricing. Tines (2018, Dublin/Boston) is a no-code workflow platform with 500+ integrations, a free Community Edition, and self-host options. This 2026 comparison covers founders, pricing, integrations, deployment, and target verticals.