BlinkOps

BlinkOps builds Blink, an agentic security operations platform with a no-code workflow builder and a no-code agent builder, and says it ships 500+ pre-built agent templates. Its pricing page returned 403 during research and no customer is named. Every workflow has a YAML view, and Blink describes its Splunk SOAR import as a four-week plan.

What it is

BlinkOps builds Blink. The home page says Blink is used across nine domains, from SOC and cloud security to GRC and ITSM, and that it ingests alerts from SIEM, EDR, cloud, identity and email tools, investigates each one and returns a case with evidence, a severity assessment and a recommended action (vendor claim, read 2026-11-03). The customer decides which agents act alone and which wait for a person. BlinkOps closed a USD 50M Series B in July 2025. The integration count is unresolved: the vendor record holds 30,000, and research found third-party figures of 30,000 integrations against 7,000 workflows and 500 agent templates.

The playbook artefact is workflow YAML. Every workflow has a YAML representation with a name, a type of Flow or Subflow, a workflow_type of on_demand, event or scheduled, an active flag, a description, connections and a workflow section of action steps. The editor offers Edit YAML. Re-import of that YAML is not documented on the page read. A library automation describes importing from a Git repository with a Blink command line tool, and the REST API lists batch copy and batch move of playbooks between workspaces and lists playbook versions by branch.

The vendor describes itself this way: Blink is an agentic security operations platform. It ingests alerts from SIEM, EDR, cloud, identity and email tools, investigates each one, and returns a case with supporting evidence, a severity assessment and a recommended action. The customer decides which agents act alone and which wait for a person. blinkops.com, read 2026-11-03 (vendor claim)

How BlinkOps scores

Nine rows, weights summing to 100, each scored 0 to 10 from pages read on 2026-11-03. The part is score times weight divided by 100. How the scoring works.

Where BlinkOps is strong

• A no-code workflow builder and a no-code security AI agent builder are documented, and agents run inside workflows. Authoring scores 8.0. docs.blinkops.com, read 2026-11-03
• BlinkOps is independent, and announced a USD 50M Series B in July 2025. blinkops.com, read 2026-11-03
• The workflow YAML names its trigger kind, on_demand, event or scheduled, so scheduled jobs are a first-class workflow type and not an afterthought. docs.blinkops.com, read 2026-11-03

Where BlinkOps is behind

• No price is published. The pricing page returned 403 to WebFetch and curl, testimonials are anonymous, and the customers page also returned 403. blinkops.com, read 2026-11-03
• Case management and approvals were not found on the docs page read, and each scores 4.0 and is flagged for a re-read. The home page says only that the customer decides which agents act alone, a vendor claim. docs.blinkops.com, read 2026-11-03
• Blink says its import tooling maps Splunk SOAR playbooks, custom functions and SplunkBase apps on a four-week plan. No technical page was found, and re-import of exported YAML is not documented. go.blinkops.com, read 2026-11-03

A fact only BlinkOps has

BlinkOps documents every workflow as YAML with a type of Flow or Subflow and a workflow_type of on_demand, event or scheduled, but the page read does not say whether exported YAML can be re-imported. docs.blinkops.com, read 2026-11-03

Pricing as published

Usage-based, single price for the full platform, per Blink's own blog (no per-log, per-seat or per-alert line items). No price or tier is published. blinkops.com/pricing, /integrations and /customers returned 404 on 2026-11-04. blinkops.com, read 2026-11-04 (vendor claim)

Ownership and funding

BlinkOps announced a USD 50 million Series B on 2025-07-28, led by O.G. Venture Partners with Lightspeed Venture Partners, Hetz Ventures and Vertex Growth, and said total funding was USD 90 million. It also said dozens of Fortune 500 customers use its no-code security micro-agent builder. businesswire.com, read 2026-11-04 (vendor claim)

Blink's own 2025-10-30 blog says Series B 'bringing the total funding amount to $100 million', which conflicts with USD 90 million in the Series B release. Same blog says headcount grew by over 100 in a year and expansion into EMEA. blinkops.com, read 2026-11-04 (vendor claim)

Searches for acquired, acquires and funding on 2026-11-04 found funding news only (2025 Series B) and no acquisition of or by BlinkOps. blinkops.com, read 2026-11-04

Named customers

• Fortune 100 U.S. airline (unnamed; SOC leader testimonial) source, read 2026-11-03 (vendor claim)
• Fortune Global 500 technology company (unnamed; testimonial) source, read 2026-11-03 (vendor claim)
• Publicly traded U.S. apparel group (unnamed; Data Security Leader testimonial) source, read 2026-11-04 (vendor claim)
• Global cybersecurity company (unnamed; GRC Leader testimonial) source, read 2026-11-04 (vendor claim)

Claims BlinkOps makes about itself

These are vendor claims. They are not scored. Each carries an evidence grade: C means a vendor figure with no published method.

What the public pages did not say

• 2026 event appearances (RSAC 2026, Black Hat 2026 booth) come from search results and were not opened. Not recorded.
• No accuracy, auto-closure or false-positive claim found on the pages read.
• On 2026-11-04 Firecrawl (stealth proxy) reached blinkops.com but /pricing, /integrations and /customers returned 404 (the earlier 403 was a bot block on curl and WebFetch). No price, tier or customers page was readable; /blog, /newsroom and /partner-program were read from search results.
• No customer is named. All testimonials are anonymous.
• Funding totals conflict (USD 90 million in the Series B release, USD 100 million in Blink's later blog). Founding year and legal entity name not found.
• Pricing is described as usage-based, but the usage unit (actions, runs, agents, alerts) and any minimum are not stated.

Gaps recorded on 3 November 2026. A gap is an absence on the pages read, and it is scored that way.

Who should shortlist BlinkOps

• You are leaving Splunk SOAR and want a vendor with a dedicated four-week plan, treated as a claim until a proof of concept runs it.
• You want agents inside workflows and workflow definitions you can read as YAML.
• You can accept undocumented price, hosting and case model until sales supplies them.

Verdict. BlinkOps is eleventh of 14 scored at 5.82, in a band with Google Security Operations (5.98), with four rows flagged for a re-read.

BlinkOps against the other eleven

• BlinkOps v Cyware
• BlinkOps v D3 Security
• BlinkOps v Google Security Operations
• BlinkOps v Mate Security
• BlinkOps v Microsoft Sentinel
• BlinkOps v Palo Alto Cortex XSOAR
• BlinkOps v ServiceNow Security Operations
• BlinkOps v Splunk SOAR (Cisco)
• BlinkOps v Swimlane (Turbine)
• BlinkOps v Tines
• BlinkOps v Torq

Alternatives to BlinkOps, ordered by the rubric.