Swimlane (Turbine)
6.14 of 10 on the nine published rows. 9th of 12 covered, 9th of 14 scored. SOAR. Scores read 3 November 2026.
Swimlane is a low-code SOAR, sold as Turbine, with a drag-and-drop Canvas, Python and HTTP calls to any API, and Hero AI agents added in January 2026. The pages read publish no price, no integration count and no deployment model. Playbooks export as .ssp packages that only system administrators can move.
What it is
Swimlane sells Turbine, a low-code automation platform. The home page says Turbine routes each alert to deterministic playbooks, AI-assisted investigation or fully agentic investigation (vendor claim). Swimlane announced a fleet of Hero AI agents and an Agent Builder on 2026-01-27, and a Turbine release in August 2026 added model selection and bring-your-own-model (syndicated Business Wire copy, read 2026-11-03). Swimlane is independent and raised USD 45M in June 2025.
The playbook artefact is the Swimlane solution package, a .ssp file. A Turbine playbook export brings its parent and nested playbooks. The 10x user guide says a package carries workflow, reports, workspaces, dashboards, integrations with output mappings, assets and plugins, and leaves out application history, records, key-store secrets and secure asset values. Only system administrators can export or import. Turbine can sync its library to a GitHub or GitLab repository, with no branching. Swimlane marketing says it migrates up to 90 percent of workflows from other SOARs automatically, a vendor claim with no technical page.
The vendor describes itself this way: Swimlane Turbine is an agentic AI automation platform for security operations. It routes each alert to deterministic playbooks, AI-assisted investigation or fully agentic investigation. swimlane.com, read 2026-11-03 (vendor claim)
How Swimlane (Turbine) scores
Nine rows, weights summing to 100, each scored 0 to 10 from pages read on 2026-11-03. The part is score times weight divided by 100. How the scoring works.
| Row | Score | Weight | Part | Reason and source |
|---|---|---|---|---|
| Playbook authoring model | 8.0 | 14 | 1.12 | Low-code drag-and-drop Canvas plus Python (inputs, AI-generated Python, file transforms) and HTTP calls to any API without a connector. swimlane.com, read 2026-11-03 |
| Integration count and depth documented | 5.0 | 14 | 0.70 | No count published; page says 'infinite integrations', which is not a number. Supports third-party MCP server tools. swimlane.com, read 2026-11-03 (vendor claim) |
| Case management and collaboration | 6.0 | 8 | 0.48 | Case management is listed as part of Turbine with no detail on the page read. Re-read pending. swimlane.com, read 2026-11-03 |
| Approvals and human-in-the-loop controls | 6.0 | 12 | 0.72 | Hero AI asks for user confirmation before key actions (September 2025 coverage); the Swimlane page names 'guardrails' but no approval workflow. Re-read pending. swimlane.com, read 2026-11-03 (search summary only); siliconangle.com, read 2026-11-03 (search summary only) |
| Agentic or AI features that are documented | 8.0 | 12 | 0.96 | Hero AI agents, a Playbook Generator and an Agent Builder; agents can replace several deterministic steps inside a playbook (January 2026). siliconangle.com, read 2026-11-03 (vendor claim) (search summary only); swimlane.com, read 2026-11-03 (vendor claim) (search summary only) |
| Hosting and data residency options | 3.0 | 8 | 0.24 | Not found in the pages read on 2026-11-03. Deployment model and data residency are not on the page read. Re-read pending. swimlane.com, read 2026-11-03 |
| Pricing model and transparency | 3.5 | 8 | 0.28 | No price. Page offers 'up to a year free' without terms. swimlane.com, read 2026-11-03 (vendor claim) |
| Migration tooling and import or export formats | 6.0 | 14 | 0.84 | Swimlane's migration page, read 2026-11-03, names Cortex XSOAR, Splunk SOAR, D3 Security and FortiSOAR as sources and claims up to 90 percent of workflows migrate automatically (vendor claim, marketing page, no method). The platform exports a .ssp solution package. A competitor says Swimlane's schema-held rules do not port, a claim about a rival. swimlane.com, read 2026-11-03 (vendor claim); swimlane.com, read 2026-11-03 |
| Ownership stability | 8.0 | 10 | 0.80 | Independent; raised USD 45M in June 2025. No acquisition found in the search read. businesswire.com, read 2026-11-03 |
| Total | 6.14 | 100 | 6.14 | Band 4 on the card; totals within 0.25 are a band, not a ladder. |
Where Swimlane (Turbine) is strong
- Authoring is low-code Canvas plus Python, including AI-generated Python and file transforms, and HTTP calls to any API without a connector. Authoring scores 8.0. swimlane.com, read 2026-11-03
- Per the January 2026 release, Turbine playbooks act as orchestrators and guardrails for Hero AI agents, and agents can replace several deterministic steps inside a playbook. A Playbook Generator and an Agent Builder are named. businesswire.com, read 2026-11-03
- Swimlane is independent, with USD 45M raised in June 2025 and no acquisition found in the search run on 2026-11-03. businesswire.com, read 2026-11-03
Where Swimlane (Turbine) is behind
- Deployment model and data residency are not on the pages read, so hosting scores 3.0 and is flagged for a re-read. swimlane.com, read 2026-11-03
- No price is published and the pricing URL returned 404 on 2026-11-03. The page says "infinite integrations", which is not a number, and publishes no count. swimlane.com, read 2026-11-03
- The .ssp export is admin-only and drops history, records and secrets. No export to another vendor format is documented, and no technical page backs the 90 percent migration claim. docs.swimlane.com, read 2026-11-03
A fact only Swimlane (Turbine) has
Swimlane says Turbine chooses, alert by alert, between a deterministic playbook, an AI-assisted investigation and a fully agentic one, which is a vendor claim with no published method. swimlane.com, read 2026-11-03
Pricing as published
No price is published on the home page read. The pricing URL (swimlane.com/pricing/) returned 404 on 2026-11-03. swimlane.com, read 2026-11-03
Ownership and funding
Named customers
- Lincoln Financial Group source, read 2026-11-03 (vendor claim)
- Comcast source, read 2026-11-03 (vendor claim)
- BMW source, read 2026-11-03 (vendor claim)
- Caterpillar source, read 2026-11-03 (vendor claim)
- Capgemini source, read 2026-11-03 (vendor claim)
- Amgen source, read 2026-11-03 (vendor claim)
- Harvard University source, read 2026-11-03 (vendor claim)
- Prudential Financial source, read 2026-11-03 (vendor claim)
- Victrix source, read 2026-11-03 (vendor claim)
- AHEAD source, read 2026-11-03 (vendor claim)
- Softcat source, read 2026-11-03 (vendor claim)
- ProCircular source, read 2026-11-03 (vendor claim)
3 more names appear on the vendor's pages.
Recent releases
- 2026-08 Turbine release: intelligent routing for the AI SOC, with model selection and bring-your-own-model. Routes each alert to automation, AI-assisted investigation or fully agentic investigation. Adds model selection to manage AI costs and lets customers bring their own model. Read from the release on the Swimlane newsroom. swimlane.com, read 2026-11-04 (vendor claim)
- 2026-02-18 Swimlane announces AI SOC product, available now. Announced through SiliconANGLE coverage. Primary release not opened. siliconangle.com, read 2026-11-03 (vendor claim)
- 2026-01-27 Swimlane unveils fleet of Hero AI agents and Agent Builder. Turbine playbooks act as orchestrators and guardrails for the AI agents, per the release. Business Wire page returned 403 on fetch; date and title from the search result. businesswire.com, read 2026-11-03 (vendor claim)
Claims Swimlane (Turbine) makes about itself
These are vendor claims. They are not scored. Each carries an evidence grade: C means a vendor figure with no published method.
| Claim | Grade | Source |
|---|---|---|
| Cuts investigation cost by 90 percent while investigating 180 threats per day (unnamed healthcare customer) | C | swimlane.com, read 2026-11-03 (vendor claim) |
| Hero AI reduces MTTR by 75 percent and closes cases autonomously | C | swimlane.com, read 2026-11-03 (vendor claim) |
| Adds 20x analyst capacity while cutting costs up to 90 percent | C | swimlane.com, read 2026-11-03 (vendor claim) |
| Thetabyte: 70 percent incident response time reduction, threats contained in under 5 minutes | C | swimlane.com, read 2026-11-03 (vendor claim) |
| Victrix: 100 percent AI recommendation accuracy | C | swimlane.com, read 2026-11-03 (vendor claim) |
| AHEAD: 30 percent reduction in alerts with alert correlation | C | swimlane.com, read 2026-11-03 (vendor claim) |
What the public pages did not say
- No published price. The pricing URL returned 404 on 2026-11-03.
- Business Wire primary pages returned 403. The release dates for 2026-01-27 and 2026-08 come from search results and a syndicated copy, not the primary page.
- The customer names from the home page were read from a model-summarized fetch, not the raw HTML. Check the logo wall before publishing.
- Ownership search run. No acquisition or rename found in the last 18 months. A June 2025 funding round of $45M (Business Wire, seen in search) is financing, not an ownership change, and was not opened.
- Search snippets from swimlane.com news pages (94 percent of Tier 1 and Tier 2 alerts automated; 60,000 analyst-equivalent capacity) were not opened and are not recorded.
- No independent measurement of Hero AI or AI SOC accuracy found. Every number is a vendor claim or a customer testimonial.
Gaps recorded on 3 November 2026. A gap is an absence on the pages read, and it is scored that way.
Who should shortlist Swimlane (Turbine)
- You want a low-code Canvas with Python where needed and the option to hand some steps to an agent inside a playbook.
- You are leaving XSOAR, Splunk SOAR, D3 or FortiSOAR and want a destination that names those sources on a migration page, with the 90 percent claim tested on your own playbooks.
- You can get price, hosting and integration detail from sales before you decide.
Verdict. Swimlane is ninth of 14 scored at 6.14, in a band with Mate Security (6.22), Microsoft Sentinel (6.21), Palo Alto Cortex XSOAR (6.18) and Google Security Operations (5.98); it earns its authoring, ownership and migration scores (6.0, a vendor page that names four source SOARs) and loses on hosting and pricing.
Moving playbooks out of Swimlane (Turbine)
Swimlane (Turbine) is a source row in the portability matrix: 7 of 70 cells have a documented path. Source format: .ssp solution packages (docs.swimlane.com, read 2026-11-03). The switching guide is Leaving Swimlane (Turbine).
Swimlane (Turbine) against the other eleven
- BlinkOps v Swimlane (Turbine)
- Cyware v Swimlane (Turbine)
- D3 Security v Swimlane (Turbine)
- Google Security Operations v Swimlane (Turbine)
- Mate Security v Swimlane (Turbine)
- Microsoft Sentinel v Swimlane (Turbine)
- Palo Alto Cortex XSOAR v Swimlane (Turbine)
- ServiceNow Security Operations v Swimlane (Turbine)
- Splunk SOAR (Cisco) v Swimlane (Turbine)
- Swimlane (Turbine) v Tines
- Swimlane (Turbine) v Torq
Alternatives to Swimlane (Turbine), ordered by the rubric.