Tines
6.42 of 10 on the nine published rows. 5th of 12 covered, 5th of 14 scored. SOAR with agents. Scores read 3 November 2026.
Tines is a no-code workflow platform where security and IT teams build stories that connect tools and AI models, with a Cases add-on and an AI SOC page. A free edition is published and paid prices are by demo. Stories export as JSON without credentials or event data. A reported USD 125M round values it near USD 1.1B.
What it is
Tines describes itself as a no-code workflow platform. Its docs cover stories, actions, credentials, events, formulas, pages, apps, cases, records, dashboards, admin, self-hosted deployment and an MCP server, and the home page says customers choose which AI models their teams use (vendor claim). The product names its current line Tines 3B. A story is the unit of work, and a story library is shared on the site. Tines is independent, and PYMNTS reports a USD 125M round valuing it near USD 1.1B (read through a search summary).
The playbook artefact is the story file, exported as JSON. The file holds actions with their sources and receivers and leaves out event data, resources and credentials. Export options randomise page and webhook URLs and clear email addresses, and export is also available through the API. Import offers a Replace option when a story with the same name exists. The docs page was last updated on 2026-08-19. A Run script action executes Python in python3.9 and python3.13 runtimes with a 10 second default timeout. No importer from another vendor is documented.
The vendor describes itself this way: No-code workflow platform where security, IT and other teams build automated workflows (called stories) that connect to security tools and AI models. Includes a Cases add-on for case management and an AI SOC solution page. tines.com, read 2026-11-03 (vendor claim)
How Tines scores
Nine rows, weights summing to 100, each scored 0 to 10 from pages read on 2026-11-03. The part is score times weight divided by 100. How the scoring works.
| Row | Score | Weight | Part | Reason and source |
|---|---|---|---|---|
| Playbook authoring model | 8.0 | 14 | 1.12 | No-code and low-code story builder; build AI agents, apps and automations; import and export of stories as files. tines.com, read 2026-11-03; tines.com, read 2026-11-03 |
| Integration count and depth documented | 5.0 | 14 | 0.70 | No integration count on the home page; positioned as vendor-agnostic. HTTP-based actions reach any API (not read on a docs page). Re-read pending. tines.com, read 2026-11-03 |
| Case management and collaboration | 4.0 | 8 | 0.32 | Not found in the pages read on 2026-11-03. Re-read pending. tines.com, read 2026-11-03 |
| Approvals and human-in-the-loop controls | 7.0 | 12 | 0.84 | Home page states governance, guardrails and monitoring, and that you choose where and when models are used. Coverage of the January 2026 AI interaction layer cites human-in-the-loop controls and audit logging (search summary). tines.com, read 2026-11-03 (vendor claim) (search summary only); tines.com, read 2026-11-03 (vendor claim) (search summary only) |
| Agentic or AI features that are documented | 7.0 | 12 | 0.84 | AI SOC for alert intake, triage and remediation with routing to an analyst; agents inside stories. Tines 3B (July 2026) is reported by a competitor; Tines' blog read does not carry the launch post. tines.com, read 2026-11-03 (vendor claim); tines.com, read 2026-11-03 (vendor claim) |
| Hosting and data residency options | 6.0 | 8 | 0.48 | Pricing page says 'flexible hosting options are available' and names none. A self-hosted tenant is mentioned in import docs. tines.com, read 2026-11-03; tines.com, read 2026-11-03 |
| Pricing model and transparency | 6.0 | 8 | 0.48 | A free edition (3 live workflows, one-time USD 50 AI allowance) is published; paid editions are by request with no pricing unit. tines.com, read 2026-11-03 |
| Migration tooling and import or export formats | 6.0 | 14 | 0.84 | Tines' help article, read 2026-11-03, names the format: stories export as JSON with credentials, resources and event data excluded and import with a Replace option, while the docs page itself does not name the format, no inbound SOAR converter was found, and a library story moves Splunk SOAR case records, not logic. explained.tines.com, read 2026-11-03; tines.com, read 2026-11-03 |
| Ownership stability | 8.0 | 10 | 0.80 | Independent; USD 125M round led by Goldman Sachs Alternatives in February 2025 at about USD 1.13B. Product naming changed in 2026 (Tines Stories and 3B). pymnts.com, read 2026-11-03 (search summary only); tines.com, read 2026-11-03 (search summary only) |
| Total | 6.42 | 100 | 6.42 | Band 3 on the card; totals within 0.25 are a band, not a ladder. |
Where Tines is strong
- A free edition with three live workflows and a one-time USD 50 AI allowance is published. Paid editions are quoted after a demo and the page gives no pricing unit. tines.com, read 2026-11-03
- Story import and export are documented with backward compatibility maintained and a Replace option on name match. The docs page describing Export story was last updated on 2026-08-19. tines.com, read 2026-11-03
- The docs list a self-hosted option, and the home page says customers can choose which AI models are used and what goes live. The second statement is a vendor claim. tines.com, read 2026-11-03
Where Tines is behind
- Case management is not documented on the pages read. The docs index lists a Cases section and the product lists a Cases add-on, but no case fields, assignment or sharing were read. Cases scores 4.0 and is flagged for a re-read. tines.com, read 2026-11-03
- The home page publishes no integration count and states that actions can reach any API over HTTP, which was not read on a docs page. Integrations scores 5.0 and is flagged. tines.com, read 2026-11-03
- No importer for another vendor format is documented. The legacy SOAR migration post of 2024-07-21, read through a third-party summary, names no source SOAR and no converter. tines.com, read 2026-11-03
A fact only Tines has
A Tines library story named Export Splunk SOAR cases to Tines moves case records with annotations and attachments, and the vendor page says nothing about moving playbook logic. tines.com, read 2026-11-03
Pricing as published
Free edition with limited features, plus paid editions with unlisted pricing that are obtained by booking a demo. Free edition includes 3 live workflows and a one-time USD 50 AI allowance. tines.com, read 2026-11-03 (vendor claim)
| Item | Price | Source |
|---|---|---|
| Free edition, one-time AI allowance | USD 50 one-time | tines.com, read 2026-11-03 (vendor claim) |
Ownership and funding
No acquisition, acquired-by or rebrand event found in one news search dated 2026-11-03. Search returned funding and partnership news only. tines.com, read 2026-11-03
Reported USD 125 million raise, valued at USD 1.1 billion, with investors including Goldman Sachs, SoftBank, Felicis, Accel and Lux Capital. Round date not confirmed. pymnts.com, read 2026-11-03
Named customers
- Coinbase source, read 2026-11-03 (vendor claim)
- Databricks source, read 2026-11-03 (vendor claim)
- Reddit source, read 2026-11-03 (vendor claim)
- Snowflake source, read 2026-11-03 (vendor claim)
- Dropbox source, read 2026-11-03 (vendor claim)
- Pinterest source, read 2026-11-03 (vendor claim)
- MongoDB source, read 2026-11-03 (vendor claim)
- Sophos source, read 2026-11-03 (vendor claim)
- Canva source, read 2026-11-03 (vendor claim)
- McKesson source, read 2026-11-03 (vendor claim)
- Omada Health source, read 2026-11-03 (vendor claim)
- Intezer source, read 2026-11-03 (vendor claim)
10 more names appear on the vendor's pages.
Recent releases
- 2026-07-28 Tines takes on vibe coding with new platform (Irish Times coverage). Press coverage listed on the newsroom page. Date from the newsroom listing. tines.com, read 2026-11-03
- 2026-07 Tines launches Government Solutions for the public sector (PR Newswire). Date inferred from newsroom image timestamp, not a printed date. Verify before use. tines.com, read 2026-11-03 (vendor claim)
- 2026-07 Deloitte and Tines announce collaboration on operationalising AI and automation. Date inferred from newsroom image timestamp. Verify before use. tines.com, read 2026-11-03 (vendor claim)
- 2026-01-15 Tines launches AI interaction layer to unify agents, copilots and workflows (SiliconANGLE). Secondary source. Seen in a search result, not read on the primary page. siliconangle.com, read 2026-11-03
- 2025-12-04 SpecterOps and Tines partner on native BloodHound integration for attack path automation. Release dated 2025-12-04, read on the SpecterOps news page (the original; the press-wire copy was unreachable). specterops.io, read 2026-11-04
Claims Tines makes about itself
These are vendor claims. They are not scored. Each carries an evidence grade: C means a vendor figure with no published method.
| Claim | Grade | Source |
|---|---|---|
| Over 1000 workflows went live after all employees were given access to Tines 3B, over a 90-day period | C | tines.com, read 2026-11-03 (vendor claim) |
| Finance team built a custom billing app for under USD 1,000 after being quoted six figures for a tool | C | tines.com, read 2026-11-03 (vendor claim) |
What the public pages did not say
- No published accuracy, false-positive, auto-closure, MTTR or MTTD figure found on the home page, blog index, docs or pricing page.
- No public paid price. Paid editions are quoted by demo only.
- Blog index shows no publication dates, so the 2025-11-01 window could not be checked per post.
- Newsroom dates for Government Solutions, Deloitte and Carahsoft items are inferred from image timestamps, not printed dates.
- https://www.tines.com/changelog returned HTTP 404 on 2026-11-03. The What's new and Product updates pages were not read.
- No Gartner Magic Quadrant for SOAR (retired per a vendor-side search result). Forrester Wave status not confirmed.
Gaps recorded on 3 November 2026. A gap is an absence on the pages read, and it is scored that way.
Who should shortlist Tines
- You want to start without a sales call: a free edition first, a demo for paid editions.
- Security and IT teams will both build workflows, and your engineers are comfortable with HTTP actions and short Python scripts.
- Your plan is a clean rebuild of playbooks, not a conversion, because Tines documents story export and not inbound SOAR conversion.
Verdict. Tines is fifth of 14 scored at 6.42, in a band with D3 Security (6.67), Mate Security (6.22), Microsoft Sentinel (6.21) and Palo Alto Cortex XSOAR (6.18).
Moving playbooks out of Tines
Tines is a source row in the portability matrix: 0 of 70 cells have a documented path. Source format: story JSON (tines.com, read 2026-11-03).
Tines against the other eleven
- BlinkOps v Tines
- Cyware v Tines
- D3 Security v Tines
- Google Security Operations v Tines
- Mate Security v Tines
- Microsoft Sentinel v Tines
- Palo Alto Cortex XSOAR v Tines
- ServiceNow Security Operations v Tines
- Splunk SOAR (Cisco) v Tines
- Swimlane (Turbine) v Tines
- Tines v Torq
Alternatives to Tines, ordered by the rubric.