Tines is a no-code workflow automation platform primarily aimed at security operations, IT, and business operations teams. It enables users to build automated workflows—called Stories—by connecting actions that interact with APIs, send messages, run scripts, and process data. The platform is designed so that non-engineers, such as security analysts, can create and maintain complex automations without writing code. Tines supports a wide range of integrations through its HTTP request actions and pre-built templates, allowing teams to automate alert triage, incident response, employee onboarding, and other repetitive processes. It offers a visual drag-and-drop editor, conditional logic, and the ability to handle data transformations. Tines positions itself as a tool that reduces manual toil for operations teams, freeing analysts to focus on higher-value work. The platform is available as a cloud-hosted SaaS product and also offers an on-premise deployment option for organizations with stricter data residency requirements. A free Community plan is available for smaller teams or individuals getting started with automation.
Target audience and deployment
- Solo / Freelancer
- Startup
- SMB
- Mid-market
- Enterprise
- Cloud
- On-premise
AI Overview
Performance snapshot
Tines is a no-code/low-code security automation platform that earns consistently strong marks for usability and API-driven integration capability. Across two review platforms, reviewers broadly praise its intuitive drag-and-drop interface and flexibility in automating complex SOC and IT workflows. Recurring concerns centre on a learning curve for advanced or complex workflows and limited debugging tooling, though neither rises to a critical failure level.
Pros
- Intuitive no-code/low-code drag-and-drop interface enables rapid workflow automation with minimal coding expertise required.
- Broad API connectivity allows integration with virtually any third-party tool, making it highly versatile across security and IT operations stacks.
- Strong fit for SOC use cases including incident response, ticket automation, vulnerability management, and TPRM workflows.
- Responsive and knowledgeable vendor support team noted consistently across early and recent reviews.
- Scales effectively from small teams to enterprise environments, with reviewers at all company sizes reporting productivity gains.
Cons
- Advanced and complex workflow design presents a meaningful learning curve, particularly around mastering conditional logic and agent chaining.
- Debugging capabilities are frequently cited as insufficient, making troubleshooting multi-step workflows time-consuming.
- Early-stage documentation and integration examples were noted as sparse, though this concern is more prominent in older reviews.
- Some reviewers flag limitations for highly complex or custom automation needs beyond standard security and IT use cases.
Performance breakdown
Usability
StrongThe overwhelming majority of reviewers highlight an intuitive drag-and-drop interface and ease of getting started without coding skills. A recurring qualifier is that mastering advanced workflows involves a learning curve, but initial setup and navigation are widely praised.
Functionality
StrongReviewers consistently commend Tines's ability to connect to any API-exposed service, automate complex multi-step workflows, and support SOAR, TPRM, vulnerability management, and ticketing use cases. A minority note gaps for highly complex or niche custom requirements, treated as enhancement requests by satisfied users.
Reliability & performance
StrongMultiple reviewers explicitly describe reliable, consistent performance for collecting and correlating data across systems. No reports of data loss, outages, or significant stability failures appear in the dataset; negative mentions on this dimension are minor and isolated.
Support
StrongEarly reviews are especially emphatic about vendor responsiveness and expertise, with several describing the Tines team as exceptional. More recent reviews do not contradict this sentiment, and no reviewer reported unresolved support issues or unresponsiveness.
Cost-effectiveness
Not enough dataFewer than two reviews address pricing or value relative to cost directly. Reviewers frequently describe the product as valuable and better than competitors, but explicit cost or pricing commentary is absent from the dataset.
Best for
Tines is best suited to security operations teams—SOC analysts, security engineers, and GRC professionals—at mid-market or enterprise organisations seeking a vendor-agnostic SOAR platform to automate repetitive, API-connected workflows without requiring deep coding skills.
Users info
Reviewers are predominantly security and IT professionals—SOC analysts, security engineers, GRC analysts, and vulnerability management engineers—spanning small businesses, mid-market, and enterprise organisations. A smaller cohort of non-security roles such as software engineers, QA specialists, and business operations titles also appear, reflecting expanding use cases beyond pure security automation. Top user industries include Information Technology and Services, Computer and Network Security, Computer Software, Consulting, Media Production. Typical user roles include Security Engineer / SOC Analyst, GRC Analyst / TPRM Analyst, Software Engineer / Full Stack Developer, Vulnerability Management Engineer, Security Operations Manager. Typical company size bands include Mid-Market (51–1000 employees), Small-Business (50 or fewer employees), Enterprise (1000+ employees).
Review strength
108 reviews were provided across two platforms; after de-duplication, 107 unique reviews were analysed. The dataset spans from October 2018 to July 2026. A notable share of reviews—approximately 8 from 2018–2019—are more than five years old, though the bulk of the dataset (roughly 90 reviews) was published in 2022 or later, with a high concentration from April–July 2026. Review date range: 2018-08-16 - 2026-07-02.
Performance breakdown
Usability
StrongThe overwhelming majority of reviewers highlight an intuitive drag-and-drop interface and ease of getting started without coding skills. A recurring qualifier is that mastering advanced workflows involves a learning curve, but initial setup and navigation are widely praised.
Functionality
StrongReviewers consistently commend Tines's ability to connect to any API-exposed service, automate complex multi-step workflows, and support SOAR, TPRM, vulnerability management, and ticketing use cases. A minority note gaps for highly complex or niche custom requirements, treated as enhancement requests by satisfied users.
Reliability & performance
StrongMultiple reviewers explicitly describe reliable, consistent performance for collecting and correlating data across systems. No reports of data loss, outages, or significant stability failures appear in the dataset; negative mentions on this dimension are minor and isolated.
Support
StrongEarly reviews are especially emphatic about vendor responsiveness and expertise, with several describing the Tines team as exceptional. More recent reviews do not contradict this sentiment, and no reviewer reported unresolved support issues or unresponsiveness.
Cost-effectiveness
Not enough dataFewer than two reviews address pricing or value relative to cost directly. Reviewers frequently describe the product as valuable and better than competitors, but explicit cost or pricing commentary is absent from the dataset.
Review strength
108 reviews were provided across two platforms; after de-duplication, 107 unique reviews were analysed. The dataset spans from October 2018 to July 2026. A notable share of reviews—approximately 8 from 2018–2019—are more than five years old, though the bulk of the dataset (roughly 90 reviews) was published in 2022 or later, with a high concentration from April–July 2026. Review date range: 2018-08-16 - 2026-07-02.
Key features
Use cases
- Automate security alert triage
- Orchestrate incident response workflows
- Automate employee onboarding and offboarding
- Integrate disparate security and IT tools
- Build self-service internal workflows
- Automate threat intelligence enrichment
Best for
- Security analysts who need to automate alert triage and incident response without writing code
- IT operations teams who need to orchestrate workflows across multiple tools and platforms
- Security engineers who need to build and maintain scalable automation for SOC operations
- Operations managers who need to reduce manual toil across business and IT processes
Integrations
Communication
Slack, Microsoft Teams, PagerDuty
Project management
Jira
Developer
GitHub
Customer support
ServiceNow, Zendesk
Other
Okta, CrowdStrike, Splunk, VirusTotal, AWS