Tines is a no-code workflow automation platform primarily aimed at security operations, IT, and business operations teams. It enables users to build automated workflows—called Stories—by connecting actions that interact with APIs, send messages, run scripts, and process data. The platform is designed so that non-engineers, such as security analysts, can create and maintain complex automations without writing code. Tines supports a wide range of integrations through its HTTP request actions and pre-built templates, allowing teams to automate alert triage, incident response, employee onboarding, and other repetitive processes. It offers a visual drag-and-drop editor, conditional logic, and the ability to handle data transformations. Tines positions itself as a tool that reduces manual toil for operations teams, freeing analysts to focus on higher-value work. The platform is available as a cloud-hosted SaaS product and also offers an on-premise deployment option for organizations with stricter data residency requirements. A free Community plan is available for smaller teams or individuals getting started with automation.
Target audience and deployment
- Solo / Freelancer
- Startup
- SMB
- Mid-market
- Enterprise
- Cloud
- On-premise
Performance snapshot
Tines is a no-code/low-code security and workflow automation platform that receives consistently strong marks across usability, functionality, and integrations. The review corpus skews heavily positive, with usability and functionality rated Strong and support drawing early praise. The most recurring concern is a learning curve when building complex workflows and limited debugging tooling at scale, though reviewers frame these as manageable rather than blocking.
Pros
- No-code/low-code visual interface enables security and ops teams to build automation workflows quickly without engineering dependency.
- Broad API connectivity allows integration with virtually any third-party tool that exposes a REST API.
- Strong fit for SOC and incident-response use cases, including alert triage, ticket generation, and threat-intel enrichment.
- Highly responsive and knowledgeable support team praised consistently across early and recent reviews.
- Scales from small-business teams handling daily alert noise to enterprise-grade SOAR deployments.
Cons
- Initial learning curve can be intimidating, particularly when chaining complex multi-step workflows or scaling large stories.
- Debugging tools for complex workflows are reported as limited or cumbersome by multiple reviewers.
- Integration documentation and examples were flagged as sparse in earlier reviews, making some third-party connections harder to configure.
- Advanced or highly customized workflow needs can feel constrained by the no-code paradigm for power users.
Performance breakdown
Usability
StrongA large majority of reviewers across all platforms highlight the intuitive visual interface, ease of setup, and no-code accessibility. A recurring minority note an initial learning curve for complex workflows, but most describe this as temporary rather than a barrier.
Functionality
StrongReviewers consistently praise broad API connectivity, flexible workflow composition, and applicability across SOC, SOAR, IT ops, GRC, and general business automation. Some early reviews noted feature immaturity, but more recent reviews indicate the roadmap gaps have largely closed.
Reliability & performance
StrongThe handful of reviewers who address reliability report stable, consistent execution and fast data correlation across systems. No significant outages or data-loss events are mentioned; however, relatively few reviews speak directly to this category.
Support
StrongSupport responsiveness and expertise are praised in multiple reviews spanning 2018 to 2026, with phrases such as 'never a stupid question' and 'fast support' appearing repeatedly. No negative support experiences are recorded in the dataset.
Cost-effectiveness
Not enough dataFewer than two reviews explicitly address pricing or value relative to cost. One early review positions Tines favorably versus competitors on capability, but no direct price commentary is available to score this category.
Best for
Tines is best suited for security operations (SOC/SOAR), IT operations, and GRC teams at mid-market to enterprise organizations that need flexible, API-driven workflow automation without requiring deep coding expertise.
Users info
Reviewers are predominantly security and IT professionals — SOC analysts, security engineers, GRC analysts, and vulnerability management engineers — working at mid-market (51–1000 employees) and enterprise (1000+ employees) organizations, primarily in information technology, computer and network security, and computer software industries. A smaller segment comes from general business functions such as operations, HR, and content strategy. Top user industries include Information Technology and Services, Computer & Network Security, Computer Software, Banking, Consulting. Typical user roles include SOC Analyst / Security Engineer, GRC Analyst, Software / Systems Engineer, IT Operations / Help Desk, Business / Operations Executive. Typical company size bands include Mid-Market (51–1000 employees), Enterprise (>1000 employees), Small-Business (≤50 employees).
Review strength
109 reviews were provided; after de-duplication no material duplicates were identified, yielding approximately 109 unique reviews drawn from three review platforms. The dataset spans October 2018 to late 2026, with a meaningful share of reviews (roughly 8%) predating 2022 and thus more than one year old; the majority are from 2026 and are recent. Review date range: 2018-08-16 - 2026-10-16.
Performance breakdown
Usability
StrongA large majority of reviewers across all platforms highlight the intuitive visual interface, ease of setup, and no-code accessibility. A recurring minority note an initial learning curve for complex workflows, but most describe this as temporary rather than a barrier.
Functionality
StrongReviewers consistently praise broad API connectivity, flexible workflow composition, and applicability across SOC, SOAR, IT ops, GRC, and general business automation. Some early reviews noted feature immaturity, but more recent reviews indicate the roadmap gaps have largely closed.
Reliability & performance
StrongThe handful of reviewers who address reliability report stable, consistent execution and fast data correlation across systems. No significant outages or data-loss events are mentioned; however, relatively few reviews speak directly to this category.
Support
StrongSupport responsiveness and expertise are praised in multiple reviews spanning 2018 to 2026, with phrases such as 'never a stupid question' and 'fast support' appearing repeatedly. No negative support experiences are recorded in the dataset.
Cost-effectiveness
Not enough dataFewer than two reviews explicitly address pricing or value relative to cost. One early review positions Tines favorably versus competitors on capability, but no direct price commentary is available to score this category.
Review strength
109 reviews were provided; after de-duplication no material duplicates were identified, yielding approximately 109 unique reviews drawn from three review platforms. The dataset spans October 2018 to late 2026, with a meaningful share of reviews (roughly 8%) predating 2022 and thus more than one year old; the majority are from 2026 and are recent. Review date range: 2018-08-16 - 2026-10-16.
Key features
Use cases
- Automate security alert triage
- Orchestrate incident response workflows
- Automate employee onboarding and offboarding
- Integrate disparate security and IT tools
- Build self-service internal workflows
- Automate threat intelligence enrichment
Best for
- Security analysts who need to automate alert triage and incident response without writing code
- IT operations teams who need to orchestrate workflows across multiple tools and platforms
- Security engineers who need to build and maintain scalable automation for SOC operations
- Operations managers who need to reduce manual toil across business and IT processes
Integrations
Communication
Slack, Microsoft Teams, PagerDuty
Project management
Jira
Developer
GitHub
Customer support
ServiceNow, Zendesk
Other
Okta, CrowdStrike, Splunk, VirusTotal, AWS