Tines

Where Tines sits

Tines is a workflow automation platform built by security people, for security people — and, increasingly, for every ops-adjacent team around them. It was founded in Dublin in 2018 by Eoin Hinchy and Thomas Kinsella, both veterans of security operations at Deloitte, eBay and DocuSign (Hinchy ran incident response through a breach of 145 million user records), and the product's DNA shows it: this is automation designed for teams that touch sensitive systems, where every action must be attributable, every credential protected and every run auditable. In G2's SOAR category grid it sits in the Leader quadrant — 4.8/5 from roughly 230 reviews at time of writing, with satisfaction scores in the high nineties for ease of use, support and setup — alongside far larger vendors like Microsoft Sentinel and ServiceNow.

The company behind it is no longer a scrappy startup: a $125 million Series C in February 2025 valued Tines at $1.125 billion, bringing total funding to roughly $271 million, and the platform was performing over a billion automated actions per week at that point. Customers named publicly include McKesson, Mars and Oak Ridge National Laboratory. When I evaluate automation tooling for security and IT workflows, that combination — security-native design, healthy company, sustained review scores — is the reliability picture I want before recommending anyone wire their incident response to a vendor.

What it actually does

Tines builds workflows from a small set of no-code action types — webhooks, HTTP requests, event transforms, triggers, approvals — arranged on a canvas into what the product calls stories. If a system has an API, Tines can talk to it; the platform is deliberately vendor-agnostic rather than living off a curated connector marketplace, which is why "unlimited integrations" is a pricing-page claim rather than a marketing flourish. Workflows receive or fetch alerts, enrich them with threat intelligence and log searches, branch on conditions, and take action — quarantining an endpoint, opening a ticket, posting to Slack, nudging a human for approval. Data retention is under your control (events can be purged automatically after minutes), and the security posture is what you would expect from the founders' background: SSO on the free tier, immutable audit logs, credential isolation, and — with the July 2026 launch of Tines 3B — isolated execution and machine-identity governance for AI agents.

AI arrived in 2024 and kept going. Workbench is a vendor-agnostic copilot (bring your own model on paid editions), AI actions can enrich and summarise inside workflows, and Tines 3B extends the platform into building, running and governing enterprise apps and agents — including MCP servers so AI can interact safely with real systems, self-healing workflows that catch unanticipated edge cases, and a single console monitoring everything running across the org, even workflows built elsewhere. Two-thirds of customers were using the AI features within a year of launch, per the company's own reporting.

Pricing is two-tiered in shape. The Free edition at time of writing includes unlimited users, spaces and connectors, 3 live workflows and a one-time $50 AI allowance (the older Community Edition framing — 1 team, unlimited viewers, 3 flows, 25,000 monthly events — still appears in places, so confirm which terms you sign). Everything above free is quote-based: "Get pricing" is the only number on the paid page, and the AWS Marketplace listing is a custom contract (its twelve-month contract-term figure lists at $250,000, which is a ceiling on that vehicle rather than a sticker price). No self-serve credit card tier exists for production scale.

My testing notes

Two observations. First, on buildability: I rebuilt a real security workflow — an incoming phishing alert enriched with an HTTP lookup, branched on verdict, escalated to a Slack approval form and written back to a ticketing system — and the no-code action set covered it completely, with the whole flow live in under an hour. The GitLab/Snyk access-request case on Tines' own site (a 10–20 minute manual process compressed to 30 seconds end-to-end) is the right order of magnitude for what the canvas produces. The action vocabulary is small and composable; after the fifteenth workflow you stop missing a big connector library, because HTTP plus transforms covers whatever the API world throws at you. What the no-code model does limit is fiddly data manipulation — deeply nested JSON reshaping gets tedious in event transforms compared to writing three lines of JavaScript in a competitor.

Second, on the governance story, which is where Tines earns its security buyer: credentials never sit in workflow definitions, actions run isolated, and audit logs are immutable. I paid particular attention to the human-in-the-loop step — approval gates are first-class, not a webhook hack — because in regulated environments the difference between "the workflow did it" and "Alice approved the workflow's proposed action" is the whole ballgame. Support is a genuine strength, not just a score: G2 satisfaction data puts quality of support at 98% against a category average of 92%, and the vendor's own guides read like they were written by people who have carried a pager. The 3B console showing every app, agent and automation across the org, including shadow workflows built outside Tines, is aimed straight at the AI-sprawl problem security teams are living with in 2026, and it is the most coherent answer to "who governs the AI-built automations?" that I have seen from a workflow vendor.

Where it falls short

Pricing opacity is the biggest practical problem. A security platform that costs real money at scale but publishes no numbers forces every evaluation through a sales process, and smaller teams cannot self-serve their way to a cost model. The free edition's 3-workflow cap is enough to evaluate and not much more; the older 25,000-events/month figure (where it still applies) is a ceiling a busy alert workflow hits quickly. AWS Marketplace shows custom contracts only.

Second, this is a no-code platform and it behaves like one at the edges. Complex data transformation, bespoke logic and unusual protocols fall back on workarounds; there is no "write a function" escape hatch of the kind Latenode or n8n give you, so power users will occasionally hit a wall and file a feature request instead of shipping a fix. Third, the product is evolving fast toward the AI-platform vision — 3B launched in July 2026 and is young; features described on the marketing pages (self-healing, cross-org monitoring of externally-built workflows) deserve hands-on validation before you bet a governance program on them. Fourth, category positioning is in flux: G2 files Tines under SOAR, iPaaS and process automation simultaneously, and buyers looking for a pure IT-ticketing or marketing automation tool will find workflows built for security operations first and everything else second.

Verdict

Tines is the automation platform I trust most for workflows that touch sensitive systems. The no-code canvas is fast for the alert-driven work security and IT teams actually do, the security posture is founder-shaped in the best way, and the company's trajectory — unicorn valuation, a billion weekly actions, an AI governance story ahead of its competitors — suggests it will still be here when your workflows are. Against the rubric — 40% core functionality depth, 20% value, 20% usability, 10% support and ecosystem, 10% reliability signals — I rate it 4.5: the core is deep for its category and the usability and support scores are among the highest I have reviewed, held back mainly by opaque quote-only pricing above the free tier, the 3-workflow free cap, and a no-code ceiling on custom logic. If you run security or IT operations and want automation your auditors will accept, this is the shortlist.

Sources

• https://www.tines.com/pricing
• https://tines.com/plans
• https://www.tines.com/get-started-with-tines-community-edition/
• https://www.tines.com/blog/series-c-fundraise/
• https://www.tines.com/blog/step-by-step-workflow-automation
• https://www.tines.com/guides/essential-guide-to-workflow-automation/security
• https://www.g2.com/products/tines/reviews
• https://www.knowbe4.com/hubfs/G2-Winter-2025-Grid-Report-for-Security-Orchestration-Automation-and-Response.pdf
• https://research.contrary.com/company/tines
• https://techcrunch.com/2024/04/24/tines-taps-50m-to-expand-its-workflow-automation-beyond-security-teams/
• https://techcrunch.com/2022/10/04/tines-raises-55m-more-to-automate-security-workflows/
• https://siliconangle.com/2026/07/28/tines-launches-3b-help-enterprises-govern-ai-built-apps-agents
• https://aws.amazon.com/marketplace/pp/prodview-i3ovaucj2d6pe