How much does Tines cost?

A free community edition is available to all users; commercial Professional and Enterprise tiers (including unlimited builders and dedicated Tines resources at the enterprise level) are quoted by sales, with exact rates not published.

What are the best alternatives to Tines?

Based on documented capability coverage across the Agentic Index 14 point taxonomy, the closest alternatives to Tines among security and SOC agents are Airrived, Mindgard, Palo Alto Networks, SentinelOne. Each is graded on the same public evidence, and no vendor pays for placement.

Does Tines support MCP and tool calling?

Full under the Agentic Index verification standard. Tines publishes public evidence of Model Context Protocol (MCP) support, tool calling, and API or SDK extensibility for connecting agents to external tools. Evidence basis: Built on universal API integration to connect any tool or proprietary app and orchestrate custom intelligent workflows, a core developer-extensibility surface, Tines PR and toolify profile 2026-07-22. Graded from public evidence only against the Agentic Index 14 point capability taxonomy. No vendor pays for placement.

Does Tines have SOC 2, SSO and role based access control?

Full under the Agentic Index verification standard. Tines publishes public evidence of enterprise security and identity controls, covering a compliance posture such as SOC 2 or ISO 27001, single sign on (SSO or SAML), and role based access control (RBAC). Evidence basis: Built by security professionals with all automation and data kept within Tines infrastructure, plus built-in RBAC, audit logs, controls, and real-time AI guardrails that prevent sensitive data exposure in AI tools and agents,. Graded from public evidence only against the Agentic Index 14 point capability taxonomy. No vendor pays for placement.

Does Tines give you tracing and observability into agent runs?

Full under the Agentic Index verification standard. Tines publishes public evidence of tracing, observability and audit logging into agent runs, so a team can see what an agent did and why. Evidence basis: Teams build, run, and monitor automated processes with Cases metrics (time to detect, time to respond, SLA tracking) and built-in audit logs, giving first-class observability and auditability, Tines site and cybersectools profile 2026-07-22. Graded from public evidence only against the Agentic Index 14 point capability taxonomy. No vendor pays for placement.

Back to vendors

Tines

Q: Who is Tines for?

enterprise security operations centers, IT and infrastructure teams, MSSPs and security consultancies, detection engineering and incident response teams

Also known as: Tines, tines.com, Tines Workbench, Tines Storyboard, Tines AI-driven SOC

Visit site

Security / SOC agentindependentVerified 2026-07-22

Entry priceFree community edition; paid tiers quoted by salesFull pricing detail

Vendor-agnostic AI orchestration and workflow platform for security and IT teams, and a SOAR leader gone agentic: a no-code Storyboard, an AI Workbench that acts on proprietary data in natural language, and Cases management, with three levels of control (deterministic, human-led copilot, autonomous agents) keeping the analyst in charge. Free community edition; data kept within Tines infrastructure.

Tines is a secure, vendor-agnostic AI orchestration and intelligent workflow platform built for security and IT teams, and one of the anchors of the SOAR-to-agentic transition. Its fundamental innovation is combining deterministic workflow automation with non-deterministic agentic AI while keeping the human analyst in control, exposing three levels of LLM control over SecOps workflows: fully deterministic steps for compliance and auditability, human-led copilot steps where judgment matters, and autonomous agents for high-volume work like alert triage.

Teams build with a no-code drag-and-drop Storyboard, connect any tool via universal API integration, and use Workbench, an AI chat interface that lets users instruct an LLM in real time to access proprietary data and take action privately and securely, building and optimizing workflows in natural language. Cases adds case management with SLA tracking and TTD/TTR metrics, and built-in controls, confirmation prompts, guardrails, audit logs, and RBAC, are integrated into the core.

Tines keeps all automation and data within its own infrastructure, is vendor-agnostic across tools and LLMs, and offers a free community edition alongside commercial tiers. Positioned by IDC as applying the right type of AI to the right problem, autonomous agents for volume, copilots for approvals, deterministic flows for auditability, Tines sits at the platform and orchestration tier of the security lane, the control-plane counterpart to point-solution AI SOC analysts.

Vendor details

Canonical URL

https://www.tines.com

Funding status

Established SOAR and workflow-automation leader co-headquartered in Dublin and Boston; well-funded independent (a security-automation category leader named alongside Torq and Swimlane); launched its AI Workbench in 2024 and autonomous Agents in June 2025; broad enterprise and MSSP customer base with partnerships including Elastic and CrowdStrike integrations

Company status

independent

Use cases & customers

Primary use cases

security workflow orchestration and automation (SOAR)autonomous alert triage and investigation via AI agentsnatural-language SecOps action through Workbenchincident case management with SLA metricsIT and cross-team workflow automation

Target customers

enterprise security operations centersIT and infrastructure teamsMSSPs and security consultanciesdetection engineering and incident response teams

Deployment options

cloud SaaS keeping all automation and data within Tines infrastructurefree community editionenterprise tenant with controls

Integrations

Vendor-agnostic: connects any tool with an API, plus any LLM or proprietary app, through universal API integration; a drag-and-drop Storyboard builds automated workflows (stories), Cases provides case management with SLA, time-to-detect, and time-to-respond metrics, and Workbench lets users act on proprietary data through natural language; integrates with the existing security stack (CrowdStrike, Elastic, Slack, and hundreds more).

Sources & related URLs

Research sources

https://www.tines.com/ https://www.tines.com/platform/workbench/ https://www.tines.com/blog/agentic-automation-tines/ https://www.prnewswire.com/news-releases/tines-launches-agents-to-deliver-full-spectrum-workflow-automation-302490847.html

Agentic Index coverage score

10.5 / 14 capabilities · 75%

Integrations & Tool Calling	Full
Vendor-agnostic universal API integration connects any tool with an API plus any LLM or proprietary app, with hundreds of stack integrations (CrowdStrike, Elastic, Slack), Tines site and toolify profile 2026-07-22
Workflow Orchestration	Full
Tines is a workflow orchestration platform combining deterministic multi-step workflows with autonomous agents that query multiple data sources and execute multi-step problems across systems and other agents, Tines platform and blog 2026-07-22
Knowledge Grounding & RAG	Partial
Workbench executes stories, compiles the results, and reintegrates them back into the AI as context to enhance responses, grounding answers in the customer's connected proprietary data short of a documented knowledge base or retrieval layer, Tines Workbench blog 2026-07-22
Human Oversight & Guardrails	Full
Keeping the human analyst in control is Tines's fundamental innovation, with three levels of control (deterministic, human-led copilot, agentic) plus built-in confirmation steps, so agents do not go off the rails, Tines agentic-automation blog 2026-07-22
Security, Identity & Governance	Full
Built by security professionals with all automation and data kept within Tines infrastructure, plus built-in RBAC, audit logs, controls, and real-time AI guardrails that prevent sensitive data exposure in AI tools and agents, Tines site and Workbench page 2026-07-22
Observability & Auditability	Full
Teams build, run, and monitor automated processes with Cases metrics (time to detect, time to respond, SLA tracking) and built-in audit logs, giving first-class observability and auditability, Tines site and cybersectools profile 2026-07-22
Memory & State Persistence	Partial
The Cases case-management system tracks and persists incident state across the lifecycle with SLA and TTD/TTR metrics, a durable per-incident state short of a documented agent memory layer, Tines site and cybersectools profile 2026-07-22
Deployment & Data Residency	Partial
Tines keeps all automation and data within its own infrastructure for controlled data handling, a posture short of a documented customer self-host option in retrieved materials, Tines PR and site 2026-07-22
Prebuilt Agents, Templates & Packs	Partial
Teams deploy pre-built apps, chatbots, and workflow integrations and Workbench draws on a library of workflows (skills) that power the AI, a reusable starting-point set short of a fully documented template gallery in retrieved materials, Tines PR and Workbench blog 2026-07-22
Triggers & Channel Coverage	Full
Workflows are triggered by alerts and incidents across the stack with Cases monitoring high-priority alerts, and Workbench is reachable via chat and Slack, spanning event, webhook, and chat entry points, Tines site and cybersectools profile 2026-07-22
Model Flexibility & Routing	Full
Vendor-agnostic across LLMs: connect any tool, LLM, or proprietary app, and apply the right type of AI (deterministic, copilot, or agent) to each problem, Tines PR and site 2026-07-22
APIs, SDKs & MCP Extensibility	Full
Built on universal API integration to connect any tool or proprietary app and orchestrate custom intelligent workflows, a core developer-extensibility surface, Tines PR and toolify profile 2026-07-22
Testing, Debugging & Optimization	Partial
The Storyboard lets users build, understand, and optimize workflows directly, a build-and-optimize capability short of a documented agent testing or simulation suite in retrieved materials, Tines Workbench page 2026-07-22
Browser & Computer Use	Unable to verify
No browser or computer use capability documented; Tines acts through API integrations rather than driving a browser or GUI, Tines materials 2026-07-22

The Agentic Index coverage score grades every vendor Full, Partial or Unable to verify against the same 14 buyer facing capabilities, from public evidence only. Each capability links to how all vendors in the index score on it. How this evidence is graded

Recent platform changes

2026-08-25·Agent capabilityPartially Verified

Tines launched autonomous AI agents within its workflow automation platform. These agents enable customers to build intelligent, context-aware workflows that can act independently, suggest next steps, and collaborate with users in real time.

Bears on: Agent capability

View source

2026-08-25·Deployment / data residencyVerified

Tines released version 43.0.0 for self-hosted environments, introducing support for Tines primitives in Apps and a new Workbench for Cases.

Bears on: Deployment / data residency

View source

2026-08-13·Observability / auditabilityPartially Verified

Administrators can now configure custom alerts for AI credit usage across their tenant.

Bears on: Pricing / packaging

View source

View all 9 changes for Tines →Tracked since Aug 2026 · Verified from public vendor sources

Pricing

Free community edition; paid tiers quoted by sales

tiered subscription (free community + paid)

Free tierTrial available

What is public

The free community edition and the tier structure (Community, Professional, Enterprise, the last with unlimited builders and dedicated resources) are public; exact paid rates are quoted by sales.

Variable cost rationale

Commercial pricing is quoted by sales; the billing basis above the free tier is not published, so variable exposure cannot be assessed.

Sales call required

Yes, required for paid access

Free / trial

Free community edition available to all users

Agentic Index verified 2026-07-22

Related vendors

Alternatives to Tines

The closest documented capability profiles to Tines among security and SOC agents tracked by Agentic Index, ordered by similarity on the same 14 point evidence the rankings use. No vendor pays for placement.

Airrived10.0 / 14Fuller documented coverage on Knowledge Grounding & RAG
Mindgard9.0 / 14A lighter documented profile than Tines
Palo Alto Networks11.0 / 14Fuller documented coverage on Knowledge Grounding & RAG and Prebuilt Agents, Templates & Packs
SentinelOne11.0 / 14Fuller documented coverage on Knowledge Grounding & RAG and Prebuilt Agents, Templates & Packs
ThreatModeler12.0 / 14Fuller documented coverage on Knowledge Grounding & RAG and Memory & State Persistence
Torq10.0 / 14Fuller documented coverage on Prebuilt Agents, Templates & Packs

Similarity is computed from each vendor's Agentic Index coverage score evidence, axis by axis, not from the totals. How this evidence is graded

Compare Tines with other vendors →Compare all security and SOC agents →See where Tines ranks →

Data confidence: high

Head to head

Tines vs Cyware Tines vs Dropzone AI

Tines

Vendor details

Canonical URL

Category

Funding status

Company status

Use cases & customers

Primary use cases

Target customers

Deployment options

Integrations

Sources & related URLs

Research sources

Agentic Index coverage score

Recent platform changes

Pricing

Related vendors

Alternatives to Tines

Head to head

Contact us