Tines

Tines came out of a security operations team's own frustration, and that shows in what it automates well: pulling an alert from one tool, enriching it against three others, and routing the result to a human only when a human decision is actually needed.

The workflow builder is a directed graph of actions rather than a single linear chain, which matches how incident response actually branches — an alert that turns out to be a false positive should close itself, not wait in the same queue as one that needs escalation. Security and IT operations teams are the core audience, not general business automation.

Tines Limited operates from Dublin as the contracting entity for customers outside North America; Tines Technology, Inc. in Delaware serves North American customers instead, so a European buyer specifically wants the Irish entity in the contract.

Founded in 2018 by two former security operators, Tines states SOC 2 Type II compliance, audited annually. The free tier is unusually generous — unlimited users and connectors, three live workflows, no credit card required — which makes it realistic to build a real automation before any purchasing conversation starts. Paid plans remove the workflow cap but carry no published price; every deal goes through a demo.

What Tines does well

• Directed-graph builder matches how incident response actually branches
• Generous free tier: unlimited users, no credit card
• SOC 2 Type II compliance stated, audited annually
• Irish entity for European customers, EU jurisdiction
• Built specifically for security and IT operations

Where Tines falls short

• No published pricing beyond the free tier
• Narrower general-business connector catalogue than Make or n8n
• Aimed at security/IT workflows more than sales or marketing automation

Standout feature. A directed-graph workflow builder built by security operators: Tines is the only tool here designed first for incident-response branching, not linear app-to-app chains.