▪ Editorial verdict
Tines has achieved the highest SOAR user satisfaction rating on G2, 4.8 out of 5, by taking a deliberately different approach to security automation: no-code workflow building that lets security analysts create automation without waiting for engineering resources. The any-HTTP-API integration model means any system with an API can be automated without waiting for a vendor-built connector, and the free tier makes it accessible for organisations that want to start automating before committing to enterprise SOAR licensing.
The limitation is case management depth. Tines is an automation and workflow tool, not a full SOAR platform with evidence boards, investigation timelines, and collaborative analyst workspaces. Organisations that need SOAR for both automation and case management will find Tines covers the automation requirement but requires supplementing for investigation workflows.
The verdict: Tines is right for security and IT teams wanting rapid no-code workflow automation without the overhead of a heavy SOAR platform. Organisations needing enterprise case management and SIEM integration depth should evaluate Swimlane Turbine or Splunk SOAR.
Last reviewed: May 2026
G2
Gartner
SOAR assessment
Strongest: Playbook automation
Watch out for: Enterprise scale & reliability
Strengths & limitations
Strengths
Watch out for
Best for
Security teams wanting the fastest time-to-automation with no-code builder and the highest analyst satisfaction in the category.
Not suitable for: Organisations wanting the deepest pre-built playbook library — Splunk SOAR and XSOAR have more out-of-box content.
Compliance coverage
Switching intelligence
Switching from
Common migration paths based on review data
- Manual triage processes
- Homegrown automation scripts