Tines is a workflow automation company whose platform lets security, IT and operations teams build automated workflows, internal apps and AI agents that act on their most sensitive systems and data. It is used to take repetitive work such as alert triage off analysts while keeping control over what automation and AI are allowed to touch.
Workflows are assembled from building blocks rather than written as code, so the people who know the process can automate it themselves, and the platform keeps a record of what every workflow and agent did.
At A Glance
| Vendor | Tines |
|---|---|
| Category | Intelligent workflow and AI automation platform |
| Deployment | Cloud, self-hosted or hybrid |
| Agentic AI | AI Agent action, MCP servers and clients, Workbench, AI in Tines |
| Customers | Coinbase, Databricks, Reddit, Snowflake, Canva |
| Founded | 2018 |
What Tines Does
Teams adopting AI face the same question they faced with scripts and SOAR: how to connect agents, people and tools quickly without losing control.
A typical example is the AI SOC. Alerts arrive, an automated workflow enriches and triages them, remediation runs where it is safe, and the case is routed to an analyst when human judgement is needed. Throughout, teams decide where, when and how large language models are used, and which steps stay deterministic, so the same workflow can mix fixed logic, AI judgement and human approval.
Products
Stories And Actions
Stories are the core of Tines: automated workflows made by chaining Actions together. Actions receive events through webhooks or email, call any HTTP API, branch on conditions, hand work to other Stories and reshape data by deduplicating, delaying, splitting or throttling events. The AI Agent action adds an agent to a Story, with tools such as running a script, to help with investigations and coordinate tasks within defined controls. Stories have change control, versions and testing, and any workflow can be published as an API. The platform spots anomalies and potential breaks in workflows and suggests fixes.
Cases
Cases is an add-on that gives teams somewhere to manage the work a workflow produces, such as an incident or an access request. It provides groups, tasks, custom fields, roles and permissions, SLA settings and webhook notifications.
Records, Pages And Apps
Records store structured data captured by workflows, in live and test sets with retention settings. Pages and Apps put a front end on a workflow so that people outside the automation team can submit requests or see results.
Workbench
Workbench is the conversational AI interface inside Tines, documented for use in Slack, where staff can ask questions and trigger workflows.
How It Works
Tines runs on a shared cloud stack or in the customer’s own environment, and hybrid setups combine the two.
| Self-hosted | Deployment on Docker Compose, AWS Fargate or Kubernetes with Helm charts, with database field-level encryption. |
|---|---|
| Tunnel | A connector that lets cloud-hosted Tines reach internal systems, with guides for AWS Fargate and Docker; Command-over-HTTP is an alternative. |
| AI hosting | AI features run on AWS Bedrock by default, or customers can bring their own AI provider. |
Identities And Systems Covered
Workflows reach other systems with stored credentials, so Tines holds a set of non-human identities for each tenant.
| Cloud and workload identities | AWS credentials and Workload Identity Federation. |
|---|---|
| Token and certificate credentials | OAuth 2.0, JWT and Mutual TLS. |
| Request credentials | HTTP request and Multi Request credentials, plus plain text secrets. |
| Controls | Each credential has domain restriction, expiry and access settings, and tenant-wide credentials are available. |
Agentic AI Capabilities
AI In Tines
AI in Tines is an AI interaction layer giving one interface to manage AI agents, MCP clients, MCP servers and copilots. High-stakes actions can require human approval, and every AI action, tool call and outcome is logged inside the platform.
MCP Servers And Clients
Tines can expose workflows as MCP servers, so AI tools get deliberate, policy-bound access to systems. As an MCP client, it connects to MCP servers a customer already runs, and an AI gateway governs which MCP servers and AI clients may be deployed at all.
Integrations
| Area | Integrations |
|---|---|
| Security tools | CrowdStrike, Microsoft Defender for Endpoint, VirusTotal, Splunk Enterprise |
| Identity and attack paths | Okta, BloodHound Enterprise, BloodHound Community Edition (native integration built with SpecterOps) |
| Collaboration and ITSM | Slack, Jira Software, ServiceNow, PagerDuty |
Company Background
| Founded | 2018, by Eoin Hinchy and Thomas Kinsella, both former security operators. |
|---|---|
| Headquarters | Co-headquartered in Dublin, Ireland, and Boston, United States. |
| Leadership | Eoin Hinchy, Co-founder and CEO; Thomas Kinsella, Co-founder; Terry Tripp, Chief Revenue Officer; Heather Planishek, Chief Operating and Financial Officer since July 2025. |
| Funding | $125 million raised in February 2025, led by Goldman Sachs’ growth equity unit, and a reported $272 million in total over six rounds by January 2026. |
| Investors | Accel, Activant Capital, Addition, Blossom, Felicis, Goldman Sachs, Index Ventures and Vision Fund. |
Note: This overview is compiled from Tines’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.