- 1Runs onAPI, Linux, self-hosted, Web
- 2CostsFree plan
- 3Approval stepsYes
- 4Scheduled runsYes
- 5Event triggersYes
- 6Incident integrationsYes
- 7Audit logsYes
- 8Self-hosted optionYes
Overview
Shuffle is an open-source automation platform for security teams to build and run workflows. Its visual designer works with a no-code app creator that can generate integrations from Swagger or OpenAPI specifications and API documentation URLs. The public catalog contains more than 2,500 apps, including Slack, Gmail, MISP, Wazuh, Splunk, and Jira. Workflows can start through webhooks, schedules, subflows, or user input; extension triggers include AWS Lambda, AWS S3, Kafka, and Pub/Sub. Deployment choices include self-hosted open source, self-hosted licensed software, Shuffle Cloud, and hybrid setups. Documented runtime architectures include Docker Compose, Docker Swarm, a cloud-hybrid local Orborus runner, and Kubernetes with Helm charts. Shuffle documents bcrypt password hashing, AES-256 encryption, tenant-controlled SAML/SSO and MFA, and a Bearer-token API. The free Scale plan is 0.00 USD per free and includes 2,000 app runs per month, with a hard limit, three tenants, and one location. Custom Python apps are not yet easy to create for Shuffle Cloud, though on-premises instances support local app hotloading.
Who it is for
Shuffle suits security operations centers and CERT/SIRT teams looking to build and share workflow automations. Its self-hosted, cloud, and hybrid options accommodate different deployment approaches.
What is good
- Public app catalog lists more than 2,500 apps.
- Workflow triggers include webhooks and schedules.
- Free plan includes 2,000 app runs monthly.
- Supports self-hosted, cloud, and hybrid deployment.
- Documents SAML/SSO, MFA, and AES-256 encryption.
What to know first
- Free Scale plan has a hard app-run limit.
- Scale includes only three tenants and one location.
- Custom Python apps are not easy to create on Shuffle Cloud.
Verdict
Shuffle combines a visual workflow builder with a large app catalog and multiple deployment choices. The free Scale plan has defined run, tenant, and location limits; cloud users should also note the stated constraint on custom Python apps.
Shuffle plans and pricing
All plansCompared on runbook automation software
- Free plan
- Yesshuffler.io
- Approval steps
- Yesshuffler.io
- Scheduled runs
- Yesshuffler.io
- Event triggers
- Yesshuffler.io
- Incident integrations
- Yesshuffler.io
- Audit logs
- Yesshuffler.io
- Self-hosted option
- Yesshuffler.io
- Runs included
- $2,000/moshuffler.io
Facts
- Purpose
- Shuffle is an open-source automation platform designed for the security industry, for building and executing automation workflows.shuffler.io · 29 Sept 2026
- Workflow and app builder
- Its visual workflow designer works with a no-code app creator that can generate integrations from Swagger/OpenAPI specifications or API documentation URLs.shuffler.io · 29 Sept 2026
- Integrations
- Shuffle's public app catalog lists more than 2,500 apps, including integrations such as Slack, Gmail, MISP, Wazuh, Splunk, and Jira.shuffler.io · 29 Sept 2026
- Triggers
- Core workflow triggers include webhooks, schedules, subflows, and user input; listed extension triggers include AWS Lambda, AWS S3, Kafka, and Pub/Sub.shuffler.io · 29 Sept 2026
- Deployment options
- Shuffle is offered as self-hosted open source, self-hosted licensed, and Shuffle Cloud SaaS, with hybrid deployment also documented.shuffler.io · 29 Sept 2026
- Runtime deployment
- Documented runtime architectures include Docker Compose, distributed Docker Swarm, cloud hybrid with a local Orborus runner, and Kubernetes using Helm charts.shuffler.io · 29 Sept 2026
- Security
- The architecture documentation says passwords are bcrypt-hashed and app authentication, protected datastore keys, and files are AES-256 encrypted.shuffler.io · 29 Sept 2026
- Authentication
- Shuffle documents tenant-controlled SAML/SSO and MFA, and names Okta, Auth0, PingID, and AzureAD as supported platforms.shuffler.io · 29 Sept 2026
- AI data handling
- Shuffle says cloud AI requests are routed to regional model endpoints and tenant contexts are isolated; on-prem installations can use local models without external requests.shuffler.io · 29 Sept 2026
- API
- Shuffle describes itself as API-first and documents Bearer-token authentication for its API on both cloud and on-prem installations.shuffler.io · 29 Sept 2026
- Integration implementation limit
- The apps documentation says custom Python apps cannot yet be created easily for Shuffle Cloud, while on-prem instances support local app hotloading.shuffler.io · 29 Sept 2026
- Audience
- Shuffle says it was created to address automation problems in the CERT/SIRT community and aims to help security operations centers share processes, automations, and detections.shuffler.io · 29 Sept 2026
- Support
- The pricing page lists Shuffle Support with SLA and email support for Business, with on-call support and an alert mechanism additionally listed for Enterprise.shuffler.io · 29 Sept 2026
Company
- Founded
- 2019shuffler.io · 28 Sept 2026
Best Shuffle alternatives
See all 12
Where it ranks on Specifiction
Is Shuffle yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- shuffler.io/docs/getting_started· checked 29 Sept 2026
- shuffler.io/docs/features· checked 29 Sept 2026
- shuffler.io/apps· checked 29 Sept 2026
- shuffler.io/docs/architecture· checked 29 Sept 2026
- shuffler.io/docs/AI· checked 29 Sept 2026
- shuffler.io/docs/API· checked 29 Sept 2026
- shuffler.io/docs/apps· checked 29 Sept 2026
- shuffler.io/docs/about· checked 29 Sept 2026
- shuffler.io/pricing· checked 29 Sept 2026
- shuffler.io· checked 28 Sept 2026