Defensys SOAR Platform vs Tines
Defensys SOAR Platform
defensys.comTines
tines.comSide by side
| Figure | Defensys SOAR Platform | Tines |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 5 |
| Spec score · SOAR Software | 7.5 (#8) | 8.3 (#3) |
| Founded | 2011 | Tines says its founders started building the company in 2018 after working as security operators. |
| Headquarters | Singapore | Tines lists European headquarters in Dublin and US headquarters in Boston. |
| Integrations | Defensys states that SOAR has built-in integrations with commonly adopted security tools and systems, plus an open API and an email connector for custom integrations. | Tines says Stories can connect to any service that exposes an API, including internal tools and niche systems. |
| Intended users | The vendor describes SOAR as a platform for building an internal Security Operations Center and says it is used across sectors including banking, government, oil and gas, energy, metallurgy, and industry. | Tines 3B is for builders across business teams, with Security and IT responsible for governing the work. |
Plans
Tines
- Free editionFree
- Business EditionPrice not published
- Enterprise EditionPrice not published
- Explore (Free edition)Free
- Paid editionsPriced on request
In their own words
Defensys SOAR Platform
Defensys SOAR Platform gathers security incident data from multiple sources into a central database for analysis and investigation, then supports response with workflows and playbooks. Playbooks can run specified actions automatically or use manual and mixed decision-making. The platform provides dynamic playbooks, ready-to-use scripts, adjustable workflows, and security-tool orchestration. SOC teams get shared case workspaces, task assignment, role and data access controls, chat, and commenting. Central storage covers incident data, evidence, documents, communications, and attachments. Teams can configure incident descriptions, templates, catalogs, access rules, and graphical playbooks. Defensys lists built-in integrations with commonly adopted security tools and systems, plus an open API and email connector for custom integrations. Reporting includes maps, relationship views, scheduled predefined or custom reports, and incident metrics. Real-time sharing can send selected incident data to partners, experts, communities, and public CERTs, with controls for recipients and data volume. The platform is available through web and API access. Defensys describes it for internal Security Operations Centers across banking, government, oil and gas, energy, metallurgy, and industry. Pricing is on request.
Tines
Tines 3B is an AI-native platform for building, running and monitoring AI agents, apps and automated workflows. Builders can create processes with natural language, code, Git integration and branching, including conditional logic and webhook triggers. The platform supports connected LLM chat, AI skills and coding assistants such as Claude Code or Codex. Tines says it can connect to any API or Model Context Protocol service, rather than relying only on a fixed catalogue of integrations. Each workflow step runs in an isolated sandbox; connector credentials are supplied at runtime rather than exposed to builders or stored in code. Deployment options include self-hosted, on-premises and hybrid setups. Monitoring covers AI spend, access, duplicate work, workflow savings, frontend routes and package dependencies. The platform is intended for business-team builders, with Security and IT governing the work. Tines states it maintains SOC 2 Type II compliance and undergoes annual audits. Its Free edition costs nothing and permits three live workflows.