Shuffle vs ThreatConnect Platform
Shuffle
shuffler.ioThreatConnect Platform
threatconnect.comSide by side
| Figure | Shuffle | ThreatConnect Platform |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 1 |
| Spec score · Security Orchestration, Automation, and Response Software | 7.6 (#6) | 6.7 (#12) |
| API | Shuffle describes itself as API-first and documents Bearer-token authentication for its API on both cloud and on-prem installations. | ThreatConnect provides REST APIs, and public-cloud, dedicated-cloud, and on-premises instances expose the API at the instance URL followed by /api. |
| Integrations | Shuffle's public app catalog lists more than 2,500 apps, including integrations such as Slack, Gmail, MISP, Wazuh, Splunk, and Jira. | ThreatConnect supports integrations across SIEM, endpoint and network security, malware analysis, XDR, email security, ITSM, vulnerability management, cloud, identity, and collaboration tools. |
| Purpose | Shuffle is an open-source automation platform designed for the security industry, for building and executing automation workflows. | ThreatConnect brings threat intelligence operations, security operations, and cyber risk management teams together for collaborative cyber defense. |
| Support | The pricing page lists Shuffle Support with SLA and email support for Business, with on-call support and an alert mechanism additionally listed for Enterprise. | ThreatConnect’s Knowledge Base directs users to contact its Support team at [email protected] for help with questions or issues. |
Plans
In their own words
Shuffle
Shuffle is an open-source automation platform for security teams to build and run workflows. Its visual designer works with a no-code app creator that can generate integrations from Swagger or OpenAPI specifications and API documentation URLs. The public catalog contains more than 2,500 apps, including Slack, Gmail, MISP, Wazuh, Splunk, and Jira. Workflows can start through webhooks, schedules, subflows, or user input; extension triggers include AWS Lambda, AWS S3, Kafka, and Pub/Sub.
Deployment choices include self-hosted open source, self-hosted licensed software, Shuffle Cloud, and hybrid setups. Documented runtime architectures include Docker Compose, Docker Swarm, a cloud-hybrid local Orborus runner, and Kubernetes with Helm charts. Shuffle documents bcrypt password hashing, AES-256 encryption, tenant-controlled SAML/SSO and MFA, and a Bearer-token API. The free Scale plan is free and includes 2,000 app runs per month, with a hard limit, three tenants, and one location. Custom Python apps are not yet easy to create for Shuffle Cloud, though on-premises instances support local app hotloading.
ThreatConnect Platform
ThreatConnect Platform has no write-up on Specifiction yet; its figures are above.