Tines

• Tines 3B is code-first, built on the opposite premise from the no-code platform that won Tines its customers. If Tines Stories buyers do not migrate, Tines carries two platforms and two roadmaps against one revenue base.
• XDA Developers exported a Tines 3B workflow and found ordinary Python and TypeScript that would run elsewhere once credential handling is restored. If buyers value that portability, the automation customers build creates less pull than the usage figures suggest.
• Paid editions let customers bring their own language model, so Tines competes on its workflow engine and its governance layer rather than on an exclusive model. If governed agent execution becomes a standard platform feature, the premium for a separate environment compresses.
• The filed accounts show a $24.87 million pretax loss on $39.6 million of revenue for the year to January 2025. If the loss does not narrow as revenue grows, the $1.125 billion valuation Tines reached in 2025 becomes hard to defend.
• The Cybersecurity Maturity Model Certification Level 2 sits under a program the same announcement says the Pentagon suspended. If the program does not resume, the defense-contracting advantage that certification was meant to create does not arrive, though the Continuous Diagnostics and Mitigation listing and the Carahsoft GSA, SEWP V, and ITES-SW2 routes stay open.
• Tines's trust center lists commercial certifications and names no vendor-operated FedRAMP authorization, only a self-hosted path for buyers under FedRAMP requirements. If procurements demand a FedRAMP-authorized service Tines runs, that segment stays harder to win.

Tines sells to security and IT operations teams whose manual, repetitive work outruns their headcount, and since July 2026 to the wider organization building software with AI. The two founders frame the problem from lived experience, and the cited coverage credits Hinchy with a combined decade at DocuSign, eBay and Deloitte before they started Tines in 2018.

Independent analysts corroborate the security half. KuppingerCole notes that SOCs are overwhelmed by alert fatigue, context gaps, tool sprawl, and staffing shortages while rule-based SOAR and MDR struggle to scale, and writes it as buyer-facing guidance rather than vendor copy. TechCrunch separately reports Hinchy's estimate that the average security team manages some 77 different products.

The newer problem statement is the company's own. Tines calls it wild code, the ungoverned software employees build when an organization tells them to use AI, and the Irish Times carried that framing when it covered the Tines 3B launch. Deloitte's own announcement of a collaboration with Tines cites a Deloitte survey finding that worker access to AI rose by 50% in 2025. [s8, s6, s26, s25, s31]

The product line is now two platforms. Tines Stories is the visual designer for security and IT operations, and Tines 3B is the code-first environment where a builder describes a process in plain language and Tines generates, runs, and monitors the result. Tines says Stories continues in parallel as the visual designer purpose-built for security and IT operations teams.

The security design is the part outsiders can check. XDA Developers built three applications on Tines 3B, downloaded the generated code, and found each step running as its own container with credentials injected at runtime by a proxy the code never reads, on a sandbox Tines built over Google's gVisor. The reviewer counted sixteen Tines pull requests upstream to that project.

Model choice sits with the customer. Paid editions let a customer bring its own language model, Tines announced its AI Agent action in 2025 as a way to integrate AI while maintaining security and privacy, and the cited record identifies no proprietary model advantage. [s2, s27, s26, s28, s44, s32, s14, s11]

Tines competes in the security automation lineage that grew out of SOAR, and the analyst framing of that category is public. KuppingerCole describes AI SOC platforms as extending SOAR with generative AI and task-focused agents for normalization, correlation, enrichment, summarization, triage, hunting, case management, and orchestrated response, which is the category Tines Stories sells into, though that page names no vendor and does not describe how buyers weigh one against another.

Focused rivals attack from alongside. Contrary Research frames Torq as positioning AI as the primary decision engine inside every workflow where Tines blends deterministic actions with optional AI agents, and it compares Tines against Palo Alto Networks' Cortex XSOAR in the same section.

The Tines 3B launch widens the contest. Governing the software employees build with AI is a different sale from automating a SOC runbook, and the reviewed sources do not establish which vendors contest that ground or whether any of them ships a comparable environment. [s37, s12, s42, s26, s25]

Customer evidence is strong and partly independent. TechCrunch named Box, Canva, OpenTable, and Sophos as Tines customers as early as 2021, Contrary Research lists Coinbase, Databricks, GitLab, and Reddit as of July 2025, and the Irish Times names Coinbase, Reddit, and SAP in its own reporting on the Tines 3B launch.

Revenue is now in the public record. The Irish Times, reading filed accounts, reported $39.6 million for the year to January 2025 against $19.1 million a year earlier, alongside a $24.87 million pretax loss. Average headcount for that year was 220 and has since passed 400 across the US and Ireland.

Distribution now runs through partners as well as direct sales. Deloitte announced a collaboration to give its clients access to the platform, Carahsoft carries the platform on GSA, SEWP V, and ITES-SW2 contracts, and Tines launched a Government Solutions team for federal, state, and local agencies and the defense industrial base. [s4, s18, s25, s39, s24, s35, s40, s31, s38, s29]

The two founders bring directly relevant domain experience. TechCrunch reports that Eoin Hinchy and Thomas Kinsella both spent around a decade in leading cybersecurity roles at DocuSign, eBay, and Deloitte before starting Tines in 2018, and BankInfoSecurity records Hinchy's tenure across the same companies.

The company drew early validation from inside the security industry. TechCrunch reports that CrowdStrike and Silicon Valley CISO Investments made strategic investments in the 2021 round led by Addition, the kind of operator-led backing that signals security-native credibility.

The bench is filling out as the company grows. The Irish Times reports that Colin Bentley, formerly of Intercom, joined as vice-president of product, and that average headcount for the year to January 2025 was 220 and has since passed 400 across the US and Ireland. [s20, s43, s3, s5, s41, s40]

Tines publishes its assurance posture on a public trust center. The compliance section lists SOC 2 Type 2 and SOC 2 Type 1, CSA STAR Level 1, ISO/IEC 27001:2022, ISO/IEC 27701:2019, and ISO/IEC 42001:2023, alongside GDPR, CCPA, Microsoft SSPA, and the CISA Secure-by-Design pledge, and it carries separate penetration test reports for Tines 3B and Tines Stories behind an access request.

Deployment answers the residency question. The security page documents a cloud service Tines hosts and a product the customer hosts in its own data center, and the Tines 3B page adds self-hosted, on-premises, and hybrid options with controls the customer defines.

Federal assurance is where the record is thinnest. Tines announced a Cybersecurity Maturity Model Certification Level 2 and states that it is listed on the Department of Homeland Security's Continuous Diagnostics and Mitigation Approved Products List, both on company-controlled surfaces, and the same announcement quotes a Tines executive saying the Pentagon suspended the formal certification program. No vendor-operated FedRAMP authorization appears in the reviewed sources. [s22, s13, s21, s27, s29, s30, s34]

Add analyzed competitors to compare them side by side with Tines.

Tines started in the enterprise security operations team and has widened twice since. The founders built it for the SOC, where alert triage, enrichment, and incident response consume analyst hours. TechCrunch named Box, Canva, OpenTable, and Sophos as customers in 2021, and Contrary Research lists Coinbase, Databricks, GitLab, and Reddit as of July 2025.

The buyer now includes teams that never bought security tooling. TechCrunch reported the company extending its workflow automation beyond security teams in 2024, and the July 2026 launch of Tines 3B addresses employees across the business who build with AI while IT and security carry the risk. The free edition on the pricing page carries unlimited users, spaces, and connectors with three live workflows, so a team can start before a sales conversation.

Public sector is now a named segment. Tines announced a Government Solutions team in July 2026 for federal, state, and local agencies and the defense industrial base, and its public-sector page routes purchasing through Carahsoft's GSA Schedule, SEWP V, and ITES-SW2 contracts.

The widening is the strategic question. Tines 3B asks the security buyer that made Tines to adopt a code-first product that Tines itself describes as built on the opposite premise from the no-code one that buyer already runs.

Tines now ships two platforms with opposite build models. Tines Stories is the visual designer, with Storyboard for building workflows, Cases for incident management, Workbench as a chat interface across connected tools, and Agents for autonomous workflow activity. Tines 3B is code-first, so a builder describes a process in plain language and the platform writes and runs the code, with git branching, generated tests, and downloadable output.

The engineering under Tines 3B is the substantive part. Each step runs as its own container in a sandbox Tines built on gVisor, Google's user-space kernel, and credentials reach a step through a proxy outside the execution environment, so the generated code never reads them. XDA Developers, which built three applications on the platform before publishing, counted sixteen Tines pull requests upstream to gVisor at the time of writing.

The AI posture was deliberate rather than maximal in the older product. Tines announced its AI Agent action in 2025 and framed the value as integrating AI into workflows in a way that maintains security and privacy, and Contrary Research, writing before Tines 3B, contrasts that with Torq positioning AI as the primary decision engine inside every workflow. Paid editions let a customer bring its own model, and the cited record identifies no proprietary model advantage.

Outside verification now reaches the mechanism rather than only the shape. The XDA review inspected the exported code, the credential proxy, and the per-connector URL allowlists, while the usage figures behind the scale claims still come through company channels.

Tines runs a product-led motion into an enterprise sale. The free edition is a self-serve on-ramp that lets a builder create workflows before any contract, while paid pricing is unpublished and routes through a sales conversation. XDA Developers reports a six-figure starting point for paid plans.

The named-customer roster does most of the go-to-market work. TechCrunch named Box, Canva, OpenTable, and Sophos as early customers, Contrary Research adds Coinbase, Databricks, GitLab, and Reddit, and the Irish Times names Coinbase, Reddit, and SAP in its own reporting on the Tines 3B launch. BankInfoSecurity reported more than a billion automated actions a week in February 2025.

Channel and public-sector routes are new. Deloitte announced a collaboration in July 2026 to give its clients access to the platform, Carahsoft carries the platform across three federal contract vehicles, and Tines stood up a Government Solutions team. Fin's senior director of IT spoke on the record in the Irish Times about the Tines 3B rollout.

Financial proof is now partly public. The Irish Times, reading filed accounts, reported revenue of $39.6 million for the year to January 2025 against $19.1 million a year earlier, and a pretax loss of $24.87 million. Those figures come from statutory accounts read by a national newspaper rather than from a company announcement.

Tines publishes a free tier and negotiates the rest. Its pricing page presents a Free edition for experimenting with intelligent workflows, offering unlimited users, spaces, and connectors, three live workflows, and a one-time $50 AI allowance. Paid edition pricing is not published and routes through a sales conversation.

One outside figure now bounds the paid entry point. XDA Developers reports a six-figure starting point for paid plans, which puts an initial contract well above the departmental spend the free edition seeds adoption in. The charging unit still matters for a workflow platform, and the reviewed sources do not state which unit Tines charges by beyond the free edition's live-workflow limit.

Deployment choice is part of the commercial offer. Tines says flexible hosting options are available, the security page documents a cloud service Tines hosts and a product the customer hosts, and the Tines 3B page adds self-hosted, on-premises, and hybrid deployment with controls the customer defines. That lets Tines sell to buyers who require data control.

Tines delivers software that connects to a customer's existing tools, and the deployment story emphasizes control. Tines Stories runs as a cloud service Tines hosts and as a product the customer hosts in its own data center, and Tines 3B adds self-hosted, on-premises, and hybrid deployment with controls the customer defines.

Enablement is documented and self-serve. Tines University publishes learning paths from foundations through expert builder tracks, awards professional badges, and runs a certification program builders sign up for after completing the modules, alongside documentation, a template library, and a user community.

AI governance at scale is the open operational question. Paid editions let a customer bring its own model, so the public evidence emphasizes model choice over a proprietary-model advantage. The trust center lists an ISO/IEC 42001:2023 certification for AI management systems and publishes AI governance and third-party AI diligence controls, while the reviewed sources do not detail Tines's default model providers or its contractual model controls, the operational specifics enterprise AI reviews increasingly require.

Tines publishes a broad public trust posture. Its trust center lists SOC 2 Type 2, SOC 2 Type 1, CSA STAR Level 1, ISO/IEC 27001:2022, ISO/IEC 27701:2019, and ISO/IEC 42001:2023 in its compliance section, alongside GDPR, CCPA, Microsoft SSPA, and the CISA Secure-by-Design pledge. The security page states that the company maintains SOC Type II compliance with annual audits, and the trust center gates document downloads, including separate penetration test reports for Tines 3B and Tines Stories, behind an access request. The same trust center carries an incident notice dated June 2026: a compromise at Klue, a third-party vendor integrated with Tines's Salesforce environment, reached the CRM data that instance holds.

The federal posture changed in July 2026. Tines announced that it achieved Cybersecurity Maturity Model Certification Level 2, the Department of Defense framework for handling controlled unclassified information, and its public-sector page states that Tines is listed on the Department of Homeland Security's Continuous Diagnostics and Mitigation Approved Products List. Both claims sit on company-controlled surfaces, and the trust center's compliance list carries neither.

A vendor-operated federal authorization is still the visible gap. The security page documents a self-hosted deployment in a customer's own data center for buyers under requirements such as FedRAMP rather than a FedRAMP authorization Tines operates, so procurements that require an authorized service Tines runs stay harder to win until that authorization exists. The same announcement that reports the defense certification also quotes a Tines executive saying the Pentagon suspended the formal program behind it.

Tines positions as a platform, and the claim has substance on both products. Tines Stories shares one foundation across Storyboard, Cases, Workbench, and Agents, customers build their own workflows on it, and BankInfoSecurity reported more than a billion automated actions a week in February 2025. Tines 3B goes further and runs each workflow step as its own sandboxed container, with connectors supplying the credentials the code never sees.

Ecosystem leverage flows through integrations, partners, and a community. Tines connects to a wide range of tools, publishes a template library and runs a user community, and Deloitte announced a collaboration to bring the platform to its clients. The reviewed sources do not describe a third-party developer marketplace or a revenue-sharing partner program, so the leverage is integration breadth rather than a marketplace economy.

Competitive pressure is real, and the record bounds how far it can be argued. Contrary Research names Torq as a rival pitching the same no-code security automation, and the reviewed sources do not establish that a larger platform bundles comparable workflow automation into a suite Tines buyers already own. Tines answers by staying the layer that automates across every vendor's tools, including the incumbents' own.

The founders bring directly relevant experience. TechCrunch reports that Eoin Hinchy and Thomas Kinsella both spent around a decade in leading cybersecurity roles at DocuSign, eBay, and Deloitte before starting Tines in 2018, so the product reflects work they did rather than an outsider's read of the market.

The company scaled with capital discipline. Contrary Research records that Tines was bootstrapped and fully employee-owned in its first year, and TechCrunch reports that CrowdStrike and Silicon Valley CISO Investments joined the 2021 Series B led by Addition. BankInfoSecurity put the total raised at $272 million and headcount at 364 in February 2025.

The bench is filling out as the company grows. The Irish Times reports that average headcount was 220 in the year to January 2025 and has since passed 400 across the US and Ireland, and that Colin Bentley, formerly of Intercom, joined as vice-president of product.