June 2025 Summaries

Tines has been honored with the WINspiration Award by Wiz at the inaugural WIN awards, recognizing its exceptional partnership and contribution to delivering tangible outcomes for joint customers within the WIN program. Launched in 2023, Wiz's WIN program is an open, bidirectional integration ecosystem comprising over 200 partners, designed to enhance integrated cloud security by allowing prioritized insights to flow between Wiz and partner platforms. Tines, celebrated for its commitment to innovation and customer success, brings workflow orchestration and automation to this ecosystem, enabling seamless integration of Wiz into existing workflows, which helps security teams focus on high-impact issues and improve operational efficiency. By automating the security incident response process, the partnership between Wiz and Tines reduces backlog and streamlines workflows, allowing teams to dedicate more time to strategic tasks and enhancing the overall security posture of organizations. The collaboration highlights the importance of a unified operating model where security and cloud teams work together to manage risks effectively throughout the Software Development Life Cycle (SDLC), with both companies emphasizing their shared commitment to innovation, collaboration, and customer success.

Tines has introduced the AI Agent action, a tool designed to integrate AI agents into workflows, allowing users to build and deploy agents that perform tasks autonomously while maintaining security and privacy. This innovation addresses the challenge of existing AI solutions failing to manage complex workflows by offering two modes: Task mode, which leverages language models to adapt and perform tasks such as vulnerability monitoring and patch deployments, and Chat mode, which facilitates user interactions and request fulfillment. Tines emphasizes flexibility, enabling users to create custom agents tailored to their needs or choose from pre-built examples, with the capability to operate agents in a semi- or fully autonomous manner. The platform supports both deterministic and agentic workflows, ensuring transparency and data security by running AI features on its own infrastructure, and allows integration with users' preferred language models. Tines provides resources and templates for those new to agentic workflows, encouraging users to explore the potential of the AI Agent action.

At the re:Inforce event, Amazon Web Services (AWS) introduced an upgraded version of AWS Security Hub designed to help organizations identify and prioritize risks within their cloud environments, now enhanced through a partnership with Tines, a workflow orchestration and automation platform. This collaboration allows AWS Security Hub to transform security signals into actionable insights with intuitive visualizations and natural language summaries, while Tines automates triage, enrichment, and remediation of alerts, thereby reducing security risks, improving productivity, and minimizing operational disruptions. The integration empowers teams to handle cloud security alerts more efficiently, using pre-built workflows and action templates across over twenty AWS products, and significantly shortens response times. An example workflow illustrates how an OCSF alert for a non-compliant S3 bucket is managed through automatic context gathering, enrichment, and the creation of a comprehensive Tines Case, with options for predefined remediation or further team analysis, demonstrating the potential for transforming security operations.

The evolution from traditional Security Operations Centers (SOC) to Modern SecOps is driven by the need to address the inefficiencies and rigidity of the outdated three-tier model, which struggles to keep pace with today's sophisticated cyber threats and often results in high burnout and turnover among analysts. While the concept of an "autonomous SOC" offers an exciting vision, it remains unrealistic in the near term, as security fundamentally involves human expertise. Instead, the integration of AI and automation in Modern SecOps serves to augment human capabilities by automating repetitive tasks, accelerating investigations, and allowing analysts to engage in more meaningful security work. This shift not only enhances detection and response workflows but also improves analyst satisfaction and career progression. Organizations that successfully blend AI with human oversight are likely to achieve significant gains in efficiency and effectiveness, making progress beyond what autonomous solutions currently promise.

The Tines Lookback for Spring 2025 highlights several new features and updates across its platform, focusing on enhancing user experience and collaboration. Tines introduced 10 new page templates, improved navigation, and custom validation error messages to streamline page building. The Workbench now features new permissions and roles, including the Preset run permission, to foster better teamwork, alongside a tool for documenting thought processes before actions. The Events console has enhanced filtering options, allowing for more precise event searches and immediate event processing. Additionally, personalized story suggestions are available to inspire users with workflow ideas, and updates for Cases include toggling comments, previewing unmet requirements, and searching filters for better case management. Other notable features include updated action monitoring webhook payloads, extended timeout for Run Script actions, and enhanced Change Control menus, providing users with more flexibility and efficiency in their operations.

Tines transitioned its workflow automation platform from AWS Fargate to an EC2-backed ECS Capacity Provider to address scalability challenges and enhance deployment reliability. While Fargate offered simplicity, it fell short in handling the company's rapid deployment needs and introduced issues like "Fargate capacity unavailable" errors and stale code. By shifting to EC2, Tines gained greater control over hardware, improved performance for compute-heavy tasks, and achieved cost savings through a Mixed Instances Policy leveraging Spot instances. Despite the increased operational overhead, the migration resulted in better deployment stability, performance improvements, and moderate cost savings, although it also unveiled new challenges such as task startup timeouts. The experience underscored the value of flexibility and control over infrastructure, sparking internal discussions on potential future transitions to Kubernetes, albeit with the same EC2 capacity approach.