June 2026 Summaries

Reddit's approach to integrating AI into their security operations center (SOC) was carefully structured to enhance efficiency without losing control. Faced with increasing alert volumes and complex investigations, Reddit implemented an AI-assisted investigation system named Event Horizon using Tines, which significantly reduced the time needed to process alerts from 15 minutes to about 30 seconds. This system allows even junior analysts to benefit from the expertise of senior engineers by following the same investigation workflows. While AI streamlines data gathering and initial assessments, high-impact decisions, such as locking accounts, still require human input to avoid unintended consequences. The workflows are designed to handle not just detection and response, but also resolution, ensuring continuity for affected users. Reddit's strategy emphasizes a collaborative approach where AI supports human decision-making, allowing the SOC to scale effectively while maintaining oversight and adaptability for future challenges.

Security and IT leaders are tasked with rapidly implementing AI and automation while ensuring governance over interactions with production systems and sensitive data. To address this, the concept of a human-in-the-loop workflow is introduced, where automated processes pause at predefined checkpoints for human input, balancing speed with oversight. This approach involves evaluating the reversibility of actions, asset importance, confidence levels, novelty, and compliance mandates to determine if an action requires human intervention. The workflow design must be structured to present full context to decision-makers, allowing for informed choices, and include mechanisms for efficient routing, escalation, and feedback. Common pitfalls such as over-gating and lack of context are noted, with recommendations to avoid these and ensure the human-in-the-loop system enhances rather than hinders operations. Platforms like Tines facilitate the integration of human-led and automated processes while maintaining robust security and audit protocols, thus aligning with compliance expectations and enhancing operational efficiency across security and IT functions.

AI agents do not operate like traditional security and IT playbooks, as they dynamically form intent, select tools, and execute actions, leading to potential governance challenges. In response to these challenges, organizations are tasked with accelerating AI adoption while ensuring strict governance, creating pressure on security, IT, and compliance teams to manage autonomous agents without compromising control and oversight. Agentic workflow automation emerges as a solution by integrating deterministic workflows, agentic reasoning, and human-in-the-loop processes within a unified governance framework, thereby coordinating specialized agents, managing state, enforcing checkpoints, and ensuring auditability. This approach differentiates agentic workflows from standalone AI agents and deterministic automation, emphasizing the importance of an orchestration layer to tie these elements together and maintain a consistent governance model. Practical applications of agentic workflows include streamlining security operations, automating ticket triage, and facilitating continuous compliance evidence collection, all of which require a balance between automated processes and human oversight to effectively manage both routine and high-impact tasks.

Compliance teams often grapple with manual processes that hinder effective access reviews, leading to SOC 2 exceptions and inefficiencies across other frameworks like GDPR and ISO 27001. Manual processes create gaps in evidence collection and documentation, which are crucial for audits that require clear proof of access and control operations. Compliance workflow automation addresses these issues by encoding compliance controls as integrated workflows that automatically generate audit evidence, thus transforming compliance into a continuous and auditable function. Automated workflows replace manual processes across various frameworks, such as SOC 2's access reviews and change management, GDPR's breach notification, and ISO 27001's continuous monitoring, by leveraging immutable logging and automated evidence collection. This approach not only ensures compliance by design but also reduces audit preparation time, as evidence is systematically gathered and readily available, aligning with the audit expectations of SOC 2, GDPR, and ISO 27001. The article emphasizes that effective compliance requires treating it as an architectural property rather than a periodic task, with solutions like Tines offering platforms that support automated, auditable workflows to streamline compliance processes.

A security engineer's attempt to deploy an AI agent for triaging phishing reports highlights the challenges of integrating governance into AI systems. Despite successful demonstrations, the agent stalls in a security review due to concerns about tool access, misclassification, and accountability. The text emphasizes the need for building governance into AI architecture from the beginning, suggesting that intelligent workflow platforms can help integrate deterministic automation, agentic AI, and human decision-making under a unified governance model. The document outlines the components of AI agents, such as perception layers and reasoning engines, and stresses the importance of guardrails that ensure safe AI actions. It discusses the varying risks associated with different types of AI agents—deterministic, fully autonomous, and human-in-the-loop hybrids—and the importance of human approval, especially for consequential actions. The text also provides a step-by-step blueprint for designing AI agents that align with governance frameworks, stressing the importance of audit trails, phased rollouts, and strong security measures to manage risks like prompt injection. By incorporating governance controls from the outset, AI agents can meet security criteria without requiring extensive post-deployment modifications.

Enterprise automation faces significant challenges when deployed in real-world environments, where unexpected alerts and changing APIs disrupt traditional deterministic models like SOAR playbooks, RPA bots, and iPaaS recipes. Intelligent workflow design, an emerging architectural discipline, addresses these challenges by integrating runtime context into the execution graph, allowing workflows to adapt dynamically to shifting conditions. This approach combines deterministic nodes for predictable tasks, agentic nodes leveraging AI for complex decision-making, and human-in-the-loop nodes for scenarios requiring human judgment. Seven principles underpin this method, emphasizing outcome-driven scoping, matching execution modes to decision complexity, designing for exceptions, embedding governance within workflows, making human-in-the-loop a design choice, treating integration as vendor-agnostic, and utilizing a layered architecture for adaptability. This framework supports enterprise automation that not only functions effectively across diverse scenarios but also evolves without necessitating complete rewrites when components change, ensuring robust and adaptable systems.

May's updates introduced several enhancements designed to offer users more control, transparency, and scalability within their AI environments. The release included the rebranding of Story copilot to "Workbench," which consolidates assistant functionalities under a single identity without altering its features. A significant addition is "Apps," which allows users to create dynamic web applications through a natural language chat interface, generating a full file system of code for review and edits. Furthermore, Workbench now offers expanded AI credit allocation for its new capabilities and improved governance features, such as the ability to upload API specs and use MCP tool support with multi-team access control. Enhancements in visibility and security include system diagnostics for self-hosted admins and fine-grained permissions for case management, along with improvements in workspace organization, such as scaling record limits, global date filters on dashboards, and nested folders for better navigation and template management. The updates reflect a commitment to evolving user needs while maintaining robust security and efficiency.

IT workflow automation enhances efficiency by coordinating multi-system processes through event-driven triggers, conditional logic, and API-level integration, which basic scripts and Integration Platform as a Service (iPaaS) tools often cannot provide. This automation facilitates the management of tasks such as account provisioning, password resets, and data reconciliation, allowing IT teams to create error-handling protocols, approval gates, and audit trails. It operates on three layers: triggers that start workflows, coordination that sequences and routes steps, and AI that classifies within deterministic structures. Platforms like Tines enable IT teams to manage these workflows under a single governed surface, integrating identity and infrastructure systems to ensure compliance and security. Key workflows span the identity lifecycle, service desk automation, security incident response, and infrastructure management, emphasizing the importance of IT's role in overseeing these processes to maintain governance and reduce the risks associated with shadow IT and AI.

Efficient coordination of identity across HR, IT, and security systems is crucial for managing employee lifecycle events, such as hiring, role changes, and terminations, but is often hindered by fragmented systems that do not communicate effectively without human intervention. HR workflow automation aims to bridge these gaps by orchestrating cross-system processes, utilizing intelligent workflows that manage identity reconciliation, onboarding, offboarding, self-service access requests, SaaS provisioning, hardware fulfillment, security policy rollout, and emergency notifications. Platforms like Tines facilitate this orchestration by connecting disparate systems, ensuring real-time updates, and maintaining comprehensive audit trails, while AI enhances these processes through access recommendations and anomaly detection, albeit with necessary human oversight to meet regulatory compliance requirements such as those outlined in the EU AI Act and GDPR. The integration of AI and orchestration layers in HR workflows allows for more seamless operations across departments, reducing security risks and ensuring timely access management, but requires careful governance to prevent fragmentation and ensure reliable auditability.

Service desk automation is increasingly being adopted by IT and security teams to manage the rising ticket volumes and service requests more efficiently, using intelligent workflows that integrate AI, deterministic logic, and human oversight. This approach involves automating the entire ticket lifecycle, including intake, classification, enrichment, routing, and resolution, while ensuring critical actions requiring human judgment remain under human control through human-in-the-loop (HITL) gates. Platforms like Tines allow for this comprehensive automation by treating AI actions, HTTP requests, and human approval steps as interconnected components within a single governed process, thus enhancing the speed and accuracy of ticket processing. The shift from linear, manual workflows to orchestrated, automated ones helps organizations manage workloads without increasing headcount, ultimately reducing bottlenecks and improving service delivery. Gartner predicts that by 2026, a significant portion of enterprise applications will feature task-specific AI agents, highlighting the importance of integrating AI with deterministic steps and human oversight to create a scalable, efficient service desk that meets modern IT and security needs.

AI workflow automation orchestrates multi-step processes where AI models, deterministic logic, and human judgment collaborate within governed environments to make decisions at specific points in the workflow, as opposed to traditional automation which follows fixed scripts. While consumer-grade tools offer value for individual use cases, they hit a ceiling with enterprise operations due to limitations like inadequate governance, security controls, integration depth, and scalability across teams. Enterprises require intelligent workflow platforms that inherently incorporate governance, security-grade controls, a full spectrum of execution modes, vendor-agnostic integration, and cross-team scalability without re-architecture. These platforms, such as Tines, blend deterministic, agentic, and human-in-the-loop execution styles into a single governed surface, allowing teams to adapt workflows dynamically based on context and data while maintaining audit trails and compliance standards. This evolution from basic automation to intelligent workflows helps enterprises manage complex operations with accountability, security, and flexibility.

Tines has introduced several enhancements to its platform, focusing on improved app management, visualization, AI integration, and user experience. The updated Apps feature allows for better performance monitoring and version control, while embedding Apps within cases enables dynamic, ongoing investigations. Visualization improvements include more accessible color styles and new functionalities like the record type schema explorer and enhanced content search capabilities. AI integration has been enhanced with Workbench skills, public AI agent chats, and detailed usage tracking, alongside support for external AI providers like Anthropic and Bedrock. The new Tines MCP server facilitates easy connection with AI tools such as Claude, ChatGPT, and Microsoft Copilot, with OAuth passthrough for user credentials. Admins can now enforce tenant-wide controls to improve story governance, and self-hosted teams gain support for custom Python runtimes. Additionally, the Builder Connect event promotes community learning and sharing among Tines users.

Network security has advanced with improved visibility, threat detection, and widespread AI adoption, yet operational challenges persist, particularly in the execution of processes after detection. Despite significant investment in tools and automation, network security teams continue to face issues such as slow response times and analyst burnout due to the complexity of hybrid, multi-system environments and the growing ecosystem of vendors and integrations that expand the attack surface. The rise in AI-enabled threats and identity-based breaches further complicates the landscape, necessitating a shift in focus from merely adding tools to rethinking execution processes across systems. Intelligent workflows are proposed as a solution, enabling orchestration of multi-step processes across diverse environments by standardizing execution, reducing errors, and maintaining governance, thus allowing teams to respond more quickly and effectively without increasing headcount. This approach emphasizes the need for improved coordination and flow between tools to address the operational breakdowns that hinder effective security management in an increasingly complex and fast-paced threat environment.

Enterprise workflow automation has evolved through various generations, from scripts and SOAR to modern intelligent workflow platforms, each aiming to reduce manual tasks and enhance efficiency but often introducing new challenges due to limitations in their architectural design. While earlier tools focused on automating specific tasks, their deterministic logic struggled to keep up with dynamic environments, resulting in persistent manual workflows as teams filled the gaps left by automation. The latest advancements in workflow automation integrate deterministic rules with AI-driven reasoning and human approval, allowing for more adaptive and comprehensive process management. This shift is transforming enterprises by creating platforms that unify multi-step processes across different systems, enabling consistent, auditable, and scalable operations. Despite the promise of reduced manual effort, challenges remain, such as ensuring governance and clarity of business value in deploying AI agents. The ongoing trend is towards platforms that support a mix of deterministic, agentic, and human-led execution modes, offering enterprises the flexibility to manage complex workflows across various departments like security, IT, HR, and finance, while maintaining rigorous governance and auditability.

Intelligent automation represents an evolution from traditional Robotic Process Automation (RPA) by incorporating AI-driven reasoning, system orchestration, and human decision points into comprehensive workflows that adapt to changing environments. While RPA focuses on emulating human interactions with application interfaces, intelligent automation operates at the API and workflow level, connecting systems programmatically and applying AI to navigate ambiguity and unstructured data. This approach enhances security and IT operations by maintaining stable connections through APIs, reducing the brittleness associated with UI-dependent RPA, and integrating governance structures to manage risks and compliance requirements effectively. Intelligent automation platforms, such as Tines, offer a unified environment for orchestrating tasks across multiple systems, providing audit trails, role-based access controls, and human approval gates to ensure reliability and compliance within complex workflows. The shift towards intelligent automation is driven by its ability to handle high-volume, multi-system processes, like SOC alert triage and identity management, more efficiently than traditional RPA, which often struggles with maintenance burdens and governance gaps. As organizations seek to integrate AI and automation across their operations, the emphasis is on selecting platforms that incorporate governance as a core architectural element to prevent the failures seen in early RPA deployments and to meet compliance standards like SOC 2, PCI-DSS, and HIPAA.

Organizations often encounter challenges with scripted automation in workflows like phishing alerts and employee onboarding, as these scripts tend to break when inputs change or new tools are introduced. According to research by Tines and Forrester, a significant amount of time is spent on manual tasks, leading to burnout and increased workloads among security and IT professionals. Intelligent workflow platforms, such as those provided by Tines, offer a solution by integrating deterministic rules, AI capabilities, and human-in-the-loop processes to manage complex workflows. Case studies from companies like Personio, Vimeo, and GitLab illustrate how these intelligent workflows can significantly improve efficiency by reducing manual labor and enhancing automation reliability. These systems enable better handling of alerts, case enrichment, and incident responses while allowing cross-system orchestration and audit logging, which are essential for environments that require adaptability and auditability. By leveraging Tines' Story Library and intelligent workflows, organizations can streamline operations across multiple teams, ultimately leading to increased productivity and reduced operational bottlenecks.

Employee offboarding automation addresses the challenges of securely and efficiently revoking access for departing employees by transforming manual processes into intelligent workflows. Traditional offboarding often leaves security gaps due to its reliance on identity providers like Okta, which do not cover the full spectrum of SaaS applications and personal access tokens. Intelligent workflows, however, integrate identity and access governance, compliance documentation, and asset recovery into a single platform, triggered by a Human Resource Information System (HRIS) event. This platform coordinates the deactivation of accounts, rotation of shared credentials, and the reassignment of resources and roles, while ensuring compliance through centralized audit trails. The automation of these processes not only mitigates the risk of unauthorized access post-departure but also streamlines coordination between IT and security teams, closing handoff gaps that could be exploited. By consolidating all steps into a unified, automated workflow, organizations can effectively manage employee lifecycle events, maintain security integrity, and reduce operational inefficiencies associated with manual offboarding procedures.

Tines, known for its ability to integrate an average of 68 different tools for customers, is launching a new Technology Partner Program aimed at enhancing its existing network of over 75 technology partners, including AWS, IBM, and Elastic. This initiative seeks to streamline partnerships, offering a three-tier system—Verified, Growth, and Select—reflecting the depth and commitment of each partnership, and is designed to enhance collaboration, co-selling opportunities, and technical innovation. For customers, the program promises improved integration, faster time-to-value, and better-documented use cases, enhancing the overall utility and efficiency of their technology stack. By fostering deeper relationships and expanding the partner ecosystem, Tines aims to deliver more comprehensive and seamless solutions, meeting customer demands for effective tool integration and improved workflow automation.

Agentic workflows, characterized by AI-driven processes that autonomously handle complex tasks with minimal human intervention, offer a transformative approach for security and IT teams dealing with fragmented tools and manual processes. Unlike traditional automation and Robotic Process Automation (RPA), agentic systems can autonomously plan, decide, and act, thereby handling ambiguity and variation that older playbooks couldn't manage. However, their adoption has outpaced governance frameworks, leading to risks such as over-permissioned agents, opaque decision-making, and automation bias. Effective governance requires a focus on safety, compliance, accountability, and predictable outcomes to close the gap between deployment and control. This involves policy governance to define agent boundaries, operational governance to manage day-to-day activities, and lifecycle governance to oversee agent evolution. A risk-tiered oversight model can help delineate where agent autonomy ends and human oversight begins, ensuring that agent decisions are observable and not just logged. Tines, an intelligent workflow platform, integrates these governance layers, enabling security and IT teams to build and manage workflows that unify deterministic automation, agentic AI, and human-in-the-loop steps.

AI agents are increasingly integrated into team operations, requiring robust workflow orchestration to manage dependencies and ensure seamless cross-system processes. Workflow orchestration acts as a control plane, coordinating automated tasks, human decisions, and AI actions across various business applications and services. It ensures tasks execute in the correct sequence, manage dependencies, and maintain an auditable record, which is crucial as AI deployments accelerate. Orchestration is distinct from simple automation, which handles individual tasks, by managing the end-to-end process, including human approvals and error handling. The absence of a coordination layer can lead to fragmented AI initiatives and governance gaps, potentially causing deployment failures. Effective orchestration integrates deterministic automation, agentic AI reasoning, and human-in-the-loop execution within a single framework to facilitate scalable, trustworthy operations. As AI and multi-agent systems become more prevalent, orchestration platforms like Tines provide crucial support, enabling teams to manage workflows efficiently and ensure compliance with governance and security standards.

Modern workflow builders have transformed the way automated processes are created and executed, bridging the gap between technical and non-technical users by leveraging visual canvases and AI advancements. Initially, workflow automation was the domain of developers, but the introduction of drag-and-drop canvases and low-code/no-code solutions allowed analysts and operators to design workflows without extensive coding knowledge. This democratization has been further enhanced by AI, which enables natural-language workflow creation, integrates AI reasoning directly into workflows, and acts as a debugging and improvement partner. Enterprise-grade workflow builders distinguish themselves with robust governance and security controls, multi-mode building capabilities, and vendor-agnostic integration. These platforms enable full-spectrum execution, combining deterministic steps, AI agents, and human-in-the-loop processes under a unified governance system. The evolution from basic workflow builders to intelligent workflow platforms is exemplified by tools like Tines, which offer a comprehensive environment for building and managing complex workflows across various domains, ensuring scalability and compliance while enhancing efficiency and collaboration.