Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What are runbooks? And how to automate them

Runbooks are supposed to be the safety net under operations. Unfortunately, most aren't because they live in wikis that decay as tools change, get linked from alerts but never consulted, and fail the responder the moment pressure arrives. The gap is between what the runbook says and what the responder can actually execute. Teams reach for AI to close the gap.

What is a workflow engine, and how does it work?

The Tines Voice of Security 2026 report found that security professionals spend 44% of their time on manual, repetitive work. A workflow engine is the software built to take that operational drag off people, deciding what happens next based on events, rules, and state. The category is shifting. The workflow engine used to live inside one system, running a narrow set of backend steps.

What is business process automation? A practical guide

When a security alert fires, your analyst opens your security information and event management (SIEM) platform, copies an IP address, pastes it into a threat intelligence platform, checks the asset inventory, cross-references the identity provider, and messages the on-call lead on Slack. Meaning your analyst needs to wade through five tools, taking at least ten minutes before any actual response begins.

Automate employee onboarding with BambooHR and Microsoft Teams

Automate employee onboarding across BambooHR, Okta, Google Workspace & Microsoft 365 in minutes with Tines. Manually provisioning accounts across four platforms every time someone joins the company is slow, inconsistent, and easy to get wrong. In this Five Minute Flow, we walk through a Tines story that automates the entire onboarding process — from a daily BambooHR report through to account creation in Okta, Google Workspace, and Office 365, plus automatic Microsoft Teams channel access.

Designing AI workflows: principles for safety and control

Most teams adopting AI in their workflows understand that LLMs do not behave like traditional software. The same input does not always produce the same output, and even when it does, the model can be wrong, manipulated, or misled. Hallucinations happen even without adversarial input. Air Canada learned this in 2024 when a tribunal ordered the airline to honor a bereavement-fare refund policy its support chatbot had invented out of thin air.

Escalate unacknowledged login alerts with PagerDuty and Jira

What happens when a suspicious login fires and the user doesn't respond? This Tines flow handles it automatically, escalating to PagerDuty in minutes. Escalate alerts which users have not responded to shows you how to build a smart, automated response workflow that checks in with your user first — and only escalates if they don't reply in time. No more manual follow-ups, no missed alerts slipping through the cracks.

You proved the value, finance is backing the growth: bringing Story copilot into the AI credit framework

It was a bold move, but our finance team was fully on board. They both approved and championed the approach. They wanted to see exactly how much value we could unlock for our customers. They didn't look at the resulting bill and ask us to slow down.

Tines achieves the ISO trifecta; ISO 27001, ISO 27701, and ISO 42001 certification

Today, we’re proud to share that Tines has achieved ISO 27001, ISO 27701, and ISO 42001 certification. This marks an important milestone in how we continue to effectively manage information security, privacy, and AI governance across our business and platform. For you, this is about more than achieving the ISO trifecta.

Gather & add correlated searches in Splunk Enterprise Security to Drata

Tired of manually exporting Splunk correlated search data into your compliance tools? This 5-minute flow from the Tines story library automatically queries Splunk Enterprise Security's notable index, polls for results, and uploads them directly as external evidence to your Drata security controls.