OpenSOAR
7.3#2 in security orchestration, automation, and response softwareFree planFree planWebAPILinuxSelf-hosted
VisitOpenSOAR vs Tines
What both publish
| Fact | OpenSOAR | Tines |
|---|---|---|
| Case management | OpenSOAR links alerts to incidents, assigns cases, records timeline comments, stores observables and offers correlation suggestions. | Cases provides automation-first incident management with records, dashboards, runbooks, collaboration, and audit trails. |
| Deployment | OpenSOAR is self-hosted and its repository documents a Docker Compose deployment. | Tines 3B can run self-hosted, on-premises, or in a hybrid deployment. |
| Integrations | The maker lists Elastic Security, VirusTotal, AbuseIPDB, Slack, and Email as integrations, with an extensible Python SDK. | Tines says Stories can connect to any service that exposes an API, including internal tools and niche systems. |
| Intended users | The maker identifies SOC teams, MSSPs, incident responders, SREs, infrastructure and on-call teams, and DevOps teams as use cases. | Tines 3B is for builders across business teams, with Security and IT responsible for governing the work. |
| Licence | OpenSOAR is released under the Apache 2.0 license. | Tines commercial terms grant a limited, non-exclusive, non-transferable subscription license, so the product is not open source. |
OpenSOAR plans
- FreeFree
- OpenSOARFree
Tines plans
- Free editionFree
- Business Edition—
- Enterprise Edition—
- Explore (Free edition)Free
- Paid editionsPriced on request
Pick OpenSOAR if…
It suits SOC teams, MSSPs, incident responders, SREs, infrastructure and on-call teams, and DevOps teams seeking alert automation. Teams wanting to keep AI triage data within their network can use local Ollama, according to the maker.
Pick Tines if…
Tines 3B suits business-team builders who need to create AI-assisted workflows and connect them to APIs or MCP services. It may also suit organizations where Security and IT need controls for governing that work and options for self-hosted, on-premises, or hybrid deployment.