Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

According to the SACR 2025 AI SOC Market Landscape report, 40% of security alerts go uninvestigated. The average alert investigation takes 70 minutes. Meanwhile, attackers achieve breakout in under 48 hours. That math doesn’t work in anyone’s favor — except the adversary’s.

Storyboard sections are here! Have you ever built a Tines story and thought, “How am I going to explain this so that anyone can understand it right away?” We are excited to introduce the following ways to instantly bring visual clarity to your workflows.

If you’ve been in security operations for more than a few years, you’ve lived through the automation hype cycle at least twice. First, it was SIEM that was going to solve everything. Then SOAR was supposed to fix what SIEM couldn’t. Now, AI SOC platforms are delivering what SOAR always promised but never actually could.

At Tines, we power important workflows for some of the most demanding teams in the world, and for years, that always meant supporting deterministic, auditable automation. But as reasoning models have matured, our customers have started asking a different question: what if the workflow itself could reason?

The last 12 months have been the most challenging in Tines’ history. They’ve also been the most successful. We navigated macroeconomic headwinds and breakneck technological innovation. At the same time, global growth and scale demanded new operational discipline and relentless focus. But alongside those challenges came major milestones. We maintained a world-class 122% net revenue retention (NRR).

The time between compromise and data exfiltration now occurs before most SOCs finish their first triage. Phishing breaches succeed in under 60 minutes. The average SOC investigation takes 70. This is why financial institutions are operating at a structural disadvantage.

Digital transformation can come at a cost. As organizations double down on cloud and web-based apps to drive efficiency and growth, security and IT teams often find themselves buried under a mountain of siloed data and complex alerts, leaving them unable to keep pace with an expanding attack surface..