CISO Tribune

Vendor comparison · 2 companies

Tines vs UnderDefense

Tines is an environment for turning ideas into software that a business can build, deploy and operationalize. UnderDefense sells UnderDefense MAXI, a security and compliance automation platform, and an MDR service in which security experts monitor, detect and respond to incidents. CISO Tribune files both under SOAR and security automation. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Tines
  • UnderDefense
Tines vs UnderDefense: Products, Customers and Funding Compared
TinesTines is an environment for turning ideas into software that a business can build, deploy and operationalize.tines.comUnderDefenseUnderDefense sells UnderDefense MAXI, a security and compliance automation platform, and an MDR service in which security experts monitor, detect and respond to incidents.underdefense.com
What it sells
  • UnderDefense MAXI[1][2][3][5][6]A security and compliance automation platform. UnderDefense MAXI integrates with SIEMs, firewalls and endpoint protection solutions.
  • UnderDefense Agentic AI SOC[4]AI agents investigate each alert. Analysts on shift 24/7 decide what happens next.
  • MDR[1][2][6]Security experts monitor, detect and respond to incidents.
  • Cloud-based SIEM[2]A cloud-based SIEM that collects, analyzes and responds to security events.
  • CIS AWS Benchmark assessment[8]A self-service assessment of AWS security.
Categories
Headquarters
Dublin, Ireland[2]Not stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Privately held[2][13][18]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • April 29, 2026Tines appointed Jessica Degenhardt as director, channel partnerships, Americas, to lead its North America channel program.[12]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen October 29, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[10]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Tines sells to organisations where every team builds and IT and Security keep visibility, governance and control. Security operations teams are a named audience, with pre-built triage agents to tune to their detections, escalation paths and tools. IT teams are addressed with service delivery built around their approvals, systems and exceptions. Tines is hosted as a cloud service, and customers under specific regulatory requirements can deploy Tines in their own data center.UnderDefense MAXI integrates with a customer's security infrastructure, including SIEMs, firewalls and endpoint protection solutions. UnderDefense offers compliance templates to organizations working toward standards such as SOC2 and ISO 27001. UnderDefense MAXI provides executive-level reports for C-level readers.
Last verified
September 27, 2026October 26, 2026

Where they overlap

  • Tines and UnderDefense are both filed under SOAR and security automation.

Where they differ, field by field

  • Tines's primary category is SOAR and security automation; UnderDefense's is MDR and managed SOC.
  • Tines is also filed under AI SOC analysts. UnderDefense is also filed under Penetration testing and red team services and Compliance automation.
  • Tines lists Tines and Case and incident management. UnderDefense lists UnderDefense MAXI, UnderDefense Agentic AI SOC, MDR, Cloud-based SIEM and CIS AWS Benchmark assessment.
  • Tines is headquartered in Dublin, Ireland.
  • Tines is privately held.

What it sells: Tines

What Tines does[1][3][4][5][6][9][10][12][14][15][16][17][20][21]
Teams build in spaces by prompt, in chat, code-first, or from Claude Code and Codex. Every step runs sandboxed, isolated from the next. Tines is model-agnostic and works with any API or MCP server.
What Case and incident management does[15]
Case and incident management is integrated with Tines 3B and Tines Stories. Teams investigate, remediate and report on incidents in one collaborative workspace.

What it sells: UnderDefense

What UnderDefense MAXI does[1][2][3][5][6]
UnderDefense MAXI natively monitors endpoints, networks, users and decoy beacons. UnderDefense MAXI provides ready-to-use playbooks, AI-powered alert enrichment and notifications through Slack, Jira or a preferred tool. UnderDefense MAXI provides pre-built compliance templates for standards such as SOC2 and ISO 27001.
What UnderDefense Agentic AI SOC does[4]
UnderDefense Agentic AI SOC uses AI agents that investigate each alert. Analysts on shift 24/7 decide what happens next.
What CIS AWS Benchmark assessment does[8]
UnderDefense offers a self-service CIS AWS Benchmark assessment. The assessment covers evaluating the maturity of cloud security controls, identifying misconfigurations, providing detailed mitigation instructions and giving a summary table with a final CVSS v3.0 score.

Questions about Tines and UnderDefense

What do Tines and UnderDefense sell?
Tines sells Tines and Case and incident management. UnderDefense sells UnderDefense MAXI, UnderDefense Agentic AI SOC, MDR, Cloud-based SIEM and CIS AWS Benchmark assessment.
Are Tines and UnderDefense in the same category?
They share SOAR and security automation. Tines's primary category is SOAR and security automation and UnderDefense's is MDR and managed SOC.
Where are Tines and UnderDefense headquartered?
Tines is headquartered in Dublin, Ireland.
Who owns Tines and UnderDefense?
Tines is privately held.
Who are Tines and UnderDefense sold to?
From its own pages, Tines sells to organisations where every team builds and IT and Security keep visibility, governance and control. UnderDefense MAXI integrates with a customer's security infrastructure, including SIEMs, firewalls and endpoint protection solutions.
What have Tines and UnderDefense announced recently?
April 29, 2026: Tines appointed Jessica Degenhardt as director, channel partnerships, Americas, to lead its North America channel program.

About Tines

Tines is an environment for turning ideas into software that a business can build, deploy and operationalize. Tines lets every team build, and IT and Security maintain complete visibility, governance, and control. Tines gives teams a place to create agents, apps and automations and put them to work.[4]

Teams in Tines build in spaces, by prompt, in chat, code-first, or from Claude Code and Codex. Teams can build from the coding assistant they already use and run and monitor the result in Tines. In Tines, every step runs sandboxed, isolated from the next. Tines connectors reach customer systems through a secure credential proxy. Tines is model-agnostic and works with any API or MCP server. Tines lets customers choose the models, tools and infrastructure that work for their enterprise. Tines connects to the tools a team already runs on and to any other system reachable on a network.[4][5][14]

IT and Security monitor spend, access, duplicates and dependencies from one console in Tines. Teams in Tines build inside spaces the organization has already approved, so most work never needs a ticket. Tines monitors running software, identifies problems and proposes tested fixes and improvements, and the customer decides which changes go live.[4][14]

For security teams, Tines offers pre-built triage agents that can be tuned to a team's detections, escalation paths, and tools. Tines security use cases include enrichment, containment, and remediation, with each step running as the customer designed it. Tines handles feeds, indicators, and enrichment, with what matters routed to the right tools. Tines handles findings, owners, and fixes, with the riskiest issues addressed first. Tines handles firewall rules, DNS, and proxies, with threats blocked across vendors. Tines handles evidence, control testing, and vendor risk. Tines offers case and incident management integrated with Tines 3B and Tines Stories, where teams investigate, remediate and report on incidents in one collaborative workspace.[5][15]

Tines handles patching, configuration changes and capacity, with monitoring that flags issues early. Tines handles network changes, access, incidents and certificates across every device and vendor. Tines is used to match, reconcile and post across systems for the close. Tines logs, routes and resolves every employee issue, with sensitive cases kept private. Tines gives teams access to legal guidance, past decisions and approved positions for moving contracts forward.[16][17][20]

Tines is both a cloud service that Tines hosts and a product that customers can host. A customer working under specific regulatory requirements, such as FedRAMP, can deploy Tines in its own data center. Tines supports SSO/SAML by default across all plans. Administrators in Tines can set a custom session timeout length to match organizational policies. Tines automatically captures an audit log any time a user changes any piece of data in a Tines tenant. With teams in Tines, customers can logically separate users, credentials, resources, and stories.[21]

Tines aligns its information security program to the SOC2 framework. Tines maintains SOC Type II compliance and is audited annually. Tines maintains a Trust Center where customers can obtain security reports and attestations.[1][3][4][5][6][7][8][9][10][11][15][16][17][19][21]

Tines on the record

Sources

Tines full record

  1. [1]StoriesTines · tines.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Tines announces 50 million in new financing 302124992Tines via PR Newswire · prnewswire.com · published April 24, 2024 · Tier A
  3. [3]SOAR Solutions: Modern SOAR built for speed, security, and scaleTines · undated page, accessed October 29, 2026 · Tier A
  4. [4]Tines | The secure environment for AI agents, apps and automationTines · undated page, accessed October 29, 2026 · Tier A
  5. [5]Security Solutions: Built by security practitioners, for security practitionersTines · undated page, accessed October 29, 2026 · Tier A
  6. [6]AI SOC Solutions: Build the AI SOC your team actually needsTines · undated page, accessed October 29, 2026 · Tier A
  7. [7]Threat intelligence Solutions: Threat intelligence that drives faster responseTines · undated page, accessed October 29, 2026 · Tier A
  8. [8]Network security Solutions: One platform for every network defense workflowTines · undated page, accessed October 29, 2026 · Tier A
  9. [9]Customers | TinesTines · undated page, accessed October 29, 2026 · Tier A
  10. [10]How to use cURL to Tines Stories. | Tines Stories Knowledge BaseTines · published August 4, 2026 · Tier A
  11. [11]IT service delivery and support Solutions: Build the future of IT service deliveryTines · undated page, accessed October 29, 2026 · Tier A
  12. [12]Tines expands partner ecosystem to power intelligent workflows across the enterpriseTines · published April 29, 2026 · Tier A
  13. [13]Tines Stories Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed October 29, 2026 · Tier C
  14. [14]Govern AI building | TinesTines · undated page, accessed November 10, 2026 · Tier A
  15. [15]Tines Stories | TinesTines · undated page, accessed November 10, 2026 · Tier A
  16. [16]Solutions for IT | TinesTines · undated page, accessed November 10, 2026 · Tier A
  17. [17]Solutions for Finance | TinesTines · undated page, accessed November 10, 2026 · Tier A
  18. [18]Solutions for People | TinesTines · undated page, accessed November 10, 2026 · Tier A
  19. [19]Solutions for RevOps | TinesTines · undated page, accessed November 10, 2026 · Tier A
  20. [20]Solutions for Legal | TinesTines · undated page, accessed November 10, 2026 · Tier A
  21. [21]Security at Tines | TinesTines · undated page, accessed November 10, 2026 · Tier A

UnderDefense full record

  1. [1]underdefense.comUnderDefense · underdefense.com · undated page, accessed October 26, 2026 · Tier A
  2. [2]Compliance PricingUnderDefense · undated page, accessed November 10, 2026 · Tier A
  3. [3]Agentic AI SOC & Compliance Automation Platform | UnderDefenseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  4. [4]Elastic Cloud Pricing 2026: Serverless, Hosted, and SIEMUnderDefense · undated page, accessed November 10, 2026 · Tier A
  5. [5]Cloudflare Pricing 2026: WAF, Zero Trust, and EnterpriseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  6. [6]Palo Alto Networks Pricing 2026: Firewalls, SASE, and XDRUnderDefense · undated page, accessed November 10, 2026 · Tier A
  7. [7]2025 MXDR Pricing Guide: Choosing the Right MXDR providerUnderDefense · undated page, accessed November 10, 2026 · Tier A
  8. [8]Episode 4: Cyber Resilience 201 — AWS Cloud Security - UnderDefenseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  9. [9]E-Mail Under Attack - UnderDefenseUnderDefense · undated page, accessed November 10, 2026 · Tier A
  10. [10]UnderDefense MAXI Reviews & Product DetailsG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.