Shuffle is an open-source automation platform built for security teams to create and run workflows. A visual designer works alongside a no-code app creator that can generate integrations from Swagger or OpenAPI specifications and API documentation URLs. Its public catalog lists more than 2,500 apps, including Slack, Gmail, MISP, Wazuh, Splunk and Jira. Workflows can begin with webhooks, schedules, subflows or user input; extensions include AWS Lambda, AWS S3, Kafka and Pub/Sub. Teams can choose self-hosted open source, self-hosted licensed software, Shuffle Cloud SaaS or a hybrid setup. Documented runtime choices include Docker Compose, Docker Swarm, hybrid cloud with a local Orborus runner and Kubernetes with Helm charts. Shuffle documents bcrypt password hashing, AES-256 encryption, tenant-controlled SAML/SSO and MFA. Its Scale free plan includes 2,000 app runs per month, with a hard limit, three tenants and one location. Custom Python apps are not yet easy to create for Shuffle Cloud; on-premises instances support local app hotloading.
Who it is for
Shuffle is suited to security operations teams, including CERT/SIRT groups, that want to build and share workflow automations. Its deployment options also suit teams choosing between cloud, self-hosted or hybrid operation.
What is good
- Public catalog lists more than 2,500 apps
- Visual workflow designer and no-code app creator
- Supports self-hosted, cloud and hybrid deployment
- Free Scale plan includes 2,000 monthly app runs
What to know first
- Scale has a hard app-run limit
- Scale includes three tenants and one location
- Custom Python apps are not easy to create for Shuffle Cloud
Verdict
Shuffle combines workflow building with a broad integration catalog and several deployment choices. Check the Scale limits and cloud app-creation constraint against your intended setup.
Shuffle plans and pricing
All plansCompared on runbook automation software
- Free plan
- Yes
- Approval steps
- Yes
- Scheduled runs
- Yes
- Event triggers
- Yes
- Incident integrations
- Yes
- Audit logs
- Yes
- Self-hosted option
- Yes
- Runs included
- $2,000/mo
