Shuffle

6.3easy start · #12 of 19
in SOAR Software

Free to practise onnot on record
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on api, self-hosted, Web. Paid plans from $29/mo.

Shuffle is ranked #12 of 19 in SOAR software on The Geeks Club. It runs on API, Self-hosted, Web. Paid plans start at $29/mo.

Shuffle plans and pricing

All plans

Starter $29/mo $29/month for 10k App Runs; starts free with 2k App-Runs 10 workflows · 5 users · 1 tenant · 1 day workflow run history · 7 days workflow backup shuffle.security · 29 Sept 2026

Standard $1,920/mo Starts from$1920/month 25 workflows · 15 users · 3 tenants · 90 days workflow run history · 30 days workflow backup shuffle.security · 29 Sept 2026

Enterprise $2,920/mo Starts from$2920/month Custom App-Runs · unlimited tenants, environments, users, and workflows · 365+ day workflow run history shuffle.security · 29 Sept 2026

Compared on SOAR software

Free plan: Yes
Playbook automation: Yes
Alert enrichment: Yes
Threat intel actions: Yes
Case management: Yes
Deployment model: hybrid
Published integrations: 2,500

Best Shuffle alternatives

See all 12

Sumo Logic 0 of 4 in the starter kit Lesson 17.5 CrowdStrike Falcon Surface 0 of 4 in the starter kit Lesson 27.0 Tracecat 0 of 4 in the starter kit Lesson 37.0 OpenSOAR 0 of 4 in the starter kit Lesson 46.7 Tines 0 of 4 in the starter kit Lesson 56.7 Rapid7 InsightConnect 0 of 4 in the starter kit Lesson 66.6

The record

Purpose: Shuffle Security is an AI-powered security operations platform for incident response across cloud, on-premises, and hybrid infrastructure.
Automation: The site describes automatic triage and threat enrichment, suggested response actions, and visibility into automated decisions.
AI models: The product page says Shuffle works with cloud LLM APIs or users’ own models.
Integrations: The homepage advertises 3,000+ MCP-ready integrations and names Splunk, CrowdStrike, Sentinel, and ServiceNow as examples.
Integration tools: The homepage says users can build integrations with its SDK and that integrations support bidirectional sync.
Detection: Shuffle Pipelines can ingest data, parse it, and match Sigma rules with Tenzir, and the product offers host monitors for endpoint compliance and remote response.
Host monitoring: The homepage describes continuous SOC2 checks for encryption, screenlock, patching, and MDM posture, along with software inventory and vulnerability matching.
Self-hosting: Shuffle can be deployed on-premises or self-hosted on a cloud platform such as GCP, AWS, or Azure.
Security features: The pricing comparison lists two-factor authentication, SSO/SAML, and secret key/authentication encryption among its security features.
Support: The pricing page lists community support for Starter, standard support for Standard, and standard or enterprise-level support for Enterprise.
Usage limits: The Starter plan begins with 2,000 free App-Runs, and the pricing page defines App-Runs as workflow automation executions used to measure platform usage.
Company background: Shuffle’s founder says Shuffle Security is a security-operations-focused interface built on Shuffle’s backend automation technology.
Founded: 2019
Price from: $29/mo

Where it ranks on The Geeks Club

Best SOAR Software in 2026#12 of 19

Is Shuffle yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Shuffle

Sources

shuffle.security· checked 29 Sept 2026
shuffle.security/pricing· checked 29 Sept 2026
shuffle.security/articles/6_years_of_open_source· checked 29 Sept 2026