Shuffle review

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Shuffle is an open-source security orchestration and automation platform for security operations teams. Its visual editor connects applications, triggers, conditions, variables, APIs, and scripts, supporting workflows for alert processing, indicator enrichment, ticket creation, notifications, and response actions. Teams can run it as a cloud service, deploy it on premises, or use a hybrid setup with a local automation runner. The product is suited to security groups that want visual runbook design without limiting automation to predefined actions.

The published plans show a free Scale tier with 2,000 app runs, three tenants, one location, and a hard app-run limit. A second Scale tier includes 150,000 app runs, three tenants, one location, and the same type of hard limit. Business starts at 300,000 app runs and adds a soft app-run limit, unlimited tenants and locations, email support, and onboarding and setup. Enterprise also starts at 300,000 app runs, with unlimited tenants and locations, a soft app-run limit, on-call support, and professional services. This structure makes the free tier practical for smaller evaluations or controlled workloads, while larger deployments should compare run limits and service needs across the paid tiers.

Shuffle’s strongest fit is an environment that needs both security-specific integrations and flexible execution controls. Available connections include Microsoft 365 Defender, Elastic Security, Wazuh, MISP, Datadog, Jira, Slack, Gmail, and Huntress. Webhooks, cron or interval schedules, approval steps, REST API triggers, execution history, filtering, reruns, mass aborts, and a workflow debugger support operational oversight. The built-in HTTP app, custom Python scripts, no-code app creation, and GitHub or Azure DevOps backups extend the platform beyond fixed connectors. Choose Shuffle when self-hosting, open-source access, and visual security automation matter; choose an alternative if your team prefers a narrower tool with less workflow and deployment flexibility.

Shuffle pros and cons

• Where it wins
  • Visual workflows support triggers, conditions, variables, approvals, and scripts
  • Free Scale tier includes 2,000 app runs with web, API, and self-hosted options
  • Broad security integrations plus debugging, scheduling, webhooks, and REST execution
• Where it doesn't
  • Paid Scale plans retain hard app-run limits
  • Advanced Business and Enterprise support features require higher tiers
  • Workflow design can span many components, scripts, integrations, and deployment choices

Shuffle fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update