Integrating Tines’ automation with Panther’s advanced threat detection streamlines incident response, enhancing security operations efficiency and effectiveness.
With Tines, you can easily take any action that has a defined API. We've already pre-built some of the most popular ones for you, so you can build quickly.
With Tines, you can easily take any action that has a defined API using an HTTP request. To build even more quickly, copy a cURL command and paste it into the storyboard.
cURL request
curl -v -X GET --location "https://api.nasa.gov/neo/rest/v1/neo/browse?api_key=DEMO_KEY" -H 'Content-Type: application/json'Paste in your Tines story
Explore pre-built workflows for Panther. Use them for inspiration or as a starting point to build your custom automation solution.
Use Tines' Send to Story action to query Panther with specified SQL commands and retrieve the resulting data.
Tools: Panther

Respond to DLP alerts if a user makes something on Google Drive public, accidentally or deliberately. This Story will contact the user via Slack, remove the relevant permissions from the file, and make it private again if necessary.
Tools: Google, Panther, Slack


Receive a slash command with an indicator, enrich it using Panther and AbuseIPDB, and send a Slack message with the results to a specified channel.
Tools: AbuseIPDB, Panther, Slack

This Story receives a Panther alert and checks if it is an SSH brute force attack, enriching it via Panther and AbuseIPDB. Then, it blocks it in AWS ACLs, creates a Jira ticket, and sends a Slack message to a channel.
Tools: Panther

It takes minutes, not months, to connect to tools in Tines.
Check out our blogs that mention Panther, browse our learning paths, and more.
Blog
Read now
Case studies
Discover how companies – from Fortune 10 to startups – apply Tines to transform the way their teams operate.
Read case studies
Learn
Build your knowledge with dedicated learning paths at all levels.
Start learning
Learn
Go to docs