PAGES
← all tools
◆ SOAR

Shuffle

v2.3.0 open-source

Shuffle is an open source automation platform built for security professionals to simplify security operations.

Summary

Shuffle is an open-source security orchestration, automation and response (SOARSOARSecurity orchestration, automation and response, coordinating incident workflows across tools. Playbooks can gather evidence, assign work or carry out approved response actions.) platform that lets teams build workflows to triage and respond to security incidents, free to self-host or available as a registered cloud service, with open-source users throttled rather than blocked once a monthly app-run limit is hit. It can run as a central backend with workers deployed via Helm into Kubernetes, or through Orborus, which now operates as a standalone local agent for compliance and response work independent of that backend. It targets SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. analysts and MSSPs managing shared workflows across teams, and recent additions reach beyond classic SOAR into AI agent orchestration, with every app exposed as an MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server and human-in-the-loophuman-in-the-loopHuman in the loop, involving a person in an otherwise automated workflow. The person can review, approve, correct or supply information before work continues. permission controls for agent actions. First committed in 2020, it has 56 contributors, with 371 commits and 20 releases in the past year, the latest 26 days ago.

Shuffle is an open source automation platform built for security professionals to simplify security operations.

How Shuffle helps

Which alerts scattered across email, SIEM, EDR and cloud logs belong to the same incident?

the Security Bundle pulls flagged items from all four source types into one triage view so a responder judges one incident instead of four separate queues

Which of my credentials are dead before a workflow that depends on them actually runs?

an authentication validation action on the Apps page checks a saved credential against its service on demand and reports whether it still works

Which workflows in my shared library are out of date with the copies in Azure DevOps?

the sync view lists every remote workflow next to its local copy so a reader picks Import for new ones or Sync for ones that drifted, without opening each pipeline

Will this month's alert volume get my on-prem workflows throttled?

app runs are counted against the monthly free limit, and once exceeded, open-source workflows keep running but capped at one execution per minute until the count resets on the first of the month

Can a workflow reach relationships between entities that live in different datastores?

Datastore Correlations maps cross-entity links across stored records so a lookup surfaces connections a single-datastore query would miss

all 42 features, with the evidence for each →

Languages

Not documented

Features

42 capabilities

Built from Shuffle's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

  • Shuffle covers 1 of the 11 logs and telemetry capabilities we track.

What Shuffle offers you

  • Self-hosted deployment6
  • Kubernetes-native deployment3
  • Multi-tenant management3
  • Web management console3
  • REST API2
  • Agent-based deployment1
  • Air-gapped deployment1
  • Built-in AI assistant1
  • CI/CD pipeline integration1
  • Command-line interface1
  • Natural-language query1
  • Offline mode1
  • Outbound webhooks (the product notifies you)1
  • Python scripting support1
  • Scripting language support1
  • User-defined detection rules1
All capabilities 42 capabilities
Kubernetes Hardening and Config shipped Allows setting security contexts, resource limits, custom labels, and non-root execution for Kubernetes worker and app pods via Helm. 11 releases · 3 other sources · first seen Jul 2025

Also counts toward: Kubernetes-native deployment

release 11 total

  • Defaults Kubernetes deployments to Helm charts, streamlining k8s rollout and configuration. v2.1.3 · Dec 2025 · source · release history
  • Adds configurable k8s resource limits (CPU/memory) for app and worker containers via Helm. v2.1.3 · Dec 2025 · source · release history
  • Adds explicit app protocol specification for worker and app services in k8s. v2.1.3 · Dec 2025 · source · release history
  • Supports mounting a tmp volume to apps in Kubernetes deployments. nightly-31102025 · Oct 2025 · source · release history
  • Enables specifying the app protocol for worker and app services in Kubernetes. nightly-31102025 · Oct 2025 · source · release history
  • Enables explicit app protocol specification for worker and app services in Kubernetes. nightly-30102025 · Oct 2025 · source · release history

example

  • Set CPU and memory resource limits on Shuffle workers in Kubernetes to prevent noisy-neighbour issues in shared clusters. # In your Helm values file: worker: resources: requests: cpu: "250m" memory: "256Mi" limits: cpu: "1000m" memory: "512Mi" 2.1.1-rc1-09102025 · Oct 2025 · source
  • Cap resource consumption of Shuffle worker and app pods in a Helm-managed Kubernetes deployment. worker: resources: requests: cpu: "250m" memory: "256Mi" limits: cpu: "1" memory: "512Mi" apps: resources: requests: cpu: "100m" memory: "128Mi" limits: cpu: "500m" memory: "256Mi" nightly-23092025-v1 · Sep 2025 · source
  • Harden Kubernetes worker and app pods by applying a non-root security context in your Helm values. worker: securityContext: runAsNonRoot: true runAsUser: 1000 apps: securityContext: runAsNonRoot: true runAsUser: 1000 2.1.0-nightly-02072025 · Jul 2025 · source
Workflow Execution shipped suggested Controls how workflows run, including overriding authentication for subflows and re-executing previous runs via API. 9 releases · first seen Dec 2023

Suggested capability: Response playbook automation. This is our guess, not confirmed.

Also counts toward: Self-hosted deployment

release 9 total

  • Adds an automatic rerun system within Orborus to detect and restart stuck workflow executions without manual intervention. v2.3.0 · Sep 2026 · source · release history
  • Improves live workflow update streaming, including AI-generated edits, with more reliable change history and reconnection handling, and reduces background polling when only one person is viewing a workflow. v2.3.0 · Sep 2026 · source · release history
  • Adds automatic rerun system within Orborus to detect and restart stuck workflow executions, reducing the need for manual intervention. v2.3.0 · Sep 2026 · source · release history
  • Improves live workflow streaming, including AI-generated edits, with more reliable change history, reconnection handling, and reduced background polling when a single user is viewing a workflow. v2.3.0 · Sep 2026 · source · release history
  • Propagates the SHUFFLE_LOGS_DISABLED environment variable from Orborus through to worker and app containers in Kubernetes deployments. nightly-23092025-v1 · Sep 2025 · source · release history
  • New Statistics & Observability features: workflow execution views, top run/failure tracking, historical debug search, notifications, and multi-tenant org views. v2.1.0 · Sep 2025 · source · release history
Debugging shipped Provides tools to inspect historical workflow runs, search execution logs by keyword, and identify bugs over time. 4 releases · 3 other sources · first seen Oct 2020

Shared capability: Log search

release

  • Adds Helm chart values to enable Shuffle debug mode on a per-component basis. v2.2.1-nightly-1775748107 · Apr 2026 · source · release history
  • Search workflow executions by keyword in the Workflow Run Debugger (/workflows/debug) v1.4.0 · May 2024 · source · release history
  • Adds Workflow Run Explorer at /workflows/debug to help identify workflow bugs over time v1.3.0 · Nov 2023 · source · release history
  • Enables tracking executions to share with other users 0.7.5 · Oct 2020 · source · release history

example

  • List all workflows in a connected Azure DevOps repository and selectively import or re-sync individual ones — useful when managing a large library of shared workflows across teams. In the Shuffle UI, go to Workflows > Import, enable the "Sync: list workflows before importing" toggle, then use the List & Sync modal to review remote workflows by Name and Last Updated, and click… v2.2.1 · May 2026 · source
  • Enable debug logging for the Orborus component in a Kubernetes deployment to troubleshoot agent connectivity issues. orborus: debug: true v2.2.1 · May 2026 · source
  • Navigate to the debug interface to inspect historical workflow runs and identify bugs. In the Shuffle UI, navigate to /workflows/debug to open the Workflow Run Explorer. v1.3.0 · Nov 2023 · source
Identity Management shipped Manages user access and permissions, including support for sub-org distribution and tenant selection. 7 releases · first seen Oct 2020

Also counts toward: Multi-tenant management, Web management console

release 7 total

  • Adds UI tooltips across the workflow editor. 2.0.0 · Mar 2025 · source · release history
  • Kubernetes keep-alive support for Orborus. 2.0.0-nightly-02112024 · Nov 2024 · source · release history
  • Adds UI tooltips to workflow editor controls. 2.0.0-nightly-02112024 · Nov 2024 · source · release history
  • Use sub-org distribution system to share workflows from parent org to suborgs v1.4.0 · May 2024 · source · release history
  • Select related tenants in the admin view (/admin?tab=suborgs) v1.4.0 · May 2024 · source · release history
  • Adds support for Organizations as the primary entity model, replacing per-instance users. 0.8.0 · Nov 2020 · source · release history
Private Registry Configuration shipped Allows self-hosted deployments to configure custom or private container registries for app builds, supporting disconnected and air-gapped environments via environment variables and custom SDK images. 4 releases · 2 other sources · first seen Sep 2026

Also counts toward: Air-gapped deployment, Self-hosted deployment

release

  • Self-hosted installations can now supply a custom App SDK image to build apps in disconnected or air-gapped environments. v2.3.0 · Sep 2026 · source · release history
  • Supports a custom App SDK image for building apps in disconnected or air-gapped environments on self-hosted installations. v2.3.0 · Sep 2026 · source · release history
  • Adds support for SHUFFLE_BASE_IMAGE_REGISTRY and SHUFFLE_BASE_IMAGE_NAME environment variables to configure custom and private registries consistently across all deployment types. v2.3.0 · Sep 2026 · source · release history
  • Adds SHUFFLE_BASE_IMAGE_REGISTRY and SHUFFLE_BASE_IMAGE_NAME config settings for consistent custom/private registry behavior across all deployment types.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ v2.3.0 · Sep 2026 · source · release history

example

  • Point a self-hosted Shuffle deployment at a private container registry so all app builds pull from your internal mirror instead of Docker Hub. SHUFFLE_BASE_IMAGE_REGISTRY=registry.internal.corp SHUFFLE_BASE_IMAGE_NAME=shuffle/shuffle-app-sdk v2.3.0 · Sep 2026 · source
  • Point a self-hosted Shuffle deployment at a private container registry so all app builds pull the base SDK image from your internal infrastructure instead of the public default. SHUFFLE_BASE_IMAGE_REGISTRY=registry.internal.corp SHUFFLE_BASE_IMAGE_NAME=shuffle/shuffle-app-sdk v2.3.0 · Sep 2026 · source
Secret Management shipped Encrypts secrets in the database using a Key Management System (KMS) and supports third-party secret providers. 4 releases · 1 other source · first seen Oct 2020

Also counts toward: Kubernetes-native deployment

release

  • Enables secret deployment via Kubernetes for more secure credential management in k8s environments. v2.1.3 · Dec 2025 · source · release history
  • Adds Protected Keys so secrets can be used safely in workflows via best-effort fuzzy hashing. v2.1.0 · Sep 2025 · source · release history
  • Adds a KMS (Key Management System) integration to encrypt secrets in the database with support for third party secret providers v1.3.3 · Mar 2024 · source · release history
  • OpenAPI drag-and-drop allows importing API specifications directly into the editor without manual configuration. 0.7.6 · Oct 2020 · source · release history

example

  • Import an OpenAPI spec into Shuffle to automatically generate workflow nodes for endpoints. Drag and drop your `.yaml` or `.json` OpenAPI file onto the `OpenAPI` import area in the Shuffle editor. 0.7.6 · Oct 2020 · source
Administration shipped Provides an enhanced admin dashboard for managing instance users, tenants, and system configuration. 5 releases · first seen May 2024

Also counts toward: Multi-tenant management, REST API, Web management console

release

  • Admin view for child organization activity tracking in multi-tenant deployments. v2.1.0 · Sep 2025 · source · release history
  • Re-adds the /api/v1/orgs API endpoint. 2.1.0-nightly-02072025 · Jul 2025 · source · release history
  • Adds sub-organization deletion UI with verification button and associated cache management. v2.1.0-rc2 · Jun 2025 · source · release history
  • Enables self-service cloud region changes via the /admin panel — no support ticket required. v2.0.1 · Mar 2025 · source · release history
  • Access new admin dashboard at /admin2 v1.4.0 · May 2024 · source · release history
AI Agent Support shipped Enables the use of bring-your-own LLM providers for AI Agents, supporting local and self-hosted models. 3 releases · 1 other source · first seen Apr 2025

Also counts toward: Self-hosted deployment

release

  • Improves app name resolution and workflow execution validation when the executor is an AI Agent.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ v2.3.1-rc1 · Oct 2026 · source · release history
  • Adds graceful stop handling for AI Agent actions during hybrid worker execution, preventing runaway processes when an agent-driven workflow terminates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ v2.3.0-rc2 · Sep 2026 · source · release history
  • Adds AI Agent support with bring-your-own LLM provider, enabling fully open-source on-premises deployments. v2.0.2 · Apr 2025 · source · release history

example

  • Point Shuffle AI Agents at a private, self-hosted LLM instead of a cloud provider — keeping all data on-prem. In the console, go to Settings > AI and enter your self-hosted model URL, model name, and API key, then save to make Shuffle use your private OpenAI-compatible endpoint. v2.1.0 · Sep 2025 · source
Workflow Templating shipped Allows users to generate new workflows from pre-defined templates. 4 releases · first seen Dec 2022

Also counts toward: CI/CD pipeline integration

release

  • New Sync mode in the workflow import dialog lets users list all remote workflows from Azure DevOps (or other repos) in a table before importing — with per-workflow Import or Sync action buttons. v2.2.1 · May 2026 · source · release history
  • Adds Azure DevOps sync feature, enabling integration between Shuffle and Azure DevOps pipelines/projects. v2.2.1-nightly-1774453486 · Mar 2026 · source · release history
  • Supports downloading workflows directly from GitHub and Azure DevOps repositories. v2.2.0 · Feb 2026 · source · release history
  • Adds templating system for generating workflows 1.1.0 · Dec 2022 · source · release history
On-Premises Worker Scaling shipped Supports auto-scaling and open-sourcing of the scale worker for distributed execution in on-premises deployments. 4 releases · first seen Dec 2024

Also counts toward: Self-hosted deployment

release

  • App container auto-scaling based on request rate, CPU usage, and queue depth. v2.1.0 · Sep 2025 · source · release history
  • Adds ability to skip SSO for admins on sub-organizations. v2.1.0-rc2 · Jun 2025 · source · release history
  • Adds auto-scale support for on-prem worker deployments. 2.0.0 · Mar 2025 · source · release history
  • Adds auto-scale support for on-premises worker deployments. nightly-14122024 · Dec 2024 · source · release history
Hybrid AI Agent Support shipped Allows on-premises workers to leverage cloud-side AI agent applications in a hybrid deployment model. 3 releases · first seen Feb 2026

release

  • Enables AI Agents to run in on-premises and hybrid setups, picking the correct backend address and tool timeouts, recovering late-arriving results, and using local AI credentials or Shuffle AI synced from the cloud. v2.3.0 · Sep 2026 · source · release history
  • AI Agents now run in on-premises and hybrid setups, with automatic backend-address selection, late-result recovery, and support for local AI credentials or Shuffle AI synced from the cloud. v2.3.0 · Sep 2026 · source · release history
  • Enables AI Agent App support in hybrid mode so on-prem workers can leverage cloud-side AI agent apps. nightly-1771869385 · Feb 2026 · source · release history
Model Context Protocol Support shipped Allows on-premises deployments to execute actions using the Model Context Protocol. 3 releases · first seen Feb 2026

Also counts toward: Self-hosted deployment

release

  • Refines AI Agent and MCP action app/tool name matching by searching workflows to find the correct action, with added execution and permission checks on agent-initiated runs. v2.3.0 · Sep 2026 · source · release history
  • Smarter app and tool name matching for AI Agents and MCP actions searches across workflows to resolve the correct action, with added execution and permission checks. v2.3.0 · Sep 2026 · source · release history
  • Adds runMCPAction support on-prem, enabling Model Context Protocol action execution in self-hosted deployments. nightly-1771869385 · Feb 2026 · source · release history
Source Control Integration shipped Enables importing, syncing, and managing workflows directly from GitHub and Azure DevOps repositories. 3 releases · first seen Feb 2026

release

  • New Sync mode in the workflow import dialog lets users list all remote workflows from Azure DevOps (or other repos) in a table before importing — with per-workflow Import or Sync action buttons. v2.2.1 · May 2026 · source · release history
  • Adds Azure DevOps sync feature, enabling integration between Shuffle and Azure DevOps pipelines/projects. v2.2.1-nightly-1774453486 · Mar 2026 · source · release history
  • Supports downloading workflows directly from GitHub and Azure DevOps repositories. v2.2.0 · Feb 2026 · source · release history
Detection Rule Management shipped Provides a UI for editing, categorizing, and managing detection rules including Sigma rules directly within the workflow interface. 2 releases · 1 other source · first seen Dec 2022

Also counts toward: User-defined detection rules, REST API

release

  • Extends /api/v1/workflows endpoint with Security Bundle metadata handling. v2.2.0 · Feb 2026 · source · release history
  • Adds Sigma detection UI for building and managing Sigma rules directly in the workflow interface. 2.0.0-nightly-02112024 · Nov 2024 · source · release history

example

  • Manage detection methods using the new file editor. In the console, go to Admin > Files to edit and categorize files for detection methods. 1.1.0 · Dec 2022 · source
Cloud Subscription Synchronization shipped Maintains consistent licensing and subscription states between self-hosted instances and cloud services across multiple regions. 3 releases · first seen Nov 2020

release

  • Adds multi-region support for cloud sync, enabling distributed deployments across geographic regions. nightly-1770615681 · Feb 2026 · source · release history
  • Adds cloud sync for subscription data, keeping licensing state consistent across cloud-connected instances. nightly-09102025 · Oct 2025 · source · release history
  • Adds ability to synchronize with shuffle.io via Webhooks (public URL) and cloud-hosted Schedules. 0.8.0 · Nov 2020 · source · release history
App Generation shipped Uses generative AI to create OpenAPI-based applications automatically. 3 releases · first seen Oct 2020

release

  • Generates workflows from plain-text descriptions or flowcharts using AI. v2.1.0 · Sep 2025 · source · release history
  • Integrates an OpenAPI Generator powered by Generative AI, available as an option on the /apps page v1.3.0 · Nov 2023 · source · release history
  • migration tools are now available in the UI to create new Organizations from existing data. 0.7.6 · Oct 2020 · source · release history
File Management shipped Allows organizing files such as Yara or Snort rules within namespaces and managing file categories, with support for downloading stored workspace files. 3 releases · first seen Oct 2020

Also counts toward: Web management console

release

  • Adds File Editing and Categories via the /admin?tab=files interface 1.1.0 · Dec 2022 · source · release history
  • Adds file namespaces to organize files like Yara or Snort rules within workflows 0.9.25 · Oct 2021 · source · release history
  • Adds accessibility names to workflow components such as trigger names 0.7.5 · Oct 2020 · source · release history
Organization Migration Tools shipped Provides UI and command-line utilities to create new organizations from existing data and split instances into multiple organizations. 2 releases · 1 other source · first seen Oct 2020

Also counts toward: Command-line interface

release

  • App SDK support is added for blackarch and Kali, enabling app development and testing on these distributions. 0.7.6 · Oct 2020 · source · release history
  • migration tools are now available in the UI to create new Organizations from existing data. 0.7.6 · Oct 2020 · source · release history

example

  • Use the new migration tool to split your instance into multiple Organizations. Navigate to Settings > Migration and select 'Create Organization' from the available tools. 0.7.6 · Oct 2020 · source
Shuffle Security Deployment shipped Bundles Shuffle Security into the Docker Compose and Kubernetes Helm chart configurations for easier self-hosted deployment. 2 releases · first seen Sep 2026

Also counts toward: Kubernetes-native deployment, Self-hosted deployment

release

  • Shuffle Security is now included in both the Docker Compose configuration and the Kubernetes Helm chart for easier self-hosted deployment. v2.3.0 · Sep 2026 · source · release history
  • Includes Shuffle Security in both the Docker Compose configuration and Kubernetes Helm chart for easier self-hosted deployment. v2.3.0 · Sep 2026 · source · release history
Graceful Agent Termination shipped Prevents runaway processes by ensuring AI Agent actions stop correctly during hybrid worker execution. 2 releases · first seen Sep 2026

release

  • Adds handling for AI Agent actions to gracefully stop worker execution for hybrid operation v2.3.0-rc2 · Sep 2026 · source · release history
  • Adds graceful stop handling for AI Agent actions during hybrid worker execution, preventing runaway processes when an agent-driven workflow terminates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ v2.3.0-rc2 · Sep 2026 · source · release history
Authentication Validation shipped Provides mechanisms to verify that stored credentials for external services are valid before executing workflows. 2 releases · first seen Oct 2025

release

  • Adds authentication validation action on the Apps page to verify credentials before use in workflows. v2.2.0 · Feb 2026 · source · release history
  • Caches cloud sync data to reduce redundant remote calls during synchronization. 2.1.1-rc1-09102025 · Oct 2025 · source · release history
Sigma Support shipped Enables the instance to function as a distributed log ingester by processing and executing Sigma rules. 2 releases · first seen May 2024

release

  • Introduces a Data Pipeline System for log ingestion at scale with real-time Sigma rule execution. v2.2.0 · Feb 2026 · source · release history
  • Run Shuffle as a distributed Log Ingester using Sigma rules v1.4.0 · May 2024 · source · release history
Datastore Categorization and Sharing shipped Adds indexing for structured data organization and allows teams to publish categories for subscription by other organizations. 1 release · 1 other source · first seen Mar 2025

release

  • Adds Datastore Categorization (indexing) for structured data organization. 2.0.0 · Mar 2025 · source · release history

example

  • Harden Kubernetes worker and app pods by applying a non-root security context in your Helm values. worker: securityContext: runAsNonRoot: true runAsUser: 1000 apps: securityContext: runAsNonRoot: true runAsUser: 1000 2.1.0-nightly-02072025 · Jul 2025 · source
Datastore Automation shipped suggested Allows Datastore categories to trigger workflow runs or send webhooks when entries are added or modified, supporting high-volume data handling. 1 release · 1 other source · first seen Jun 2025

Suggested capability: Response playbook automation. This is our guess, not confirmed.

Also counts toward: Outbound webhooks (the product notifies you)

release

  • Adds Datastore Category Automation: categories can now natively trigger workflow runs or send webhooks when data changes. v2.1.0-rc2 · Jun 2025 · source · release history

example

  • Trigger a response workflow automatically when entries are added to a Datastore Category (e.g., a new IOC hits your threat list). In the console, open the target Datastore Category, navigate to its Automation settings, and configure a workflow trigger or webhook URL to fire on category updates. v2.1.0-rc2 · Jun 2025 · source
Forms and Publishing shipped Provides mechanisms to create, control, and distribute workflow interactions via forms for external users. 2 releases · first seen Nov 2020

release

  • Adds Forms and Publishing mechanisms for workflow interaction and distribution. 2.0.0 · Mar 2025 · source · release history
  • Adds global Email and SMS sending capabilities to support alerts and User Input flows. 0.8.0 · Nov 2020 · source · release history
Multi-Tenant Workflows shipped Enables isolated workflow execution and organization across multiple tenants or sub-organizations. 2 releases · first seen Nov 2020

Also counts toward: Multi-tenant management

release

  • Adds multi-tenant workflow support, enabling isolated workflow execution across multiple tenants. 2.0.0 · Mar 2025 · source · release history
  • Adds User Input trigger allowing workflows to pause until a button click is received. 0.8.0 · Nov 2020 · source · release history
Code Editing shipped Allows executing Python code directly and supports single-action execution for testing within the code editor. 2 releases · first seen Dec 2023

Also counts toward: Python scripting support, Scripting language support

release

  • Allows running Python directly in the Code Editor by selecting the Execute Python action 1.3.1 · Dec 2023 · source · release history
  • Introduces Single Action executions for tasks like Code Editor testing 1.3.1 · Dec 2023 · source · release history
AI Assistance shipped Integrates AI capabilities to answer simple queries, generate workflows, and assist with data analysis. 1 release · 1 other source · first seen Nov 2023

Also counts toward: Built-in AI assistant, Natural-language query

release

  • Introduces ShuffleGPT, an AI-driven feature accessible at https://shuffler.io/conversation to solve simple queries like finding last tickets and eventually generating workflows v1.3.0 · Nov 2023 · source · release history

example

  • Access the new AI conversation interface to generate workflows or query data. Open https://shuffler.io/conversation in your browser to start using ShuffleGPT. v1.3.0 · Nov 2023 · source
Orborus Standalone Mode shipped Enables the Orborus runtime to operate as an independent local compliance and response agent without a central backend. 1 release · first seen May 2026

Also counts toward: Agent-based deployment, Offline mode

release

  • Orborus can now operate as a standalone local compliance and response agent, independent of a central backend. v2.2.1 · May 2026 · source · release history
Agent Testing Framework shipped Provides automated testing capabilities for AI Agent workflows to validate behavior and logic. 1 release · first seen Feb 2026

release

  • Adds an Agent Testing Framework for comprehensive automated testing of AI Agent workflows. v2.2.0 · Feb 2026 · source · release history
Static Workflow Identification shipped Allows users to assign static IDs to workflows for more stable referencing in multi-tenant and automation pipelines. 1 release · first seen Dec 2025

release

  • Supports static workflow IDs for more predictable multi-tenant and automation pipeline configurations. v2.1.3 · Dec 2025 · source · release history
Datastore Performance and API Expansion shipped Enables bulk operations on datastore entries, including high-volume lookups and pagination. 1 release · first seen Sep 2025

release

  • Adds bulk datastore APIs with pagination, supporting up to 500 key lookups per request. v2.1.0 · Sep 2025 · source · release history
Action-Level Re-execution shipped suggested Allows re-running a single failed or suspect workflow action in isolation using data from the previous run, facilitating targeted debugging. 1 release · first seen Apr 2025

Suggested capability: Response playbook automation. This is our guess, not confirmed.

release

  • New Rerun feature lets practitioners re-execute any single workflow action in isolation using data from the last run. v2.0.2 · Apr 2025 · source · release history
Branding and Theming shipped Provides controls for light mode, button removal, and custom theming for on-premises installations and integration partners. 1 release · first seen Apr 2025

release

  • New branding controls including light mode and button removal for integration partners. v2.0.2 · Apr 2025 · source · release history
Dynamic Binding shipped Updates action parameter fields dynamically based on variable contexts within the workflow canvas. 1 release · first seen Nov 2024

release

  • Variable fields in action parameters now update dynamically. 2.0.0-nightly-02112024 · Nov 2024 · source · release history
Message Queue Triggers shipped Enables workflows to be started by events from message queues and Kafka via the Orborus runtime. 1 release · first seen May 2024

release

  • Start workflows from Message queues & Kafka via Orborus on-premises environment v1.4.0 · May 2024 · source · release history
Logic Nodes shipped Improves condition nodes to respect data types, eliminating the need for manual size-based workarounds. 1 release · first seen Dec 2023

release

  • Updates Condition nodes (Smaller Than, Larger Than) to respect type, removing the need for {{ ["list"] | size }} workarounds 1.3.1 · Dec 2023 · source · release history
Version Control shipped Tracks workflow revisions, allowing users to view and potentially revert to past versions of a workflow. 1 release · first seen Nov 2023

release

  • Adds Workflow Versioning allowing users to view past revisions of workflows v1.3.0 · Nov 2023 · source · release history
App Templating shipped Supports Liquid formatting to allow dynamic content rendering within app configurations and workflow actions. 1 release · first seen Apr 2022

release

  • Added Liquid Formatting to apps allowing dynamic content rendering within app workflows. 1.0.0 · Apr 2022 · source · release history
Trigger Integrations shipped Adds support for external triggers such as Gmail and Outlook events to initiate workflows. 1 release · first seen Oct 2021

release

Webhook Processing shipped suggested Includes functionality to parse incoming webhooks and convert parameters into JSON format for use in workflows. 1 release · first seen Oct 2021

Suggested capability: Log parsing and normalization. This is our guess, not confirmed.

release

  • Adds initial CI/CD handlers for automated workflow execution 0.9.25 · Oct 2021 · source · release history
User Input Trigger shipped suggested Allows workflows to pause execution until a user interacts with a button or provides input. 1 release · first seen Nov 2020

Suggested capability: Response playbook automation. This is our guess, not confirmed.

release

  • Adds User Input trigger allowing workflows to pause until a button click is received. 0.8.0 · Nov 2020 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface
  6. Community health
  7. Contributor trend distinct committers, this year against last
  8. Maintainer concentration bus factor now against a year ago
  9. Issue backlog trend issues closed per issue opened, 12 months
  10. Responsiveness median time to a maintainer’s first reply

Nine scores for Shuffle, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail Shuffle puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Releases

Show

35 entries

  1. October 20261
  2. September 20262
  3. May 20263
  4. April 20261
  5. March 20261
  6. February 20263
  7. December 20251
  8. October 20254
  9. September 20252
  10. July 20251
  11. June 20251
  12. April 20251
  13. March 20252
  14. December 20241
  15. November 20241
  16. May 20241
  17. March 20241
  18. December 20231
  19. November 20231
  20. December 20221
  21. April 20221
  22. October 20211
  23. November 20201
  24. October 20202
    Show

    35 entries

    Project health

    Issue, contributor and maintainer activity in Shuffle/Shuffle, 2023-10 – 2026-09, as of 2026-09-25. Twelve-month figures first; the trend lines run the whole window.

    1. Contributors 13 −2 vs prior 12 months
    2. Maintainers 5 +3 joined · −2 left, last 12 months
    3. Bus factor 2 committers behind half the commits
    4. Community-filed 94% of issues opened, last 12 months
    5. Median time to close 21 days first maintainer reply 26 hours
    6. Open backlog 484 of 1,258 issues ever filed
    1. Issues opened / month 1 · 0 communitymaintainers
    2. Open backlog 484
    3. Contributors / month 6
    4. Commits / month 80
    5. Stars 2,443
    Issue themes, last 12 months
    • bugs 6%
    • features 3%
    • other 91%

    Counts from the project's public repository and git history; no individuals are identified. Maintainers are the committers covering 80% of the last year's commits. how we measure this

    Libraries its release ships

    What its latest release locks, checked against known advisories.

    No high or critical advisory in the lockfiles we checked.

    We check the lockfiles its release builds images from: 1 Python. Go modules, other lockfiles and vendored code aren't checked.

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →