An open-source security automation platform (SOAR) built for security professionals, focusing on collaboration and resource sharing.
Shuffle is an open-source Security Orchestration, Automation, and Response (SOAR) platform designed to streamline and automate security operations. It provides a visual workflow editor, pre-built integrations for security tools, and tools for creating custom apps via OpenAPI. The platform aims to reduce complexity in security workflows while fostering collaboration and resource sharing among teams.
Security professionals, SOC teams, MSSPs (Managed Security Service Providers), and organizations needing to automate and orchestrate their security operations. It is built with service providers and multi-tenant environments in mind.
Developers and security teams choose Shuffle for its open-source nature, focus on collaboration, and hybrid resource-sharing capabilities. It offers a flexible, self-hostable alternative to commercial SOAR platforms with strong community support and extensibility through OpenAPI.
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
The workflow editor is described as 'simple, feature rich,' enabling security teams to design complex automations visually without extensive coding, which streamlines incident response.
Allows users to build custom integrations using OpenAPI specifications, providing flexibility to connect with various security tools, as evidenced by the dedicated app creator feature.
Comes with a library of premade apps for popular security tools like VirusTotal and TheHive, reducing integration time and accelerating deployment for common use cases.
Built-in organization and sub-organization control makes it well-suited for MSSPs and service providers managing multiple clients, a key feature highlighted in the project description.
Deployment requires Docker and following a detailed installation guide, which can be time-consuming and challenging for teams without dedicated DevOps expertise.
The core backend uses AGPLv3, mandating that modifications be open-sourced, which may deter adoption in proprietary or commercial environments where licensing is a concern.
Documentation is hosted externally on shuffler.io and across multiple GitHub repositories, potentially making it harder for users to find consistent and up-to-date information quickly.