I’m wondering whether Tines can run things simultaneously or whether everything is sequential by default. For example, if I want to kick off three different enrichment lookups at the same time rather than waiting for each one to finish, is that possible? Curious how parallelism actually works in practice.
Yes, parallelism is a natural part of how Tines works. When a single action connects to multiple downstream actions, all of those branches start executing at the same time. There’s no special configuration needed to make this happen; the branching structure of your story defines it. And it’s very visual so it’s easy to set up and understand.
For your enrichment example, you’d connect your trigger or parsing action to each of the three enrichment actions separately. They’ll all fire in parallel, and you can then bring results together further downstream once they’ve all completed.
This makes Tines quite efficient for use cases like alert enrichment, where you want to query VirusTotal, Shodan, and an internal CMDB simultaneously rather than sequentially. The Tines Docs explain execution flow and branching in detail. Tines University has hands-on exercises that make this model intuitive quickly, and the Blog has real-world examples of parallel enrichment workflows worth exploring.