About Shuffle

Shuffle started as a project in mid-2019 because of automation related problems that needed more attention in the CERT/SIRT community. Available automation solutions in the security industry are trying to do everything at once; handle tickets, indicators, threat intel and much more in a single platform, while our goal is to build the best automation solution to fit all your existing tools while following the Unix philosophy: "Do One Thing and Do It Well".

Mission

To make every security operations center share their processes, automations and detections in a standardized way. Cybersecurity is not a competiton, and shouldn't treated as such.

Open Source

Focus for Shuffle has moved to an entirely open source and open standard ecosystem. This includes, but is not limited to; the Shuffle product, open workflows, open apps, open detections, open standards (OpenAPI/Swagger, CACAO). The Shuffle Cloud platform exists to ensure we can thrive as a business and to manage content at scale.

Roadmap

The Roadmap is our high level guide to the future, and may be reorganized without notice according to more immediate needs.

• 2.3 - Late Q2, 2026. Shuffle Security with incident management & Agents with MCPs for third-party use of ANY Shuffle integration. Host Monitoring sensor for compliance, vulnerabilities & response actions. Improved onboarding for Security usecases. AI Agent-based workflow development.

• 2.2 - Current release: The focus with this release is on the Security Bundle, aimed at helping anyone do security automation without needing to be an expert. Product improvements: Improved Workflow UI and generator system, a dashboard system, standardised security usecases, controllable AI Agents and Singul in Shuffle for standardised data ingest.

• 2.1 Improved onboarding, usecase generation and SaaSification

• 2.0 Easy Scaling, Multi-tenant Workflows and a slick new look: Schemaless, New Updated UI, proper API explorer & testing system, Workflow & Usecase generation, OpenID/SAML testing & user management mechanisms, Automation & Security Dashboards, Developer Friendliness with Workflows as Code, Form & MQ Triggers (pipelines), AI for Documentation -> App generation. MSSP: Multi-Tenant Workflows and other MSSP features. Expected release: Q1 2025

• 1.4 - Realtime Workflow Collaboration (+support workflow support cloud->onprem), Workflow Generation based on text, MSSP Tenant & Workflow Management, Dynamic Authentication, Vaults, Improved Coding Editor with Code Generator & Shuffle Functions, Improved Trigger management and branding, Hybrid Workflow Access. Kubernetes support. Expected release Q2 2024.

• 1.3 - Scale support, workflow statistics, stabilization and tracking. Expected release Q4 2023.

• 1.2 - Usability: Autocompletes, Suggestion engines, Dashboards, Auditing. Lambda & EKS integrations. Partnerships with top 5 relevant tools in each App Category. Threat Intel management with Shuffle Datastore. Expected release Q2 2023.

• 1.1 - Creator onboarding: Workflow, App & Usecase discovery. Stability & Scalability everywhere with multi-region deployments. HUGE focus on on-boarding and workflow templates. Expected release Q4 2022.

• 1.0 - Launch: Categorized apps, proper use-cases, and a real tutorial mapped to use-cases. Enterprise-ready (SSO/SAML, MFA, Reporting, Statistics, Replayability)

• 0.9 - Features: Search engine for apps, workflows, executions etc. GCP (Storage & Functions) integration usage for cloud.

• 0.8 - Integrate: Hybrid cloud features and file control/cross-workflow data management

• 0.7 - Improve: First larger release of Shuffle. Focus on tenants, users, schedules, app authentication and a better overview in general through the admin view.

• 0.6 - Usability: High focus on the workflow and api editor, as well as bugfixing after open sourcing.

• 0.1 - 0.5: Created basic features for automation, as well as use cases and frontend. This was before the project was open sourced.

• Relevant future prospects: API action merging from forks. Multi-language support. OASIS CACAO support (and maybe OpenC2). Creator, Community & Partner earning re-initialization. Fully configurable Dashboards (from Automation & Secuerity). Add Yara+Sandbox autoscans, Ansible response playbooks and OSQuery asset mapping. Expansive Mitre Att&ck & D3FEND support. Support for JSON-schema & Postman Collections. Optimize Realtime Workflow Collaboration. Developer tooling for Workflows-as-code (secure curl / HTTP auth proxy), shufflepy & singulpy (and other language).

Problems Shuffle solves

These included, but were not limited to (no specific order):

• Alert fatigue by giving analysts the tools to automate most alerts
• Remove menial tasks, decreasing employee turnover
• Quick integrations with new tools - OpenAPI
• Giving you a clear overview of your environment by tracking integration usage

Regards,

Fredrik Ødegårdstuen - @frikkylikeme - support@shuffler.io