diff --git a/README.html b/README.html
index 3e3816f..022909b 100644
--- a/README.html
+++ b/README.html
@@ -90,6 +90,7 @@
 <li><a href="https://github.com/airbnb/streamalert">StreamAlert</a> - A serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define</li>
 <li><a href="https://github.com/matanolabs/matano">Matano</a>: An open source security lake platform (SIEM alternative) for threat hunting, detection and response on AWS. Matano lets you write advanced detections as code (using python) to correlate and alert on threats in realtime.</li>
 <li><a href="https://github.com/Shuffle/Shuffle">Shuffle</a>: A general purpose security automation platform.</li>
+<li><a href="https://github.com/brexhq/substation">Substation</a> - A cloud native data pipeline and transformation toolkit for security teams.</li>
 </ul>
 <h3 id="endpoint-monitoring">Endpoint Monitoring</h3>
 <ul>
diff --git a/README.md b/README.md
index c91332e..b6028dc 100644
--- a/README.md
+++ b/README.md
@@ -84,6 +84,7 @@
 - [StreamAlert](https://github.com/airbnb/streamalert) - A serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define
 - [Matano](https://github.com/matanolabs/matano): An open source security lake platform (SIEM alternative) for threat hunting, detection and response on AWS. Matano lets you write advanced detections as code (using python) to correlate and alert on threats in realtime.
 - [Shuffle](https://github.com/Shuffle/Shuffle): A general purpose security automation platform.
+- [Substation](https://github.com/brexhq/substation) - A cloud native data pipeline and transformation toolkit for security teams.
 
 ### Endpoint Monitoring