Tracecat is an Open Source & Models tool that provides an AI-native SOAR platform for security teams. It enables building and managing AI agents, workflows, and cases with an AI copilot for security automation.
Tracecat is an open-source AI-native SOAR (Security Orchestration, Automation, and Response) platform designed for security teams and AI agents. It allows users to build and manage AI agents, automate security workflows, and handle cases with the assistance of an AI copilot. The platform supports over 200 pre-built integrations to security, IT, and platform apps, and offers agentic integrations for connecting to any LLM. Key features include limitless control flow with loops, if-conditions, parallel subflows, and scripting, as well as human-in-the-loop agents with explicit tool approvals. Tracecat helps security teams turn ideas into secure agentic workflows through chat, making it easier to triage alerts, enrich context, and recommend containment steps.
Best used for
Ideal for security engineers and developers who need to automate incident response, triage security alerts, and manage security cases efficiently. Especially valuable for teams looking to leverage AI agents and an AI copilot to streamline their security operations and build custom, agentic workflows.
What is the difference between Tracecat's Open Source and Hosted Cloud plans?
The Open Source plan is self-hosted and free forever, offering unlimited workflows and case management with Docker or AWS Fargate deployment. The Hosted Cloud plan provides managed hosting, custom core workflows, and includes 100k executions per month for up to 10 users, with Git sync.
Does Tracecat support human intervention in automated workflows?
Yes, Tracecat supports human-in-the-loop agents, allowing for explicit tool approvals within workflows. This ensures that critical actions or decisions can be reviewed and approved by a human operator before execution, combining automation with necessary oversight.
Can I connect Tracecat to my existing security and IT applications?
Tracecat offers over 200 pre-built integrations to various security, IT, and platform applications. This extensive integration capability allows users to connect Tracecat to their existing ecosystem, enabling seamless data flow and automation across different tools.