The Open Source
Tines / Splunk SOAR alternative
Build AI-assisted playbooks, orchestrate tools, and close cases fast.
The security automation platform built for builders.
Experiment For Free
Deploy Tracecat on your own infrastructure. Get started fast with one of our public playbooks.
Code or no-code? No problem!
Build fast with both configuration-as-code and no-code. Customize with ease using Python.
AGPL-3.0 license
Open vision, open community, open development. Have your say in the future of security automation.
New Feature
Turn security alerts into solvable cases
Click-and-drag workflow builder
Automate SecOps using pre-built actions (API calls, webhooks, data transforms, AI tasks, and more). No code required.
Built-in case management system
Open cases direct from workflows. Track and manage security incidents all-in-one platform.
More features
Unlimited workflows for everyone
Create unlimited workflows
Build as many workflows as you need. Trigger workflows in response to alerts or schedule workflows to run as cron jobs. Automate and integrate without limit.
Collaboration and tenants (coming soon)
Edit workflows and manage cases as a team. Use tenants to isolate sensitive data and credentials between users.
12 comments
0 files
Monitor alert trends
Automated alert SLO tracking (e.g. number of alerts processed / number of cases resolved).
Integrations that matter
Pre-built integrations for every SecOps team. Can't find the integration you need? Build your own using Tracecat's Python SDK and share it with the open source community!
AI Case Management
An AI that learns from past incidents
Use specialized AI models to label, summarize, and enrich alerts. Contextualize alerts with internal evidence and external threat intel. All open source. No black box.
Find cases using semantic search
MITRE ATT&CK labels
Manage whitelists / blacklists
Categorize related cases
MITRE D3FEND suggestions
Upload evidence and threat intel
Pricing & Plans
Cheaper than a missed true positive
Cloud & Self-Hosted
Support on Discord / Slack
Cancel Anytime
