Tracecat
Build and scale security automation with custom agents, workflows, and cases you own. Replace legacy SOAR tools with a modern, developer-friendly platform.
Tracecat is an open source Security Orchestration, Automation, and Response (SOAR) platform designed for AI-native security teams. It enables organizations to build custom agents, automate repetitive tasks, and manage security cases with workflows they fully control.
Key Features
- Custom AI Agents: Build and deploy security agents tailored to your needs, from phishing triage to vulnerability response.
- Workflow Automation: Create automated runbooks that connect tools like Wiz, CrowdStrike Falcon, Okta, and Slack.
- Case Management: Centralize security investigations with structured cases and approval workflows.
- Model Context Protocol (MCP): Integrate with security tools via MCP for real-time data enrichment and actions.
- Self-Hosting: Deploy Tracecat on your own infrastructure for full data ownership and compliance.
- Developer-Friendly: Built for security teams that want to code their own solutions rather than rely on rigid, out-of-the-box tools.
Tech / Self-Hosting
Tracecat is open source and can be self-hosted using Docker or Kubernetes. The platform supports MCP for tool integration and provides extensive documentation for deployment and customization. Ideal for teams prioritizing data privacy and control over their security automation stack.