Freedom report

Two barsScore 6.3

  • Free tierA free tier is on its own pricing page
  • Open codeNo open-source code on record
  • Runs widely1 of 6 device platforms
  • DocumentedPlans, terms and facts published

Tracecat is an open-source security automation platform for teams building cyber defense with AI agents. Its product combines workflows, cases, tables, integrations, agent presets, skills, and a hosted MCP server catalog. Workflows support loops, conditional steps, parallel subflows, and Python, Bash, or Ansible scripts. Tracecat advertises 500+ integrations across SIEM, EDR, MDM, identity, and other areas; the hosted catalog lists 56 servers, including Elastic, Splunk, CrowdStrike Falcon, Wiz, Okta, Slack, Jira, GitHub, and AWS. Teams can use managed cloud or self-host the product; Open Source can be deployed with Docker or AWS Fargate. The Open Source plan is 0.00 USD per free, billed Free forever, and includes unlimited workflows, cases, and agents. It also includes case management with comments, attachments, and custom fields. Enterprise has custom pricing and adds human-in-the-loop tool approvals, advanced case capabilities, and 24/7 Slack and email support. The company is based in New York City and was founded in 2024.

Who it is for

Tracecat suits AI-native security teams automating focused Tier 1 and Tier 2 work, including phishing, suspicious OAuth grants, EDR malware alerts, and cloud findings. It offers both managed cloud and self-hosted deployment.

What is good

  • Free Open Source plan includes unlimited workflows, cases, and agents.
  • Workflow steps support Python, Bash, and Ansible scripts.
  • Advertises 500+ integrations across security and identity categories.
  • Open Source includes case management, comments, attachments, and custom fields.

What to know first

  • Open Source excludes human-in-the-loop tool approvals.
  • Advanced case features are reserved for Enterprise.
  • Enterprise pricing is custom and not listed.

Verdict

Tracecat brings workflow automation, case management, and AI-agent tools into one security platform, with a free self-hosted option. Teams needing tool approvals or advanced case features should note that these require Enterprise.

Tracecat plans and pricing

All plans
Open Source Free Free forever Unlimited workflows, cases, and agents · Self-hosted · Monthly executions self-managed · Tool approvals and agent inbox, advanced cases, multi-tenant workspaces, Git sync, custom roles and SCIM, and enterprise support excluded tracecat.com · 30 Sept 2026
Enterprise Not published Custom Unlimited workflows, cases, and agents · Cloud (US / EU) or self-hosted · Monthly executions custom pricing · 24/7 Slack and email support · Custom SLAs tracecat.com · 30 Sept 2026

Compared on runbook automation software

Free plan
Yes

Best Tracecat alternatives

See all 12