Instead of Tracecat
Tracecat alternatives
Tracecat is an open-source security automation platform for teams building AI-assisted cyber defense. It combines agents, workflows, cases, tables, integrations, presets, skills, and a hosted MCP catalog. Workflows support loops, conditions, parallel subflows, and Python, Bash, or Ansible scripts, while the platform targets focused tasks such as phishing, suspicious OAuth grants, endpoint alerts, and cloud findings. It offers a free forever plan with unlimited workflows, cases, and agents, plus managed cloud or self-hosted deployment.
- 1
Rundeck
Free plan APILinuxMac+3IT operations, scheduling, and infrastructure workflows — Rundeck emphasizes scheduled operational jobs, self-service infrastructure management, and execution history rather than Tracecat’s security-agent platform.
Free plan Visit site - 2
Shuffle
Free plan APILinuxSelf-hosted+1Security teams needing a very large app catalog — Shuffle offers more than 2,500 apps and a no-code OpenAPI app creator, exceeding Tracecat’s advertised integration breadth.
- 3
StackStorm
Free plan APILinuxSelf-hosted+1Event-driven integrations and rule-based automation — StackStorm maps event triggers to actions and workflows, with reusable integration packs and recorded execution context.
Free plan Visit site - 4
- 5
Azure Automation
by MicrosoftFree plan APILinuxSelf-hosted+2Cloud patching and configuration management — Azure Automation focuses on cloud process automation, patch management, configuration management, and remediation for Windows and Linux.
30-day trial Visit site - 6
Tanium Deploy
Paid APILinuxMac+2Large-scale endpoint software deployment — Tanium Deploy manages software installation, updates, and removal across targeted endpoint groups instead of security workflows and cases.
Pricing on request Visit site - 7
Palo Alto Networks Cortex Cloud API Security
Paid APILinuxWebDiscovering and protecting cloud APIs — Cortex Cloud API Security discovers, ranks, and protects APIs, including shadow and unmanaged APIs, with runtime threat protection.
Pricing on request Visit site - 8
OpenSOAR
Free plan Open source APILinuxSelf-hosted+1 - 9
- 10
Rapid7 InsightConnect
Free trial APILinuxSelf-hosted+1 - 11
Splunk SOAR
Free plan Web - 12
BlinkOps
Paid APIWeb - 13
eyeCloudXOAR UEBA
Free trial - 14
Swimlane Turbine
Paid APILinuxSelf-hosted+1 - 15
ThreatConnect Platform
Paid APISelf-hostedWeb - 16
Torq Hyperautomation
Paid APISelf-hostedWeb - 17
- 18
Cortex XSOAR
Paid Web - 19
Adlumin UEBA
Paid - 20
Devo SOAR
Paid Web - 21
FortiSIEM
Paid Web - 22
Cyware Orchestration Platform
Paid Web - 23
IBM QRadar SOAR
Paid Web - 24
Google SecOps SOAR
Paid Web - 25
Hakware SOAR
Paid Web - 26
NIKSUN Playbooks
Paid Web - 27
Mindflow
Paid Web - 28
Securaa SOAR
Paid
An alternative may suit you better when your priority is broader IT operations, event-driven orchestration, a larger app catalog, AI-assisted workflow design, endpoint software management, cloud configuration, or API protection. Tracecat’s Open Source plan excludes human-in-the-loop tool approvals, advanced case features, multi-tenant workspaces, Git sync, custom roles and SCIM, and enterprise support. Before switching, compare deployment options, supported platforms, workflow controls, integrations, security features, and whether your work needs Tracecat’s security-focused cases and agents.
← Back to Tracecat The whole security orchestration, automation, and response software list