Tracecat

Tracecat is an open-source platform for automating security, IT, and production engineering work with AI agents. It brings cases, alerts, and complex workflows into one interface—replacing scripts and scattered tools with a single automation builder.

Incident response and operations automation

Tracecat lets teams define and run playbooks for tasks ranging from SIEM alert handling to common IT requests. Workflows can be triggered by webhooks, schedules, or external events. AI agents can assist with incident triage, data enrichment, and decision-making based on predefined logic.

Open-source alternative to Splunk SOAR and Tines

Tracecat positions itself as an AI-native, open-source alternative to Splunk SOAR and Tines. Teams can self-host Tracecat, connect it to existing log sources, ticketing, and monitoring systems, and then migrate playbooks into a unified automation workspace over time.

Built for teams with strict SLAs

Tracecat targets mission-critical use cases in security, operations, and support. It offers unlimited workflows and agents, while paid plans focus on reliable alerting and high availability—making it easy to start and scale as workload grows.