Tracecat is an open-source Tines / Splunk SOAR alternative for security engineers. We’re building the features of Tines using enterprise-grade open-source tools.

​
Who uses Tracecat?

  • Security Operations (SecOps): Unify workflow development across security engineering and SOC teams
  • Security Engineers (SecEng): Build and maintain complex automations using open source integrations, configuration-as-code, and a powerful templating language
  • Managed Detection & Response (MDR): Rapidly embed scalable workflow applications into any security product

​
New to Tracecat?

Book an open-source onboarding call with one of our cofounders to get started.

Installation

Learn how to install Tracecat locally

Quickstart

Automate your first security workflow in 15 minutes

​
Core Features

Workflows

Automated event-driven workflows

Workflow Definitions

Configuration-as-code for workflows

Actions

Core building blocks for automations

User-Defined Functions

Write custom integrations using Python

Expressions

Powerful templating language and formulas

Secrets

Built-in secrets manager

Case Management

AI-assisted case management

​
Tracecat in Production

Deployment

Deploy Tracecat into your own Cloud environment

Quickstart