![License](https://img.shields.io/badge/License-AGPL%203.0-blue?style=for-the-badge&logo=agpl)
![Commit Activity](https://img.shields.io/github/commit-activity/m/TracecatHQ/tracecat?style=for-the-badge&logo=github)
[![Docs](https://img.shields.io/badge/Docs-available-blue?style=for-the-badge&logoColor=white)](https://docs.tracecat.com)
![Next.js](https://img.shields.io/badge/next.js-%23000000.svg?style=for-the-badge&logo=next.js&logoColor=white)
![FastAPI](https://img.shields.io/badge/FastAPI-005571?style=for-the-badge&logo=fastapi)
[![Pydantic v2](https://img.shields.io/endpoint?style=for-the-badge&url=https://raw.githubusercontent.com/pydantic/pydantic/main/docs/badge/v2.json)](https://docs.pydantic.dev/latest/contributing/#badges)
[![Discord](https://img.shields.io/discord/1212548097624903681.svg?style=for-the-badge&logo=discord&logoColor=white)](https://discord.gg/H4XZwsYzY4)
Tracecat is an open-source Tines / Splunk SOAR alternative for security engineers. We're building the features of Tines using enterprise-grade open-source tools.
- [x] Hosted Temporal workflows
- [x] No-code workflow builder
- [x] Automations-as-code
- [x] GitHub Actions-like YAML syntax. Docs
- [x] Python-to-no-code compiler. Docs
- [x] Version control
- [ ] VSCode extension (coming soon)
- [x] Actions (HTTP requests, if-else, etc.). Docs
- [x] Case Management. [Docs]()
- [x] Dashboard UI
- [x] Command-line interface
- [x] Integrations
Tracecat is not a 1-to-1 Tines / Splunk SOAR equivalent. We designed Tracecat to be the simplest way for modern security teams to build, scale, and maintain workflows. Tracecat enables security practitioners to build automations using both:
- No-code drag-and-drop UI
- Configuration-as-code (e.g. Ansible / GitHub Actions)
No-code workflows are automatically synced into code, and vice versa. Tracecat extends the classic no-code Security Orchestration, Automation and Response (SOAR) experience with DevOps best-practices.
Why Tracecat?
- Security Operations (SecOps): Unify workflow development across security engineering and SOC teams
- Security Engineers (SecEng): Build and maintain complex automations using open source integrations, configuration-as-code, and a powerful templating language
- Managed Detection & Response (MDR): Rapidly embed scalable workflow applications into any security product
Highlights
Automate security workflows
|
Close security cases fast with AI
|
Getting Started
The easiest way to get started is to meet one of our cofounders on an open-source onboarding call. We'll help you install Tracecat self-hosted via docker compose
and run your first workflow in 30 minutes.
More of a DIY hacker? Check out the self-serve installation guide here.
Community & Support
- Discord: seeking support, sharing new feature or integration ideas, and hanging out with the community.
- GitHub issues: bugs and errors you encounter with Tracecat.
- Security: reporting security concerns and vulnerabilities.
Documentation
Partner With Us
Tracecat is now open to MDRs and MSSPs. Sign up over at our website or book a call with one of our cofounders.