Welcome to Tracecat

Open source Tines / Palo Alto XSOAR alternative

Note: Tracecat is currently in Public Alpha.

Tracecat is an open source automation platform for security teams. We’re building the easiest way to automate technical workflows, orchestrate alerts, and close cases fast.

Don’t feel ready for security orchestration, automation, and response (SOAR)? Check out our 15 minute tutorial and start easy with Tracecat Cloud.

New to Tracecat?

Try our tutorial and build your first AI SOC team in 15 minutes. Ready to see a real world use-case? Check out our phishing email walkthrough.

15 minute tutorial

Help Mario automatically flag malicious pizza orders (e.g. pineapple)

Real world scenario

Automate phishing email investigations and collect evidence for compliance (coming soon)

Core Features

Workflows

Automated event-driven workflows

Actions

Customizable building blocks for your workflows

Case Management

AI-assisted case management

Event Logs

Search and filter event logs

Self-hosted

Installation

Learn how to install Tracecat locally

Deployment

Deploy Tracecat into your own Cloud environment

Integrations

Coming soon.

Assistant

Responses are generated using AI and may contain mistakes.