Tracecat is live · free plan, paid from $50,000/yr · last verified 24 Oct 2026 · viability healthy
Tracecat
Tracecat is open source SOAR that runs AI agent security automation with human approval on sensitive actions.
For a SOC with engineers who write Python and an alert queue nobody has time to chase, Tracecat is the most credible open source answer we've seen — unlimited workflows, agents, and cases on a free self-hosted tier, and a Team plan at $50k/yr that includes 150k executions/month. You trade Tines' mature connector marketplace and Cortex X9AR's vendor-run SLA for MCP-native agents living in your own Git repo. Budget three weeks to wire tools and tune agents before it earns its keep.
Verdict generatedVerified 6d ago · liveness 87/100 · cite: rightaichoice.com/tools/tracecat
- Security teams that want custom AI agents working the alert queue instead of a static playbook library
- Startups and mid-size companies needing a self-hostable SOAR they own and can air-gap
- SOCs with Python-literate engineers comfortable with MCP, Git, and prompt tuning
- Cloud-native security ops pulling findings from SIEM, EDR, CSPM, CNAPP, and identity tools
- Teams that want plug-and-play prebuilt playbooks with minimal setup work
- Organizations with no in-house engineering capacity to build and tune agents
- Buyers who want a closed-source vendor running their automation with day-one SLAs
We scan live Reddit threads, YouTube comments, X posts, G2 reviews and other communities — and hand you an honest verdict in under a minute.
- Honest verdict, not marketing
- Real pros & cons from real users
- Attributed quotes with receipts
3 free scans · no card needed
Skip Tracecat if you want a prebuilt playbook library you can port into on day one — its agents are built around your own prompts, skills, and Git-synced repos, so a team with no one to write Python or tune prompts will stall in week one.
Multi-tenant workspaces, workspace Git sync, custom roles, SCIM, advanced cases, and Kubernetes Helm — including air-gapped deployment — are Enterprise-only, so you cannot stay on the free tier once you need them.
The Open Source tier is genuinely free forever with unlimited workflows, cases, and agents, which is unusual — Tines and Torq both meter their free or entry plans. Enterprise is all-in-one custom pricing that scales with usage, deployment model, and support, so compare it against a Cortex XSOAR or Splunk SOAR contract plus its per-case or per-incident add-ons rather than against a mid-market SaaS SOAR seat price. If you have engineering capacity and a self-hosted VPC, the free tier may carry
In short
Tracecat — Tracecat is open source SOAR that runs AI agent security automation with human approval on sensitive actions. Best for Security teams that want custom AI agents working the alert queue instead of a static playbook library, Startups and mid-size companies needing a self-hostable SOAR they own and can air-gap, SOCs with Python-literate engineers comfortable with MCP, Git, and prompt tuning. Free to start; paid plans from $50,000/yr.
No head-to-head comparison for Tracecat yet — the alternatives below are the closest matches we list.
What is Tracecat?
Tracecat — Tracecat is open source SOAR that runs AI agent security automation with human approval on sensitive actions. Best for Security teams that want custom AI agents working the alert queue instead of a static playbook library, Startups and mid-size companies needing a self-hostable SOAR they own and can air-gap, SOCs with Python-literate engineers comfortable with MCP, Git, and prompt tuning. Free to start; paid plans from $50,000/yr.
Tracecat is an open source security orchestration, automation, and response platform built around AI agents instead of a no-code playbook library. You hand an agent a goal and instructions, and it chains tools through hosted MCP servers — 50+ prebuilt in the catalog, with enterprise connectors reaching 500+ systems across SIEM, EDR, MDM, IdP, and CSPM. A phishing triage agent parses headers, detonates links, pulls Falcon telemetry, and proposes session revoke; an OAuth review agent discovers third-party grants and stages revokes for sign-off. Agents pause at sensitive steps for explicit human approval, an agent inbox collects the requests, and open source audit logs record every prompt, tool call, and decision. Tracecat MCP runs the other direction too: Claude Code, Microsoft Copilot, Codex, or another coding agent can draft workflows, cases, tables, agent skills, and tool integrations from a natural-language prompt. Skills are reusable capabilities your engineers ship to GitHub and analysts compose into runbooks; GitOps keeps prompts, workflows, skills, and integrations synced to your own repo. Case management picks up where agents leave off with custom fields, tasks, metrics, triggers, sub-cases, and a case copilot that drafts containment runbooks. Control flow covers loops, if-conditions, parallel subflows, scatters, and Python, Bash, or Ansible steps with registry-pinned dependencies. It is aimed at AI-native SOC teams with Python fluency, not buyers shopping for a plug-and-play playbook pack. Deploy self-hosted on Docker Compose or Kubernetes Helm (air-gapped included), or on Tracecat Cloud in your own VPC. Every plan includes unlimited users, workflows, agents, and cases. The October 2026 1.2.0 release added sub-cases, an installable prebuilt skill library, workflow forms, and Claude Haiku 5.5 in the platform model catalog. The comparison it invites is Tines or n8n on one side and closed SOAR suites on the other; it is not a like-for-like port for a legacy
Key features
- AI agent builder with goals, instructions, versioned prompts, presets, skills, and subagents
- Human-in-the-loop tool approvals that pause sensitive actions for sign-off and log each one
- Unified agent inbox for reviewing and approving agent actions
- Hosted MCP server catalog with 50+ prebuilt connectors
- Tracecat MCP: drive workflows from Claude Code, Microsoft Copilot, or Codex
- Agent Skills shipped by engineers to GitHub and composed by analysts into runbooks
- Prebuilt Tracecat skill library installable from the UI
- GitOps sync of prompts, workflows, skills, and integrations to your repo
- Case management with custom fields, tasks, metrics, triggers, and sub-cases
- Case copilot that summarizes findings and drafts containment runbooks
- Loops, if-conditions, parallel subflows, scatters, and Python/Bash/Ansible control flow
- Custom Python actions with registry-pinned dependencies
- Workflow forms and reruns with fixed action results
- Platform model catalog including Claude Haiku 5.5 and Mythos 5/5.1
- Self-host on Docker Compose, Kubernetes Helm, air-gapped, or Tracecat Cloud in US or EU
Behind the verdict
Where it bites is the setup curve. Tracecat is not a playbook pack you install on Monday and run on Tuesday. Agents need goals, instructions, versioned prompts, and connected MCP servers before they do anything useful. If your team has never touched an MCP server or tuned a prompt, the first month is a build project, not a quick win. We'd still pick it over a closed SOAR for one reason: the audit trail and the repo are yours. The agent inbox is the feature that makes this palatable to a CISO. Every sensitive action — isolate a host, revoke an OAuth grant, apply an STS deny — pauses for explicit approval and lands in the log. That is the difference between a demo and something a regulated SOC will sign off on. Pair it with sub-cases from 1.2.0 and you get related incidents grouped instead of sprayed across a queue. The prebuilt skill library shortens the blank-page problem, and workflow forms let analysts kick off a run without editing YAML. Pick Tracecat when your engineers already live in Git and Python, and when the alert sources are the usual suspects — Wiz, CrowdStrike Falcon, Okta, Gmail, VirusTotal, URLScan, Splunk, Elastic. The MCP model means you build integrations as capabilities, not one-off connectors, and Tracecat MCP lets Claude Code or Copilot draft the first version of a workflow. For a three-person security team trying to do the work of thirty, the free self-hosted tier is genuinely usable; the Team plan at $50k/year adds cloud hosting, Git sync, REST API, Slack and Teams channels, and agent monitoring. Pass if you need a vendor to run your automation with day-one SLAs, or if you're mid-migration off a legacy SOAR and need like-for-like playbook ports. Also pass if nobody on staff wants to own prompts and tool wiring as an ongoing discipline. Agentic
Models under the hood
as of 2026-10-23
Limitations
- The open source tier is free and self-hosted (Docker Compose) with one workspace and no SLA; deployment options such as cloud, air-gapped, Kubernetes Helm, and horizontal autoscaling are excluded on that plan, as are custom roles/SCIM, service accounts/API keys, and REST API access.
- Running agents depends on an agent builder with versioned prompts, skills, and Python or Bash actions, so teams need engineering capability rather than analysts clicking through a UI.
- Actions that touch production — endpoint isolation, session revocation, OAuth grant revoke — are gated behind human-in-the-loop approvals, so fully unattended containment is not the default.
as of 2026-10-19
Researching Tracecat? Get your full AI stack in 60 seconds.
Free, no signup — tell us your goal and get tools matched to your budget & existing stack.
Is Tracecat still active?
Tracecat is live · free plan, paid from $50,000/yr · last verified 24 Oct 2026 · viability healthy.
Viability score
How well maintained and how widely used is Tracecat? Built from what the vendor actually publishes (docs, changelog, tutorials, integrations, pricing), whether the site is live, and how much real users discuss it. How we calculate this
Last calculated: October 2026
How we score →What's new in Tracecat
Checked 11 days agoAcross the latest 4 updates: 1 feature update, 1 launch, 1 changelog entry and 1 news mention.
Tracecat 1.2.0 adds sub-cases, prebuilt skill library, workflow forms, and Claude Haiku 5.5
Sub-cases group related incidents, a skill library installs prebuilt Tracecat skills, workflow forms and reruns with fixed action results ship, and Claude Haiku 5.5 plus Mythos 5/5.1 enter the platform model catalog.
Managing the lifecycle of Google OAuth apps with agents
Tracecat details how its agents discover, review, and revoke third-party Google OAuth apps so access reviews stay current.
Tracecat 1.1.0 ships with breaking API, agent, and RBAC changes
Legacy Google SecOps Python actions were removed, invitations consolidated with role grants, sandbox memory enforced via cgroups, and roles pinned to their RBAC level.
Introducing Tracecat 1.0
Tracecat 1.0 reached general availability, opening agentic security automation to builders and positioning the platform for enterprise deployment.
What do users say about Tracecat?
What people actually say about Tracecat — is it worth it?
We scanned public community sources for Tracecat on Oct 15, 2026 and could not establish that the discussion we found is about this tool rather than something else sharing its name. Only 3 of the posts we fetched could be positively tied to Tracecat. Rather than publish a sentiment score built on the wrong subject, we publish nothing here and re-run the scan.
How we verified this
Every listed fact about Tracecat— pricing, features, links, status — is re-read from the vendor's own pages by our verification pipeline and each change is logged with a date; the last pass ran on 24 Oct 2026. Pages mix model-assisted synthesis with human review; see how we verify.
Verification history
We have re-verified Tracecat 19 times since . Each pass re-reads the vendor's own pages and re-checks every listed field against that evidence; passes where nothing had changed are marked as such.
- — changed features, description, our verdict, who should skip it, pricing tiers, who it suits, integrations, summary
- — changed pricing page, models, platforms, limitations
- — changed limitations, hidden costs, pricing fit, use cases, summary, who should skip it, description, models, features, setup time, switching out, switching in, our verdict, pricing tiers
- — changed description, our verdict, summary, features, who it suits, who should skip it, pricing tiers
- — changed limitations, pricing page
- — changed our verdict, pricing tiers, summary, who should skip it, description, features, who it suits
Showing the 6 most recent of 19 verification passes.
Free to cite with attribution — this page re-verifies continuously.
How much does Tracecat cost in 2026?
Tracecat: Free to start; paid plans from $50,000/yr. Pricing last verified 24 Oct 2026.
Plans compared
Every published Tracecat tier, its price as the vendor publishes it, who it fits, and what it adds over the tier below. The 12-month cost projection follows.
| Plan | Price | Billing | Who it's for |
|---|---|---|---|
| Open Source | Free | — | A SOC with Python-literate engineers that wants unlimited agents, cases, and workflows self-hosted on Docker or AWS Fargate at no license cost.Adds: Free entry point: unlimited workflows, cases, and agents in a single workspace, with agent presets, skills, human-in-the-loop approvals, the hosted MCP catalog, Tracecat MCP, prebuilt integrations, lookup tables, SSO, and audit trails. |
| Team | $50,000/yrVendor: “$50,000/year” | yearly | — |
| Enterprise | Custom | quote | Security orgs running multiple teams or business units that need SCIM, custom roles, workspace Git sync, Kubernetes Helm or air-gapped deployment, and a forward deployed engineer.Adds: Adds unlimited multi-tenant workspaces, workspace Git sync, RBAC with service accounts and SCIM, cloud (US/EU) or self-hosted including Kubernetes Helm and air-gapped, advanced cases with triggers and metrics, subagents and versioned prompts, agent monitoring, plus 24/7 Slack |
12-month cost
Project the real annual outlay, including the implied monthly cost when only an annual tier is published.
Vendor list price only. Add-on usage, seat overages, and contract minimums are surfaced under Hidden costs & gotchas.
Where the pricing makes sense
The company stage and team size where Tracecat's pricing actually pencils out — and where peers do it cheaper.
The Open Source tier is genuinely free forever with unlimited workflows, cases, and agents, which is unusual — Tines and Torq both meter their free or entry plans. Enterprise is all-in-one custom pricing that scales with usage, deployment model, and support, so compare it against a Cortex XSOAR or Splunk SOAR contract plus its per-case or per-incident add-ons rather than against a mid-market SaaS SOAR seat price. If you have engineering capacity and a self-hosted VPC, the free tier may carry
Has Tracecat's pricing changed?
No plan price for Tracecat has moved since we began logging in Aug 2026; the pricing page is re-read on every verification pass.
Who should pick Tracecat?
Pick Tracecat if you are Security teams that want custom AI agents working the alert queue instead of a static playbook library, Startups and mid-size companies needing a self-hostable SOAR they own and can air-gap, SOCs with Python-literate engineers comfortable with MCP, Git, and prompt tuning, Cloud-native security ops pulling findings from SIEM, EDR, CSPM, CNAPP, and identity tools.
Look elsewhere if you are Teams that want plug-and-play prebuilt playbooks with minimal setup work, Organizations with no in-house engineering capacity to build and tune agents, Buyers who want a closed-source vendor running their automation with day-one SLAs, Shops mid-flight on a legacy SOAR migration needing a like-for-like playbook port.
Skip it if Skip Tracecat if you want a prebuilt playbook library you can port into on day one — its agents are built around your own prompts, skills, and Git-synced repos, so a team with no one to write Python or tune prompts will stall in week one.
GeneratedReal-world workflow fit
Concrete scenarios for the personas Tracecat actually fits — and what changes day-one when you adopt it.
A Wiz alert fires on privilege escalation in a prod IAM role. The engineer maps the finding to a Tracecat agent with Wiz, Falcon, and Okta MCP servers connected, sets policy so read actions run automatically and isolation waits for approval, then triggers it from the Wiz webhook.
Outcome: The agent pulls assets and CloudTrail context, correlates EDR telemetry, opens a case with evidence, and stages an isolate-host action the analyst approves from the agent inbox — with every tool call in the audit log.
Finance reports a suspicious Okta password-reset email. Instead of hand-checking headers, the lead runs a phishing triage agent that parses headers, detonates links, checks domain age and URLScan, and looks up who clicked via Falcon telemetry.
Outcome: The agent confirms a credential-harvest page, recommends session revokes for three users and a tenant-wide sender block, and the lead approves both actions from one screen.
The engineer syncs prompts, workflows, skills, and integrations to the company's own Git repo, ships a new skill from a PR, and uses Tracecat MCP from Claude to draft the workflow around it.
Outcome: Version control stays authoritative, analysts compose the shipped skill into runbooks without touching code, and the repo history is the change log for SOC automation.
Use cases
- Triage a Wiz cloud finding by pulling assets and CloudTrail context, correlating Falcon EDR telemetry, and proposing containment for approval.
- Detect a credential-harvesting phishing email, check sender domain age and URLScan results, then revoke Okta sessions for every user who clicked.
- Isolate a compromised endpoint through CrowdStrike Falcon after an alert, quarantining the host and revoking session tokens on human approval.
- Review a batch of high-risk OAuth grants with an analyst agent, then revoke Google or Entra permissions and notify the owner.
- Investigate the Shai-Hulud npm worm by correlating package advisories with GitHub OAuth app installs and isolating affected developer workstations.
- Run a scheduled weekly OAuth grant review on a cron, flagging newly granted high-risk scopes since the last pass.
- Turn an investigation pattern from a case into a reusable skill your engineers ship to Git and analysts compose into runbooks.
- Draft workflows, cases, tables, and tool integrations in Tracecat from a prompt in Claude or Cursor via Tracecat MCP.
Setup time & first value
How long it actually takes to get something useful out of Tracecat — broken out by persona, not the marketing-page minute.
Open Source on Docker: a working instance in an afternoon, but plan on Tracecat's own three-week arc to production agents — week one connecting SIEM, EDR, MDM, CSPM, and ticketing and setting tool policies, week two building the first agents with approval gates, week three and beyond tuning in production. Enterprise adds a forward deployed security engineer who runs the rollout with you.
Switching to or from Tracecat
How to bring data in from common predecessors and how to get it back out — written for the switcher, not the buyer.
- →From Tines: rebuild alert triage as agents with MCP tools rather than stories, using Tracecat's Tines comparison as the mapping guide.
- →From n8n or Shuffle: port webhook and schedule triggers directly, then convert code nodes into Python actions with registry-pinned dependencies.
- →From a legacy SOAR playbook library: recreate investigation patterns as agent skills shipped from Git and compose them into runbooks rather than porting playbooks one-to-one.
- →From manual Slack-driven triage: start with one alert queue, connect the matching MCP servers, and add approval gates where a human already makes the call.
- ↗To Tines: export workflow logic and rebuild as stories if you need a mature prebuilt connector marketplace over agent-based automation.
- ↗To n8n: move generic webhook and schedule automations across, accepting that security-specific MCP connectors must be rebuilt as HTTP calls.
- ↗To Cortex XSOAR or Splunk SOAR: expect to re-author agents as playbooks if you need a vendor-run platform with prebuilt content packs and day-one SLAs.
Integrations
Resources & guides
Tutorials & Learning
YouTube returned 6 videos for “Tracecat”, and we withheld 6: 6 could not be judged, because “Tracecat” is a single word that other videos use for other things. We are showing none, because we could not prove any of them are about Tracecat.
Official links
What are the best Tracecat alternatives?
The closest alternatives to Tracecat we list are Tines, n8n and Dropzone AI. Ranked by direct product-type match, not category overlap.
| Alternative | Pricing | Starts at | Last verified |
|---|---|---|---|
| Tines | Freemium | Pricing not published | — |
| n8n | Freemium | Pricing not published | — |
| Dropzone AI | Paid | Pricing not published | — |
Alternatives to Tracecat
View all
Tines
Tines is a no-code automation and AI agent platform that gives IT and security governance over everything your teams build.
n8n
n8n is a visual AI workflow and agent platform you can self-host, with 500+ integrations and JS/Python steps on one readable canvas.
Dropzone AI
Dropzone AI runs autonomous AI SOC agents that investigate security alerts end to end and show the evidence behind each verdict
Tools that pair well with Tracecat
Common stack mates teams adopt alongside Tracecat, with the specific reason each pairing earns its keep.
Tines
Tines is a no-code automation and AI agent platform that gives IT and security governance over everything your teams build.
n8n
n8n is a visual AI workflow and agent platform you can self-host, with 500+ integrations and JS/Python steps on one readable canvas.
Dropzone AI
Dropzone AI runs autonomous AI SOC agents that investigate security alerts end to end and show the evidence behind each verdict
Frequently asked questions
Used Tracecat? Help shape our editorial sentiment research.