Open source SOAR platform for AI-native security teams to build, deploy, and govern agent-based security automation workflows.
Tracecat is an open-source Security Orchestration, Automation, and Response (SOAR) platform that lets security teams draft workflows from Claude, Cursor, or any AI workspace and deploy reusable agent-based runbooks. It connects to 100+ pre-built MCP servers without coding, supports on-prem, VPC, and Tracecat cloud deployments, and maintains GitOps-compatible push/pull of prompts, workflows, and skills. Features include prompt versioning with audit history, human-in-the-loop approval for sensitive actions, unlimited workflows, and fully customizable case management. Tracecat is a product of Tracecat.