Tracecat: Free, Open-Source Security Automation That AI Agents Build and Run

Tracecat is a free, self-hostable platform for automating security work. A team describes a job in plain English and an AI agent wires it up across 100-plus connected tools, each step running in a sandbox.
cyber-security
artificial-intelligence
Author

Kabui, Charles

Published

2026-07-03

Keywords

tracecat, open-source-soar, security-automation, ai-agents, mcp

Download as PDF

Tracecat is an open-source SOAR platform, short for security orchestration, automation, and response, the software teams use to automate how they respond to security alerts. The difference is that it is built for AI agents. Rather than dragging boxes around a canvas, an engineer describes a job in plain English, such as “triage this phishing report” or “revoke these risky OAuth grants,” and an agent running in Claude Code, Codex, or Copilot builds the workflow through Tracecat’s MCP server. It ships with more than 100 pre-built connectors to security products like CrowdStrike Falcon, Wiz, and Okta, runs long jobs on the durable engine Temporal, and executes untrusted code inside a sandbox using Google’s nsjail. It is AGPL-3.0 licensed and self-hostable with Docker or Kubernetes.

Commercial security automation tools are expensive, enterprise-only contracts. Tracecat makes those same SOAR workflows free and self-hosted, so a small team that cannot afford a six-figure platform, or send its alert data to a vendor, can still automate response. Companies like Wealthsimple, SANS, and Depop use it to replace legacy SOAR, and a Depop engineer says they now build agentic workflows they never had time to write by hand.

An agent that can isolate machines and revoke logins is itself a risk, and Tracecat’s paid tier leans in: it monitors every agent tool call, lets rules block malicious ones, and requires human approval for sensitive actions. It is the treat your agent as an insider threat idea turned into a product.

Read More: Tracecat’s bundled skills are executable add-ons, the kind SkillSpector was built to scan.

Sources:

Disclaimer: For information only. Accuracy or completeness not guaranteed. Illegal use prohibited. Not professional advice or solicitation. Read more: /terms-of-service

Reuse

GNU GENERAL PUBLIC LICENSE v3.0(View License)

Citation

BibTeX citation:
@misc{kabui2026,
  author = {{Kabui, Charles}},
  title = {Tracecat: {Free,} {Open-Source} {Security} {Automation}
    {That} {AI} {Agents} {Build} and {Run}},
  date = {2026-07-03},
  url = {https://toknow.ai/posts/tracecat-open-source-soar-ai-security-agents/},
  langid = {en-GB}
}
For attribution, please cite this work as:
Kabui, Charles. 2026. “Tracecat: Free, Open-Source Security Automation That AI Agents Build and Run.” https://toknow.ai/posts/tracecat-open-source-soar-ai-security-agents/.