TracecatHQ/tracecat

Open-source security automation platform for teams and AI agents

What it solves

Tracecat provides a centralized platform for security teams to automate their operations using AI agents and workflows. It eliminates the need to juggle disparate tools by combining agent creation, low-code workflow orchestration, case management, and structured data storage into a single environment.

How it works

The platform allows users to build custom agents with specific prompts and tools, and integrate them into complex workflows featuring loops and conditional logic. It uses Temporal for durable execution and nsjail to run untrusted code in secure sandboxes. It also supports the Model Context Protocol (MCP), enabling users to turn prompts from external AI harnesses (like Claude Code or Copilot) into active automations.

Who it’s for

It is designed for security operations teams who want to automate repetitive tasks, manage security cases, and deploy AI agents that can interact with enterprise tools via a wide array of pre-built connectors.

Highlights

  • Prompt-to-automation: Convert prompts from AI harnesses into end-to-end automations.
  • Low-code builder: Create complex control flows with if-conditions and loops.
  • Secure execution: Sandboxed-by-default environment using nsjail.
  • Extensive integrations: Over 100 pre-built connectors for enterprise tools via HTTP, SMTP, gRPC, and OAuth.
  • Code-native: Ability to sync custom Python scripts from Git repositories as tools or workflow steps.