Tracecat AI-Native Security Automation and SOAR Platform

Tracecat is an open-source, AI-native security automation platform built as a self-hosted alternative to Tines and Splunk SOAR. It combines agents, workflows, case management, and lookup tables in one platform with sandboxed execution powered by Temporal and nsjail.

Installation

Requirements and caveats from upstream:

• Code-native: sync custom Python scripts from your Git repo into Tracecat.
• Self-host anywhere: Docker, Kubernetes, AWS Fargate.
• Custom registry: turn custom Python scripts into agent tools and workflow steps

Basic usage or getting-started notes:

• Sandboxed-by-default with nsjail and run on Temporal for security, reliability, and scale.

• Sandboxed: run untrusted code and agents within nsjail sandboxes or pid runtimes.

• Source: https://github.com/TracecatHQ/tracecat

• Extracted from upstream docs: https://raw.githubusercontent.com/TracecatHQ/tracecat/HEAD/README.md

Source

• Agent Skill Exchange