Use cases
Inventory
Find every tool, owner, seat, and cost.
Savings
Catch waste, overlap, and renewals early.
Access
Onboard and offboard across your stack.
Context
Map how people, tools, spend, and agents connect.
For
Founders
Protect runway by seeing every tool and cost.
Engineering
Control AI usage, access, and provider spend.
Finance
Reconcile software spend and find waste.
Operations
Keep inventory, access, and renewals current.
Resources & company
Resources
Guides and practical software insights.
Manifesto
Why software operations need a new model.
Press
Company news and media resources.
Partners
Build and grow with ELI.
IntegrationsStacksTools
Talk to a humanDiscover my stack
IntegrationsStacksTools
Discover my stackTalk to a human

Company

  • Home
  • Manifesto
  • Talk to us
  • Partners

Help

  • Terms of service
  • Privacy policy
  • Docs

Product

  • Inventory
  • Savings
  • Access
  • Context

For teams

  • Founders
  • Engineering
  • Finance
  • Operations

Explore

  • Integrations
  • Tools
  • Stacks
  • Startup credits
  • Articles

Socials

  • LinkedIn
  • Instagram
  • TikTok
  • YouTube
Enterprise Layer Intelligence
Categories/Cybersecurity/Tracecat
Tracecat

Tracecat

Founded by Chris L. in 2024

Automate security workflows, triage incoming alerts, and coordinate incident response with autonomous agents

Pricing model

Free

Rating

★ People love it

Time to value

Moderate Setup (1-3 hours)

You can use Tracecat to build automated security workflows and run cyber defense playbooks with autonomous agents. It connects directly with tools like CrowdStrike Falcon, Wiz, Okta, and Slack through pre-built integrations and Model Context Protocol servers. Analysts can triage phishing emails, isolate compromised endpoints, review cloud misconfigurations, and audit third-party application permissions. You can write custom Python logic, synchronize configurations with Git repositories, open shared investigation cases, and set up mandatory approval gates before sensitive actions execute, keeping complete audit logs of every tool call and decision.

What Tracecat does

Quarantine infected endpoints directly from alert notificationsRevoke compromised session tokens across identity providersScan URLs and files using threat intelligence servicesTrigger incident response workflows via webhooks or schedulesManage investigation cases and assign action items to team membersRequire manual analyst approval before executing destructive actionsSync automation runbooks with Git repositories for version controlOpen source architecture that can be self-hosted on-premise or in private cloudsModel Context Protocol integration to connect agents with existing security systemsHuman-in-the-loop approval gates for sensitive response actionsNative support for custom Python scripts and dependenciesBi-directional Git synchronization to version control prompts, workflows, and skillsIntegrated case management with automated timeline generation and artifact trackingComprehensive audit logging of all agent prompts, decisions, and tool calls

Pricing breakdown

Pricing model: Free

Tutorials & Demos

Frequently asked

WizWizOktaOktaSlackSlackGmailGmailGithubGithubAWSAWSMicrosoft CopilotMicrosoft Copilot

Want a tailored answer?

See whether Tracecat fits your stack.

Techbible weighs Tracecat against what you already pay for, your team shape, and the work that's actually happening. Free to start.

Side by side

Compare Tracecat

Search the catalog or pick a similar tool to compare pricing, features, and fit.

Or pick from similar tools

More in Cybersecurity

All tools →
Abnormal AI

Abnormal AI

Stop phishing attacks, account takeovers, and social engineering across enterprise email and identity environments

ACAIA

ACAIA

Provides cloud-native for financial companies like banks and insurance

Accountable HQ

Accountable HQ

Manage HIPAA compliance, complete risk assessments, train staff, and organize business associate agreements

Acronis

Acronis

Protect systems from cyber threats and automate routine data backups across corporate endpoints

ADAM Aerospace

ADAM Aerospace

Verify and secure critical mission data across defense and space operations

Addigy

Addigy

Manage, monitor, and secure Apple devices across multiple organizations in real time

Adversa AI

Adversa AI

Monitor and block dangerous actions taken by coding agents in real time

Agency

Agency

Manage compliance programs and prepare for security audits

Tracecat, SOAR, security automation, cybersecurity, incident response, AI agents, alert triage, phishing investigation, endpoint isolation, MCP servers, Python, GitOps, case management, SecOps, Falcon, Wiz, SIEM