Tracecat
by Tracecat · Open source SOAR for security teams and AI agents
BenchRank score
Screenshots of Tracecat
Homepage
Overview
Tracecat is an open source SOAR platform for security teams. It combines workflows, case management and AI agents that reach tools such as SIEM, EDR, IdP and cloud providers via prebuilt integrations and hosted MCP servers, with loops, conditions, parallel subflows and Python, Bash or Ansible scripts. Agents can pause for human approval, and prompts and tool calls are logged.
- Best for
- Security teams self-hosting SOAR who want to build AI agents over their existing tooling
- Pricing
- The Open Source edition is free forever to self-host; Enterprise is custom-priced and quoted after a demo, with no figures published.
- Runs on
- Self-hosted
Strengths and trade-offs
Strengths
- Self-host in your own VPC, on-prem or on Tracecat cloud
- Free edition: unlimited workflows and cases, SSO, audit logs
- Over 100 hosted MCP servers, no integration code needed
- Sensitive agent actions pause for logged human approval
Trade-offs
- Enterprise pricing is custom only — no figures published
- Agent builder, RBAC, SCIM and case metrics are Enterprise-only
- Managed cloud and Kubernetes are not in the open source edition
- AI-powered dashboards are listed as coming soon
Pricing
Published plans and prices from Tracecat’s own pricing page.
How this score is made up
Each dimension is scored out of 100 and combined into the headline score using fixed weights.
MCP support
Whether an agent can drive the product through the Model Context Protocol, and how much setup that takes.
API quality
Public API surface: machine-readable spec, official SDKs, documented auth, errors, rate limits and versioning.
Documentation
Publicly reachable docs — coverage, freshness, code samples and machine readability.
Agent friendliness
How readable the site is to an automated client: llms.txt, structured data, server-rendered content, crawler access.
Pricing transparency
Whether real prices are published, self-serve signup exists, and usage costs are knowable without a sales call.
Changelog
A public, dated record of what shipped and when — the clearest signal that a product is still alive.
Marketing site structure
Whether the site answers a buyer's questions: clear positioning, the pages that matter, and accessibility.
Page speed
How fast the site loads for real visitors: Chrome UX Report 75th-percentile LCP, INP and CLS, with a Lighthouse mobile run standing in where a site has too little traffic for field data.
Operational trust
Status page and incident history, security disclosure, compliance and data-processing documentation.
Measured, but not part of the score
Useful to know, but not a mark for or against the product — so these do not affect the ranking.
Openness
Source availability, self-hosting, data export and open standards. Scored and shown, but not part of the composite — paid SaaS is not worse for being paid SaaS.
Maintenance
Release cadence and repository activity. Scored and shown, but not part of the composite — it is only measurable for open repositories.
This doesn’t look right — report a problem with Tracecat’s score
Where this comes from
The Tracecat pages BenchRank reads when it scores the product — its documentation, release notes, status and security pages, and its repository where there is one.
Alternatives in Orchestration & Scheduling
Ranked 1
82.4 — BenchRank score out of 100Prefect
Prefect · Python-decorator workflow orchestration for data, ML and agents
Best for: Python data and ML teams that want scheduled, self-retrying pipelines without hosting a scheduler
Ranked 2
80.9 — BenchRank score out of 100Temporal
Temporal · Durable execution for workflows, AI agents and long-running jobs
Best for: Engineering teams running long workflows, pipelines or AI agents that must survive crashes and retries
Ranked 3
78.9 — BenchRank score out of 100Inngest
Inngest · Durable execution for background jobs, workflows and AI agents
Best for: Teams adding retries, flow control and step-level tracing to background jobs and AI agents.
Is this your product?
Claim Tracecat to manage its profile. Claiming lets you suggest edits to the descriptive fields — it never changes scores or rankings.