All 189 Dependencies
Every package Tracecat depends on, ranked by repo health score.
Tracecat is an open-source security automation platform purpose-built for teams and AI agents who need to operate at the speed of modern threats. It lets security and IT teams turn natural-language prompts into end-to-end automations—combining agents, workflows, lookup tables, and case management in a single self-hosted platform without paying a per-seat SSO tax or relying on fragile SaaS integrations.
At its core, Tracecat pairs Temporal for durable, fault-tolerant workflow orchestration with nsjail-based process sandboxing that isolates untrusted code and agent tool calls at the kernel level. Every action runs inside a seccomp-filtered, namespace-isolated sandbox so that a compromised integration cannot reach your secrets or database. The warm worker pool architecture keeps nsjail instances alive between tasks, bringing per-action overhead down from several seconds to under 200 milliseconds.
The platform ships a low-code workflow builder with real if-conditions, loops, and parallel subflows, plus a custom Python registry that lets teams pull their existing scripts from Git and expose them as typed workflow steps or agent tools without rewriting a line. Agents are first-class citizens: they can invoke MCP servers over HTTP/OAuth or local npx/uvx commands, hand off to sub-agents, and pause for human approval before executing sensitive actions.
Tracecat supports self-hosting on Docker Compose, AWS Fargate, or Kubernetes and connects to over 100 enterprise tools via HTTP, OAuth, SMTP, and gRPC connectors. Enterprise features—fine-grained RBAC/ABAC, workflow version control synced to Git, and a managed Cloud option with US or EU hosting—are available under a separate paid license on top of the AGPL-3.0 core.