Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/tracecathq/tracecat
The open source Tines / Splunk SOAR alternative.
https://github.com/tracecathq/tracecat
automation cybersecurity event-driven fastapi hacktoberfest llm low-code monitoring nextjs openapi orchestration pydantic security temporalio workflow-engine
Last synced: about 1 month ago
JSON representation
The open source Tines / Splunk SOAR alternative.
- Host: GitHub
- URL: https://github.com/tracecathq/tracecat
- Owner: TracecatHQ
- License: agpl-3.0
- Created: 2024-02-27T06:48:32.000Z (9 months ago)
- Default Branch: main
- Last Pushed: 2024-10-11T16:55:41.000Z (about 1 month ago)
- Last Synced: 2024-10-11T18:41:45.686Z (about 1 month ago)
- Topics: automation, cybersecurity, event-driven, fastapi, hacktoberfest, llm, low-code, monitoring, nextjs, openapi, orchestration, pydantic, security, temporalio, workflow-engine
- Language: Python
- Homepage: https://tracecat.com
- Size: 18.6 MB
- Stars: 2,385
- Watchers: 21
- Forks: 164
- Open Issues: 16
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
Awesome Lists containing this project
README
[](https://docs.tracecat.com)
[](https://docs.pydantic.dev/latest/contributing/#badges)
[](https://discord.gg/H4XZwsYzY4)
[Tracecat](https://tracecat.com) is an open-source Tines / Splunk SOAR alternative for security engineers. We're building the features of Tines using enterprise-grade open-source tools.
- [x] Hosted [Temporal](https://github.com/temporalio/temporal) workflows
- [x] No-code workflow builder
- [x] Automations-as-code
- [x] GitHub Actions-like YAML syntax. [Docs](https://docs.tracecat.com/concepts/workflow-definitions)
- [x] Python-to-no-code compiler. [Docs](https://docs.tracecat.com/concepts/user-defined-functions)
- [x] Version control
- [ ] VSCode extension (coming soon)
- [x] Actions (HTTP requests, if-else, etc.). [Docs](https://docs.tracecat.com/concepts/actions)
- [x] Case Management. [Docs]()
- [x] Dashboard UI
- [x] Command-line interface
- [x] Integrations
Tracecat is not a 1-to-1 Tines / Splunk SOAR equivalent. We designed Tracecat to be the simplest way for modern security teams to build, scale, and maintain workflows. Tracecat enables security practitioners to build automations using both:
- No-code drag-and-drop UI
- Configuration-as-code (e.g. Ansible / GitHub Actions)
No-code workflows are automatically synced into code, and vice versa. Tracecat extends the classic no-code [Security Orchestration, Automation and Response (SOAR)](https://www.gartner.com/en/information-technology/glossary/security-orchestration-automation-response-soar) experience with DevOps best-practices.
## Why Tracecat?
- **Security Operations (SecOps):** Unify workflow development across security engineering and SOC teams
- **Security Engineers (SecEng):** Build and maintain complex automations using open source integrations, configuration-as-code, and a powerful templating language
- **Managed Detection & Response (MDR):** Rapidly embed scalable workflow applications into any security product
## Getting Started
The easiest way to get started is to meet one of our cofounders on an open-source [onboarding call](https://cal.com/team/tracecat/onboarding). We'll help you install Tracecat self-hosted via `docker compose` and run your first workflow in 30 minutes.
More of a DIY hacker? Check out the self-serve [installation guide here](https://docs.tracecat.com/self-hosting/introduction).
## Community & Support
- [Discord:](https://discord.gg/n3GF4qxFU8) seeking support, sharing new feature or integration ideas, and hanging out with the community.
- [GitHub issues:](https://github.com/TracecatHQ/tracecat/issues) bugs and errors you encounter with Tracecat.
- [Security:](https://github.com/TracecatHQ/tracecat?tab=security-ov-file) reporting security concerns and vulnerabilities.
## Documentation
- For full documentation, visit [https://docs.tracecat.com](https://docs.tracecat.com).
- For developers looking to create custom security apps, check out our [API Reference](https://docs.tracecat.com/api-reference/introduction).
- [Quickstart](https://docs.tracecat.com/quickstart): Deploy the classic threat intel workflow with VirusTotal in 15 minutes.
## Partner With Us
Tracecat is now open to MDRs and MSSPs. [Sign up](https://tracecat.com/#deal) over at our website or [book a call](https://cal.com/team/tracecat) with one of our cofounders.