Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/tracecathq/tracecat
The open source Tines / Splunk SOAR alternative for security engineers.
https://github.com/tracecathq/tracecat
automation cybersecurity event-driven fastapi llm low-code monitoring nextjs openapi orchestration pydantic security temporalio workflow-engine
Last synced: 6 days ago
JSON representation
The open source Tines / Splunk SOAR alternative for security engineers.
- Host: GitHub
- URL: https://github.com/tracecathq/tracecat
- Owner: TracecatHQ
- License: agpl-3.0
- Created: 2024-02-27T06:48:32.000Z (11 months ago)
- Default Branch: main
- Last Pushed: 2025-01-11T11:25:55.000Z (10 days ago)
- Last Synced: 2025-01-11T11:28:47.777Z (10 days ago)
- Topics: automation, cybersecurity, event-driven, fastapi, llm, low-code, monitoring, nextjs, openapi, orchestration, pydantic, security, temporalio, workflow-engine
- Language: Python
- Homepage: https://tracecat.com
- Size: 24.7 MB
- Stars: 2,467
- Watchers: 21
- Forks: 180
- Open Issues: 16
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
Awesome Lists containing this project
README
[](https://docs.tracecat.com)
[](https://docs.pydantic.dev/latest/contributing/#badges)
[](https://discord.gg/H4XZwsYzY4)
[Tracecat](https://tracecat.com) is an open-source Tines / Splunk SOAR alternative for security engineers. We're building the features of Tines using enterprise-grade open-source tools.
- [x] Hosted [Temporal](https://github.com/temporalio/temporal) workflows
- [x] No-code workflow builder
- [x] Automations-as-code
- [x] GitHub Actions-like YAML syntax
- [x] Python-to-no-code integrations
- [x] Version control
- [x] Actions (HTTP requests, JSON data transforms)
- [x] Integrations
Tracecat is not a 1-to-1 Tines / Splunk SOAR equivalent. We designed Tracecat to be the simplest way for modern security teams to build, scale, and maintain workflows. Tracecat enables security practitioners to build automations using both:
- No-code drag-and-drop UI
- Configuration-as-code (e.g. Ansible / GitHub Actions)
No-code workflows are automatically synced into code, and vice versa. Tracecat extends the classic no-code [Security Orchestration, Automation and Response (SOAR)](https://www.gartner.com/en/information-technology/glossary/security-orchestration-automation-response-soar) experience with DevOps best-practices.
## Why Tracecat?
- **Security Operations (SecOps):** Unify workflow development across security engineering and SOC teams
- **Security Engineers (SecEng):** Build and maintain complex automations using open source integrations, configuration-as-code, and a powerful templating language
- **Managed Detection & Response (MDR):** Rapidly embed scalable workflow applications into any security product
## Getting Started
The easiest way to get started is to meet one of our cofounders on an open-source [onboarding call](https://cal.com/team/tracecat/onboarding). We'll help you install Tracecat self-hosted via `docker compose` and run your first workflow in 30 minutes.
More of a DIY hacker? Check out the self-serve [installation guide here](https://docs.tracecat.com/self-hosting/introduction).
## Community & Support
- [Discord:](https://discord.gg/n3GF4qxFU8) seeking support, sharing new feature or integration ideas, and hanging out with the community.
- [GitHub issues:](https://github.com/TracecatHQ/tracecat/issues) bugs and errors you encounter with Tracecat.
- [Security:](https://github.com/TracecatHQ/tracecat?tab=security-ov-file) reporting security concerns and vulnerabilities.
## Documentation
- For full documentation, visit [https://docs.tracecat.com](https://docs.tracecat.com).
- For developers looking to create custom security apps, check out our [API Reference](https://docs.tracecat.com/api-reference/introduction).
- [Quickstart](https://docs.tracecat.com/tutorials/quickstart): Build the classic VirusTotal enrichment playbook in 15 minutes.
## Partner With Us
Tracecat is now open to MDRs and MSSPs. [Sign up](https://tracecat.com/#deal) over at our website or [book a call](https://cal.com/team/tracecat) with one of our cofounders.