Pricing
Start open source. Scale with one fee for the whole platform. Unlimited workflows, cases, and agents on every plan.
Open Source
Self-hosted automations with full control
Free forever
- Unlimited workflows, cases, and agents
- Agent presets and skills
- Hosted MCP server catalog
- Tracecat MCP (prompt-to-automation)
- Prebuilt integrations
- Lookup tables
- Deploy with Docker or AWS Fargate
- SSO and audit trails included
- Discord community and GitHub issues
- -Tool approvals and agent inbox
- -Advanced cases
- -Multi-tenant workspaces
- -Workspace Git sync
- -Custom roles and SCIM
- -Enterprise support
Enterprise
Build your agentic security team
Custom
Everything in open source, plus:
- Multi-tenant workspaces
- Workspace Git sync
- RBAC, service accounts, and SCIM
- Cloud (US / EU) or self-hosted
- Forward deployed security engineer
- Tool approvals with unified inbox
- Agent mentions in case comments and chat
- Advanced cases (triggers, tasks, metrics)
- AI-powered dashboards (coming soon)
- Kubernetes Helm chart
- 24/7 Slack and email support
- Custom SLAs
Trusted by AI-native security teams
Included with Enterprise
A forward deployed security engineer for your agent rollout.
Connect your alert queues, device findings, cloud findings, and runbooks. Tracecat helps your team turn real investigation patterns into production agents, deployed with the controls security teams need.
Compare plans
Compare open source with the enterprise edition.
| Features | Open Source | Enterprise |
|---|---|---|
| Workflows | ||
| Webhooks | ||
| Schedules | ||
| Global run history and control | - | |
| Workspace Git sync | - | |
| Agents | ||
| AI action | ||
| AI agent action | ||
| Tracecat MCP (prompt-to-automation) | ||
| Agent builder | ||
| Agent presets | ||
| Skills | ||
| Subagents | ||
| Versioned prompts | ||
| Sandboxed MCP | ||
| Memory | - | |
| Tool approvals (human in the loop) | - | |
| Agent inbox | - | |
| Agent mentions in cases and chat | - | |
| Agent folders and tags | - | |
| Agent monitoring | - | |
| Cases | ||
| Case management | ||
| Comments | ||
| Attachments | ||
| Custom fields | ||
| Linked table rows | - | |
| Case tasks | - | |
| Case metrics | - | |
| Case triggers | - | |
| Case correlation | - | |
| Custom dropdowns | - | |
| AI-powered dashboards | - | Coming soon |
| Integrations | ||
| Prebuilt integrations | ||
| Hosted MCP server catalog | ||
| Lookup tables | ||
| Custom registry | ||
| Deployment | ||
| Managed cloud | - | |
| Self-hosted | ||
| Docker | ||
| AWS Fargate | ||
| Kubernetes | - | |
| Air-gapped | ||
| Multi-tenant workspaces | - | |
| Security | ||
| SSO | ||
| Organization audit logs | ||
| Platform audit logs | - | |
| Built-in roles | ||
| Custom roles, groups, and scopes | - | |
| Service accounts | - | |
| SCIM | - | |
| Usage | ||
| Unlimited workflows | ||
| Unlimited cases | ||
| Unlimited agents | ||
| Monthly executions | Self-managed | Custom pricing |
| Support | ||
| Discord community | ||
| GitHub issues | ||
| 24/7 Slack | - | |
| Priority email | - | |
| Forward deployed security engineer | - | |
| Custom training | - | |
| Custom SLAs | - | |
Compare Tracecat side-by-side
Side-by-side breakdowns against other automation platforms.
vs
Tines vs Tracecat
Stories and Cases versus an agent-first security platform.
Compare ->vs
Tracecat vs n8n
Purpose-built security platform vs general-purpose workflows.
Compare ->vs
Open source SOAR platforms
Tracecat, n8n, Shuffle, StackStorm, DFIR-IRIS, and Cortex ranked for AI-native security teams.
Compare ->First 3 weeks
From security backlog to production agents
Week 1
Connect your tools
- Connect SIEM, EDR, MDM, CSPM, CNAPP, ticketing, email, and cloud systems.
- Map real alerts, device findings, cloud findings, and runbooks into Tracecat.
- Set tool policies for read actions, write actions, and sensitive actions.
Week 2
Build your first security agents
- Build agents around your alert queues, findings, and runbooks.
- Use agents to collect evidence, summarize findings, and prepare next actions.
- Add approval gates where a human needs to decide.
Week 3+
Grow your agents in production
- Trigger agents from schedules, webhooks, and cases.
- Review tool calls, approvals, decisions, and run history.
- Tune prompts, tool use, and policies from analyst feedback.
FAQ
Open Source is self-managed with no execution limits. Enterprise is all-in-one pricing for the full platform and scales with usage, deployment model, and support needs. Book a demo for a custom quote.