Tracecat
Book a demo

Pricing that scales with you

Start with one platform fee and scale by end-to-end executions. Unlimited users, workflows, agents, and cases on every plan.

Open Source

Free forever

Self-hosted, no SLA
Deploy now

Limits

WorkflowsUnlimited
AgentsUnlimited
Workspaces1
Included executionsTalk to sales for higher execution tiersNo SLA

Deployment

Self-hosted (Docker Compose)Included
CloudNot included
Air-gappedNot included
Kubernetes Helm chartNot included
Horizontal autoscalingNot included

Workflows

Webhooks and schedulesIncluded
TablesIncluded
Custom registryIncluded
FormsNot included
Workspace Git syncNot included
External secret storesNot included

Cases

CasesUnlimited
Case managementIncluded
Custom fieldsIncluded
Comments and attachmentsIncluded
Case copilotIncluded
TasksNot included
TriggersNot included
Metrics and durationsNot included
Custom dropdownsNot included
Correlation and sub-casesNot included

Agents

Agent presetsIncluded
SkillsIncluded
50+ hosted MCP serversIncluded
SubagentsIncluded
Approvals and agent inboxIncluded
Workspace chatIncluded
Slack and Teams channelsNot included
Agent mentions in cases and chatNot included
Agent monitoringNot included

Access

UsersUnlimited
Built-in rolesIncluded
Custom roles and groupsNot included
Service accounts and API keysNot included
REST API accessNot included

Security

SSOIncluded
Organization audit logsIncluded
SCIMNot included

Air-gapped only

Private network tunnelsNot included
Tunneled MCPNot included
Tunneled agent tool callsNot included

Support

Community (Discord, GitHub)Included
Slack ConnectNot included
Dedicated supportNot included
Forward deployed engineerNot included
Monthly syncNot included
On-site supportNot included

Team

$50,000 per year

Includes 150k executions / month
Talk to sales

Limits

WorkflowsUnlimited
AgentsUnlimited
WorkspacesUnlimited
Included executionsTalk to sales for higher execution tiers150k/month

Deployment

Self-hosted (Docker Compose)Included
CloudIncluded
Air-gappedNot included
Kubernetes Helm chartNot included
Horizontal autoscalingNot included

Workflows

Webhooks and schedulesIncluded
TablesIncluded
Custom registryIncluded
FormsIncluded
Workspace Git syncIncluded
External secret storesNot included

Cases

CasesUnlimited
Case managementIncluded
Custom fieldsIncluded
Comments and attachmentsIncluded
Case copilotIncluded
TasksIncluded
TriggersIncluded
Metrics and durationsIncluded
Custom dropdownsIncluded
Correlation and sub-casesIncluded

Agents

Agent presetsIncluded
SkillsIncluded
50+ hosted MCP serversIncluded
SubagentsIncluded
Approvals and agent inboxIncluded
Workspace chatIncluded
Slack and Teams channelsIncluded
Agent mentions in cases and chatIncluded
Agent monitoringIncluded

Access

UsersUnlimited
Built-in rolesIncluded
Custom roles and groupsIncluded
Service accounts and API keysIncluded
REST API accessIncluded

Security

SSOIncluded
Organization audit logsIncluded
SCIMNot included

Air-gapped only

Private network tunnelsNot included
Tunneled MCPNot included
Tunneled agent tool callsNot included

Support

Community (Discord, GitHub)Included
Slack ConnectIncluded
Dedicated supportNot included
Forward deployed engineerNot included
Monthly syncNot included
On-site supportNot included

Enterprise

Custom

On-prem and air-gapped deployments
Talk to sales

Limits

WorkflowsUnlimited
AgentsUnlimited
WorkspacesUnlimited
Included executionsTalk to sales for higher execution tiers150k/month

Deployment

Self-hosted (Docker Compose)Included
CloudIncluded
Air-gappedIncluded
Kubernetes Helm chartIncluded
Horizontal autoscalingIncluded

Workflows

Webhooks and schedulesIncluded
TablesIncluded
Custom registryIncluded
FormsIncluded
Workspace Git syncIncluded
External secret storesIncluded

Cases

CasesUnlimited
Case managementIncluded
Custom fieldsIncluded
Comments and attachmentsIncluded
Case copilotIncluded
TasksIncluded
TriggersIncluded
Metrics and durationsIncluded
Custom dropdownsIncluded
Correlation and sub-casesIncluded

Agents

Agent presetsIncluded
SkillsIncluded
50+ hosted MCP serversIncluded
SubagentsIncluded
Approvals and agent inboxIncluded
Workspace chatIncluded
Slack and Teams channelsIncluded
Agent mentions in cases and chatIncluded
Agent monitoringIncluded

Access

UsersUnlimited
Built-in rolesIncluded
Custom roles and groupsIncluded
Service accounts and API keysIncluded
REST API accessIncluded

Security

SSOIncluded
Organization audit logsIncluded
SCIMIncluded

Air-gapped only

Private network tunnelsIncluded
Tunneled MCPIncluded
Tunneled agent tool callsIncluded

Support

Community (Discord, GitHub)Included
Slack ConnectIncluded
Dedicated supportIncluded
Forward deployed engineerIncluded
Monthly syncIncluded
On-site supportIncluded

Agent computers

Team and Enterprise only

Infrastructure to build and scale 24/7 security agents with custom VMs, memory, and self-learning. Priced by concurrency and agent minutes.

  • Bring your own agent Docker images

    Give agents the same CLI toolkit your analysts use

  • Long-running agents

    Dedicated Firecracker microVMs

  • Memory and dreaming
  • Self-improving skills

Team

Limits

Concurrent agents3
RAM per VMUp to 4 GiB
vCPU per VMUp to 4
BYO Docker imagesStarts at 1
Talk to sales

Enterprise

Limits

Concurrent agentsCustom
RAM per VMCustom
vCPU per VMCustom
BYO Docker imagesCustom
Talk to sales

Every platform fee includes 150k executions per month. Executions above that are never throttled. Contact sales for pricing on additional executions.

First 3 weeks

A forward deployed security engineer for your agent rollout.

Week 1

Connect your tools

  • Connect SIEM, EDR, MDM, CSPM, CNAPP, ticketing, email, and cloud systems.
  • Map real alerts, device findings, cloud findings, and runbooks into Tracecat.
  • Set tool policies for read actions, write actions, and sensitive actions.

Week 2

Build your first security agents

  • Build agents around your alert queues, findings, and runbooks.
  • Use agents to collect evidence, summarize findings, and prepare next actions.
  • Add approval gates where a human needs to decide.

Week 3+

Grow your agents in production

  • Trigger agents from schedules, webhooks, and cases.
  • Review tool calls, approvals, decisions, and run history.
  • Tune prompts, tool use, and policies from analyst feedback.

FAQ

Team pricing is a $50,000 platform fee per year, including 150k executions per month. Enterprise pricing is custom and depends on deployment. Contact sales for pricing on additional executions. Executions above 150k are never throttled. Agent computers are an add-on for Team and Enterprise, priced by concurrency and agent minutes. Open Source runs self-hosted without an SLA.

Book a demo

Talk to a Tracecat expert

Or self-host Tracecat open source today. Read the docs

Loved by security teams building with AI

CNLRER
+3

Security Engineer @ Depop

Tracecat copilot has changed my life. I describe an agentic workflow and it builds it for me. I never had time to build and experiment around my other responsibilities. Now I do.

Senior Security Engineer @ Neo Financial

A genuine thank you to the team. I built an end-to-end IoC enrichment pipeline with Claude and Tracecat MCP and created more value for our SOC in a day than I probably would have in weeks on my own. You're making my one-man SOC assignment possible.

Principal Threat Researcher @ Saronic

Tracecat is a cheat code for corporate security teams that want to build and own their own agentic future.