Tracecat is an open-source Python-based security automation platform providing agents, workflows, and integrations, with Temporal-based durable executions and NSJail sandboxing. It offers a low-code workflow builder, MCP integration, and over 100 connectors.
Collecting history — the radar snapshots this repo daily. The trend line appears after 3 days of data (1 so far).
What it is
Tracecat is an open-source security automation platform for teams and AI agents. It includes agents, workflows, case management, lookup tables, and integration capabilities for various tools. The project uses Python with FastAPI, SQLAlchemy, and Pydantic, and the frontend is Next.js with TypeScript.
How it works
Key components include:
- Agents: build custom agents with prompts, tools, and chat
- Workflows: low-code builder with complex control flow and durable execution via Temporal
- Integrations: over 100+ pre-built connectors via HTTP, SMTP, gRPC, OAuth, and more
- MCP: Tracecat MCP converts prompts to automations; MCP client connects custom agents to MCP servers
- Custom registry: turn custom Python scripts into agent tools and workflow steps
The system runs sandboxed code using nsjail and leverages Temporal for reliability and scale. It supports deployment options including self-hosting with Docker, AWS Fargate, or Kubernetes Helm.
Getting started
- The README mentions deployment options and a license, but specific installation commands are not included in the provided text. Please refer to the repository for exact setup steps and prerequisites.
Recent releases
Latest release: 1.0.0-beta.51-rc.12 (2026-08-03)
- Added AI security architecture (#3158)
- Terminate action process groups (#3159)
- Overhaul security, isolation, and audit log documentation (#3166)
- Patch dependabot alerts (#3192)
Earlier releases include 1.0.0-beta.51-rc.11 (2026-07-28) and 1.0.0-beta.51-rc.10 (2026-07-23) with related security and integration updates.
Traction
Stars: 3756 Forks: 397 Open issues: 136
Behind the repo
Tracecat is developed as an open-source project under AGPL-3.0. Enterprise features and hosted options exist, including managed Cloud and self-hosted deployments; see LICENSE and related documentation in the repo for license scope and exceptions.
Caveats
License: AGPL-3.0 Created: 2024-02-27 Last push: 2026-08-04 Open issues: 136






