Tines vs Tracecat
Tines
tines.comTracecat
tracecat.comSide by side
| Figure | Tines | Tracecat |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 5 | 2 |
| Spec score · Runbook Automation Software | 8.2 (#2) | 7.3 (#13) |
| Spec score · Security Orchestration, Automation, and Response Software | 8.2 (#3) | 7.3 (#8) |
| Spec score · SOAR Software | 8.3 (#3) | 7.4 (#11) |
| Compliance | Tines states that it maintains SOC 2 Type II compliance and is audited annually. | Tracecat’s homepage states SOC 2 Type II and describes the product as air-gappable. |
| Deployment | Tines 3B can run self-hosted, on-premises, or in a hybrid deployment. | Tracecat offers managed cloud and self-hosted deployment, with Open Source deployable using Docker or AWS Fargate and Enterprise also listing a Kubernetes Helm chart. |
| Founded | Tines says its founders started building the company in 2018 after working as security operators. | 2024 |
| Headquarters | Tines lists European headquarters in Dublin and US headquarters in Boston. | New York City, New York, United States |
| Integrations | Tines says Stories can connect to any service that exposes an API, including internal tools and niche systems. | Tracecat advertises 500+ integrations across SIEM, EDR, MDM, identity providers, and other categories. |
Plans
Tines
- Free editionFree
- Business EditionPrice not published
- Enterprise EditionPrice not published
- Explore (Free edition)Free
- Paid editionsPriced on request
In their own words
Tines
Tines 3B is an AI-native platform for building, running and monitoring AI agents, apps and automated workflows. Builders can create processes with natural language, code, Git integration and branching, including conditional logic and webhook triggers. The platform supports connected LLM chat, AI skills and coding assistants such as Claude Code or Codex. Tines says it can connect to any API or Model Context Protocol service, rather than relying only on a fixed catalogue of integrations. Each workflow step runs in an isolated sandbox; connector credentials are supplied at runtime rather than exposed to builders or stored in code. Deployment options include self-hosted, on-premises and hybrid setups. Monitoring covers AI spend, access, duplicate work, workflow savings, frontend routes and package dependencies. The platform is intended for business-team builders, with Security and IT governing the work. Tines states it maintains SOC 2 Type II compliance and undergoes annual audits. Its Free edition costs nothing and permits three live workflows.
Tracecat
Tracecat is an open-source security automation platform for teams building AI-assisted cyber defense. Its product includes workflows, cases, tables, integrations, agent presets, skills, and a hosted MCP server catalog. Workflows can use loops, conditions, parallel subflows, and Python, Bash, or Ansible scripts. Tracecat advertises more than 500 integrations across areas including SIEM, EDR, MDM, and identity providers; its hosted MCP catalog lists 56 servers, including Elastic, Splunk, CrowdStrike Falcon, Wiz, Okta, Slack, Jira, GitHub, and AWS. Teams can use managed cloud or self-host. The Open Source edition can be deployed with Docker or AWS Fargate and is billed Free forever at free, with unlimited workflows, cases, and agents. Open Source includes case management, comments, attachments, and custom fields, but excludes human-in-the-loop tool approvals and advanced case features. Enterprise uses custom pricing and adds features including tool approvals, advanced cases, and 24/7 Slack and email support.