Splunk SOAR vs Tracecat

Splunk SOAR8.3Visit Tracecat6.8Visit

Higher score Splunk SOAR #3 in SOAR Software 8.3/10 Free plan Free plan✓ 4 of 4 features Visit Splunk SOAR

vs

Tracecat #8 in SOAR Software 6.8/10 Free plan Free plan✓ 4 of 4 features Visit Tracecat

• Splunk SOAR fits best

  Budget-conscious teams needing established SOAR

• Tracecat fits best

  Developers wanting open-source AI-assisted SOAR

Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. How we rank.

Side by side

Feature	Splunk SOAR 8.3/10 Visit ↗	Tracecat 6.8/10 Visit ↗
At a glance
Editor score	8.3	6.8
Ranking	#3 in SOAR Software	#8 in SOAR Software
Best for	Budget-conscious teams needing established SOAR	Developers wanting open-source AI-assisted SOAR
Pricing model	Free plan + paid	Free plan + paid
Starting price	Not published	Not published
Free plan	✓	✓
Free trial	—	—
Deployment	Cloud, Self-hosted	Cloud, Self-hosted
Platforms	Web	Web
Support	Email, Phone, Tickets, Community, Docs	Email, Live chat, Community, Docs · 24/7
Compliance	SOC 2, ISO 27001, SSO/SAML	SOC 2
Integrations	350+ integrations	56+ integrations
Built for	Mid-market, Enterprise	Small business, Mid-market, Enterprise
Features Splunk SOAR 4/4 · Tracecat 4/4
Playbook automation	✓	✓
Alert enrichment	✓	✓
Threat intel actions	✓	✓
Case management	✓	✓
Specs
Deployment model	Hybrid	Not published
Published integrations	350 (best)	56
Our review
Pros	Free Community Edition includes over 100 pre-built playbooks 2,800+ automated actions connect 300+ third-party tools Supports cloud, on-premises and hybrid deployments	Unlimited workflows, cases, and agents in the Open Source plan AI agents, Python actions, approvals, and Git-based prompt versioning Integrates with major security, cloud, identity, and observability tools
Cons	Free edition is limited to 100 actions per day Only web is listed as a supported platform The product is proprietary rather than open source	Enterprise pricing is custom rather than listed Advanced RBAC, SCIM, and 24/7 support require Enterprise Founded in 2024, with less maturity evidence than established SOAR products
Our verdict	Splunk SOAR is a security orchestration, automation and response platform for security operations centers. It connects security and IT tools, automates triage and response workflows, enriches investigations with threat intelligence, and… Read the review →	Tracecat is an open-source security orchestration, automation, and response platform for security teams and developers. It combines AI agents with deterministic workflows, security case management, alert triage, enrichment,… Read the review →

Strengths and trade-offs

• Splunk SOAR — where it wins

  • Free Community Edition includes over 100 pre-built playbooks
  • 2,800+ automated actions connect 300+ third-party tools
  • Supports cloud, on-premises and hybrid deployments

  Where it doesn't

  • Free edition is limited to 100 actions per day
  • Only web is listed as a supported platform
  • The product is proprietary rather than open source

• Tracecat — where it wins

  • Unlimited workflows, cases, and agents in the Open Source plan
  • AI agents, Python actions, approvals, and Git-based prompt versioning
  • Integrates with major security, cloud, identity, and observability tools

  Where it doesn't

  • Enterprise pricing is custom rather than listed
  • Advanced RBAC, SCIM, and 24/7 support require Enterprise
  • Founded in 2024, with less maturity evidence than established SOAR products

• Splunk SOAR8.3/10 · Free plan

  A strong-value SOAR platform with broad automation, case management and a free edition.

  Visit Splunk SOARFull verdict →
• Tracecat6.8/10 · Free plan

  A developer-focused SOAR combining AI agents, playbooks, cases, and open-source deployment.

  Visit TracecatFull verdict →