Tracecat
Security and privacy
security orchestration and alert automation
SHOW HN2024
264points
65comments
#276of 3,515 in 2024
Top 8%of 2024 by points
How HN took it
CuriousMostly questions and neutral comments
5 positive, 19 neutral or asking, 1 mixed, 10 critical, out of 35 comments about the project. Thread score +0.04.
Privacy: 0 for, 6 againstIdea: 4 for, 1 againstExecution: 0 for, 2 againstPricing: 0 for, 1 againstDocs: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Cheaper open-source alternative to Splunk SOAR is welcome
From 3 comments
Please put a stake in the heart of Palo Alto's XSOAR SOAR. Wishing you much success. Edit: Keep in mind, the folks who operate this are typically not engineers. They are security…
toomuchtodo on HNThis is awesome; we need this kind of alternative to overpriced software like Splunk. We built and open-sourced Quickwit to see this kind of tool built on top of it. We will…
francoismassot on HNI don't know why so many people here are shitting on you guys. It is an impressive demo and launch and a wide-open market. I'm rooting for you, guys. There's an easy opening even…
rosslazer on HN
Objections
Open source lacks support; security teams dislike self-hosting
From 1 comment
Kudos on the effort for sure. Your biggest challenge is having good integrations for literally everything. Second big challenge: companies that will use open source are a rarity.…
badrabbit on HN
Target market and buyer understanding questioned; ITSM teams may be the buyer
From 1 comment
These are exciting times in the cybersecurity industry with the recent growth of open-source security tools (osquery, Fleet, Wazuh, etc.). Anyway, I'm skeptical about the…
tomashertus on HN
Security posture of a startup selling security tools is a concern
From 2 comments
You’re not measuring against Splunk, you should be measuring against Tines. And tines is def broader than fortune 10, they sell the heck out to startups, so I think you’ve got…
dogman144 on HNThis was how Lastpass was exploited +/- details, lot of write-ups on this. Devops eng ran a personal unpatched Plex server, threat actor came in via home network/plex, pivoted to…
dogman144 on HN
Integrations are lacking
From 2 comments
Kudos on the effort for sure. Your biggest challenge is having good integrations for literally everything. Second big challenge: companies that will use open source are a rarity.…
badrabbit on HNNeat! Another FOSS SOAR platform. Quick read through built-in integrations. Any support for Elastic both SIEM and EDR? And do you all have like an MSP program? Assuming not, but…
ThaDood on HN
Requests
Add integrations with Elastic, CrowdStrike and Microsoft Defender
From 2 comments
Neat! Another FOSS SOAR platform. Quick read through built-in integrations. Any support for Elastic both SIEM and EDR? And do you all have like an MSP program? Assuming not, but…
ThaDood on HNWill post an updated demo with the output and share it here later today! But here is what one response looks like: "Thank you for your report. the AI labelled this email as…
neochris on HN
Add case management and ticketing integration
From 2 comments
Kudos on the effort for sure. Your biggest challenge is having good integrations for literally everything. Second big challenge: companies that will use open source are a rarity.…
badrabbit on HNThese are exciting times in the cybersecurity industry with the recent growth of open-source security tools (osquery, Fleet, Wazuh, etc.). Anyway, I'm skeptical about the…
tomashertus on HN
Move feedback off Discord
From 1 comment
Neat! Another FOSS SOAR platform. Quick read through built-in integrations. Any support for Elastic both SIEM and EDR? And do you all have like an MSP program? Assuming not, but…
ThaDood on HN
Fix UI issues such as deleting nodes and lag
From 2 comments
I couldn't find a way to delete nodes after I placed some. It also seemed laggy in the sense that when I drag and dropped a node from the left to the scene it took 2-3 seconds at…
Nathanba on HNOh ok that works, for some reason that didn't even occur to me. I kept trying to press the Delete key.
Nathanba on HN
Questions
What is the business model and pricing?
From 2 comments
Congrats! What is the business model? Also, I see that the license is permissive which is great but how do you protect yourself from other companies hosting your solution and…
yevpats on HNWhat is your plan for monetization with this? Open source core with the hosted platform being paid? Or specific features being paid? Any price ranges in mind? I am tired of all…
leetrout on HN
How will the project protect against competing hosted forks?
From 1 comment
Congrats! What is the business model? Also, I see that the license is permissive which is great but how do you protect yourself from other companies hosting your solution and…
yevpats on HN
Is there an MSP program?
From 2 comments
Neat! Another FOSS SOAR platform. Quick read through built-in integrations. Any support for Elastic both SIEM and EDR? And do you all have like an MSP program? Assuming not, but…
ThaDood on HNAs for the MSP program, absolutely 100% yes. Would love to hear your use-case / pain points regarding existing SOARs (both oss and close sourced). Shuffle is the OG of FOSS…
neochris on HN
What security program does the team run?
From 2 comments
You’re not measuring against Splunk, you should be measuring against Tines. And tines is def broader than fortune 10, they sell the heck out to startups, so I think you’ve got…
dogman144 on HNI wouldn’t recommend panther or a SIEM for small startups. D&R is a bit less important for startups beyond some python scripts piping in the boilerplate alerts via API that…
dogman144 on HN
Alternatives named
Splunk SOAR
From 2 comments
Please put a stake in the heart of Palo Alto's XSOAR SOAR. Wishing you much success. Edit: Keep in mind, the folks who operate this are typically not engineers. They are security…
toomuchtodo on HNKudos on the effort for sure. Your biggest challenge is having good integrations for literally everything. Second big challenge: companies that will use open source are a rarity.…
badrabbit on HN
Palo Alto XSOAR
From 1 comment
Please put a stake in the heart of Palo Alto's XSOAR SOAR. Wishing you much success. Edit: Keep in mind, the folks who operate this are typically not engineers. They are security…
toomuchtodo on HN
Tines
From 2 comments
You’re not measuring against Splunk, you should be measuring against Tines. And tines is def broader than fortune 10, they sell the heck out to startups, so I think you’ve got…
dogman144 on HN(I work at Tines) We're flattered by the mention & imitation ;-) But seriously, congrats on shipping, and for bringing some new ideas into the fold. One point of clarification:…
1as on HN
Shuffle
From 1 comment
As for the MSP program, absolutely 100% yes. Would love to hear your use-case / pain points regarding existing SOARs (both oss and close sourced). Shuffle is the OG of FOSS…
neochris on HN