Jibble vs Tracecat

Tracecat is at 1.0 RC, crossing into production-grade security operations on the back of its most feature-dense release period. The beta.52 batch added agent @mentions and slash commands in case comments, full case version history with restore, rich text comments, OTel tracing, and 15+ enterprise integrations including Databricks, Snowflake, Splunk via MCP, Recorded Future, and 1Password. The 1.0 RC opens the agent presets, skills, and MCP catalog connectors as open source, and adds built-in support for Ollama, vLLM, LiteLLM, and OpenRouter for self-hosted LLM deployments.

Tracecat is converging on a complete, air-gapped-capable security operations platform across three layers: automation (workflows), case management (now with collaboration and version history), and AI agents (open-sourced and self-hostable). The self-hosted LLM providers move signals a hard push toward security teams who cannot send data to cloud APIs — a large segment of enterprise security buyers. Integration coverage is expanding rapidly across SIEM, MDM, HRIS, and threat intelligence tooling.

The 1.0 stable release is the immediate next step based on the rc.1 designation. Expect the self-hosted LLM pathway to deepen further — additional local model support and on-prem deployment hardening — given that data residency is the primary concern for the enterprise security segment this release is targeting.