Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Incident Insight is a cloud-hosted software solution designed for incident investigation and root-cause analysis, allowing organizations to visually chart, assess, and derive lessons from previous incidents to implement preventive measures against future occurrences. This tool streamlines and speeds up the conventional process of incident investigation by providing features like drag-and-drop diagram creation, customizable metadata, and user-friendly tools for constructing diagrams that dissect various elements such as threats, events, barriers, causes, and root causes, thereby offering users a comprehensive understanding of what transpired and the reasons behind it. Teams can document barrier failures, incorporate supporting documents, and attach images or files, as well as analyze and compare data across different diagrams. Additionally, it facilitates the sharing of findings through live workspace links, downloadable images, or by exporting reports in Word or Excel formats, making it ideal for presentations and documentation. With its cloud-based nature, Incident Insight promotes seamless collaboration, allowing multiple team members to engage and cooperate from any location. This flexibility enhances teamwork and ultimately leads to more robust incident management practices.
Description
Rapid7 Incident Command is a cloud-native, AI-powered SIEM built to replace legacy security monitoring tools. It unifies attack surface visibility, telemetry, and risk context to give security teams a clear, real-time understanding of threats. Incident Command applies advanced behavioral analytics and AI-driven triage to reduce false positives and prioritize critical incidents. The platform enriches alerts with vulnerability data, exposure scoring, and threat intelligence so analysts know exactly what to address first. Natural language search enables rapid investigation across massive volumes of security data. Incident Command correlates activity across users, endpoints, applications, and networks to reveal full attack paths. Automated SOAR workflows allow teams to isolate systems, revoke credentials, and contain threats quickly. Integrated digital forensics and incident response capabilities support deeper investigations. The platform is designed to scale across complex hybrid environments. Rapid7 Incident Command helps SOC teams detect faster, respond smarter, and operate more efficiently.
API Access
Has API
No
API Access
Has API
No
Integrations
AWS AppFabric
No
Chronicle SOAR
No
CnSight
No
CyberArk Workforce Identity
No
Cylera Platform
No
Delinea Cloud Access Controller
No
IBM Security Randori Recon
No
Imperva WAF
No
Joe Sandbox
No
Microsoft Excel
Yes
Integrations
AWS AppFabric
Yes
Chronicle SOAR
Yes
CnSight
Yes
CyberArk Workforce Identity
Yes
Cylera Platform
Yes
Delinea Cloud Access Controller
Yes
IBM Security Randori Recon
Yes
Imperva WAF
Yes
Joe Sandbox
Yes
Microsoft Excel
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
Yes
Vendor Details
Company Name
Salus Suite
Country
United States
Website
incident-insight.com
Vendor Details
Company Name
Rapid7
Founded
2000
Country
United States
Website
www.rapid7.com/products/siem/
Product Features
Incident Response
Attack Behavior Analytics
No
Automated Remediation
No
Compliance Reporting
No
Forensic Data Retention
No
Incident Alerting
No
Incident Database
No
Incident Logs
No
Incident Reporting
No
Privacy Breach Reporting
No
SIEM Data Ingestion / Correlation
No
SLA Tracking / Management
No
Security Orchestration
No
Threat Intelligence
No
Timeline Analysis
No
Workflow Automation
No
Workflow Management
No
Product Features
Endpoint Detection and Response (EDR)
Behavioral Analytics
Yes
Blacklisting/Whitelisting
No
Continuous Monitoring
No
Malware/Anomaly Detection
Yes
Prioritization
No
Remediation Management
Yes
Root Cause Analysis
No
Incident Response
Attack Behavior Analytics
No
Automated Remediation
No
Compliance Reporting
No
Forensic Data Retention
No
Incident Alerting
No
Incident Database
No
Incident Logs
No
Incident Reporting
No
Privacy Breach Reporting
No
SIEM Data Ingestion / Correlation
No
SLA Tracking / Management
No
Security Orchestration
No
Threat Intelligence
No
Timeline Analysis
No
Workflow Automation
No
Workflow Management
No
Network Traffic Analysis (NTA)
Anomalous Behavior Detection
No
High Bandwidth Usage Monitoring
No
Historical Behavior Data
No
Identify High Network Traffic Sources
No
Network Transaction Visibility
No
Stream Data to IDR or Data Lake
No
Traffic Decryption
No
SIEM
Application Security
No
Behavioral Analytics
Yes
Compliance Reporting
No
Endpoint Management
Yes
File Integrity Monitoring
No
Forensic Analysis
No
Log Management
Yes
Network Monitoring
Yes
Real Time Monitoring
Yes
Threat Intelligence
Yes
User Activity Monitoring
Yes