The Top 18 Incident Response Tools & Top 10 Incident Response Platforms

1. Better Uptime

Better Uptime is an incident response tool that’s well-suited for small and medium-sized businesses. Following a quick setup, you can get threat alerts via email, phone, or a Slack plugin. Standard network tools like uptime and ping are integrated into the app. Plugins are available for Microsoft Teams, Heroku, Amazon Web Services (AWS), and many other enterprise apps. Better Update offers a free version and competitive pricing for organizations of all sizes.

2. Check Point Incident Response

Check Point is an established cybersecurity vendor known for its VPN and firewall solutions. Check Point Incident Response offers a wide range of incident management and response tools, including network traffic analysis, threat analysis, and email scanning. You can request a demo from the Check Point Incident Response website.

3. CybriantXDR

CybriantXDR is a threat remediation and incident response tool with SIEM capabilities. Cybriant created this tool with mid-size businesses in mind, but it’s equally well-suited for small organizations. Visit the company’s website for pricing and more information.

4. Cynet

Cynet’s tools are promoted as “automation first” and promise to reduce manual incident response processes. They also offer customizable pricing for up to 5,000 endpoints. Small businesses can take advantage of per-endpoint pricing for a cost-effective solution. While pricing is not listed on the Cynet website, you can request a demo.

5. DeCYFIR

The cloud-based tool DeCYFIR from CYFIRMA provides threat management and incident response for companies of all sizes. It uses predictive analytics to provide intelligent protection. While their solution is listed as an “External Threat Landscape Management Platform,” it’s also an easy-to-use tool for everyone from managers to IT teams. Contact CYFIRMA for pricing and more information.

6. Digital Risk Protection

Digital Risk Protection has data collection and log analysis tools, making it an easy-to-use incident response tool. It’s primarily aimed at organizations looking to protect their brands from repetitional damage or intellectual property theft. However, it’s also a flexible tool, thanks to how easily it integrates with incident response platforms via APIs. You can request a demo from Group IB.

7. FireEye Mandiant

Mandiant is a threat intelligence and incident response tool that combines data science and standard cybersecurity practices. The tool provides targeted protection for each organization. FireEye has over 15 years of experience in the field, bringing veteran expertise to this tool. They offer a free version to get you started with Mandiant.

8. Kaspersky Small Office Security

Kaspersky is a respected name in the field of cybersecurity. They conduct cybersecurity research via their Kaspersky Labs operation and make apps for companies of all sizes. That includes their small business offering, which is a cost-effective but incident response tool. Organizations without a dedicated IT team can benefit from this cloud app for as little as $184 per month.

9. LogRhythm

LogRhythm is a SIEM tool that’s available as a cloud app or an on-premise appliance. It offers log scanning, threat analysis, and incident response workflows. The LogRhythm SIEM is one of the best incident response tools for hybrid environments, as it can scan the logs of a wide range of apps and systems on-premises or in the cloud. Contact LogRhythm for pricing information.

10. ManageEngine EventLog Analyzer

The EventLog Analyzer from ManageEngine provides advanced log analysis tools that work well as an incident response tool. It’s particularly good at alerting people to unauthorized access and compromised servers. Pricing is only available after requesting a quote, but you can download the tool from ManageEngine or request a cloud-based demo.

11. Rapid7 InsightIDR

Rapid7 InsightIDR is a threat detection and incident response tool. This cloud app offers many SIEM functions, such as log search, endpoint protection, and user behavior analytics. Pricing starts at $3.82 per monitored asset per month, and you can request a demo from the Rapid7 website.

12. Secureworks Taegis

Secureworks offers this incident response software built on the Taegis analytics platform. Secureworks Taegis combines world-class data collection and analytics techniques with machine learning algorithms to identify previously unknown threats. It also offers extended detection and response (XDR) capabilities. A demo of this SaaS incident response tool is available from the Secureworks website.

13. Splunk

Splunk is a well-known name in the world of cybersecurity thanks to its venerable log analysis tool. With the addition of AI and machine learning techniques, Splunk offers modern and intelligent threat detection. A free version is available, along with paid apps aimed at the enterprise security market.

14. Sumo Logic

Sumo Logic is a cloud-based cybersecurity analytics tool that runs independently or as part of a larger incident response platform. Sumo Logic uses machine learning algorithms for advanced threat detection. The tool can even automate incident response workflows in many cases. Sumo Logic pricing is based on the amount of network traffic analyzed per day; a free version is also available.

15. ThreatConnect

ThreatConnect is a full-featured, AI-powered incident response tool. It collects information on known cyber threats and adapts to an organization’s infrastructure. ThreatConnect allows you to automate incident response in many situations. A demo is available on the ThreatConnect website.

16. ThreatFusion

ThreatFusion is a real-time threat protection and incident response tool with AI-powered analytics. It’s the flagship app from cybersecurity firm CTI4SOC. A free version is available for smaller organizations, with pricing of other versions starting at $9,750 per year.

17. Varonis DatAlert

Varonis DatAlert provides alerts and analytics related to an organization’s users, infrastructure, and data usage. It’s also an incident response tool that detects and even responds to suspicious activities. Varnish says that it collects billions of data points to help DatAlert understand the threat landscape. Pricing is unavailable on the Varonis website, but you can request a demo.

18. WildFire Savaif

Savaif is a comprehensive threat protection tool from Wildfire Security. Savaif prevents malware and other threats from entering an organization’s network or systems. It’s also easy to get up and running, as installation should take less than one minute. WildFire offers subscription plans; visit their website for more information.