Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Incident Insight is a cloud-hosted software solution designed for incident investigation and root-cause analysis, allowing organizations to visually chart, assess, and derive lessons from previous incidents to implement preventive measures against future occurrences. This tool streamlines and speeds up the conventional process of incident investigation by providing features like drag-and-drop diagram creation, customizable metadata, and user-friendly tools for constructing diagrams that dissect various elements such as threats, events, barriers, causes, and root causes, thereby offering users a comprehensive understanding of what transpired and the reasons behind it. Teams can document barrier failures, incorporate supporting documents, and attach images or files, as well as analyze and compare data across different diagrams. Additionally, it facilitates the sharing of findings through live workspace links, downloadable images, or by exporting reports in Word or Excel formats, making it ideal for presentations and documentation. With its cloud-based nature, Incident Insight promotes seamless collaboration, allowing multiple team members to engage and cooperate from any location. This flexibility enhances teamwork and ultimately leads to more robust incident management practices.
Description
Rapid7 Incident Command is a cloud-native, AI-powered SIEM built to replace legacy security monitoring tools. It unifies attack surface visibility, telemetry, and risk context to give security teams a clear, real-time understanding of threats. Incident Command applies advanced behavioral analytics and AI-driven triage to reduce false positives and prioritize critical incidents. The platform enriches alerts with vulnerability data, exposure scoring, and threat intelligence so analysts know exactly what to address first. Natural language search enables rapid investigation across massive volumes of security data. Incident Command correlates activity across users, endpoints, applications, and networks to reveal full attack paths. Automated SOAR workflows allow teams to isolate systems, revoke credentials, and contain threats quickly. Integrated digital forensics and incident response capabilities support deeper investigations. The platform is designed to scale across complex hybrid environments. Rapid7 Incident Command helps SOC teams detect faster, respond smarter, and operate more efficiently.
API Access
Has API
API Access
Has API
Integrations
Armis Centrix
Carbon Black EDR
Cisco Duo
CnSight
CyCognito
Imperva CDN
Imperva DDoS Protection
Imperva WAF
Medigate
Microsoft Power BI
Integrations
Armis Centrix
Carbon Black EDR
Cisco Duo
CnSight
CyCognito
Imperva CDN
Imperva DDoS Protection
Imperva WAF
Medigate
Microsoft Power BI
Pricing Details
No price information available.
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Salus Suite
Country
United States
Website
incident-insight.com
Vendor Details
Company Name
Rapid7
Founded
2000
Country
United States
Website
www.rapid7.com/products/siem/
Product Features
Incident Response
Attack Behavior Analytics
Automated Remediation
Compliance Reporting
Forensic Data Retention
Incident Alerting
Incident Database
Incident Logs
Incident Reporting
Privacy Breach Reporting
SIEM Data Ingestion / Correlation
SLA Tracking / Management
Security Orchestration
Threat Intelligence
Timeline Analysis
Workflow Automation
Workflow Management
Product Features
Endpoint Detection and Response (EDR)
Behavioral Analytics
Blacklisting/Whitelisting
Continuous Monitoring
Malware/Anomaly Detection
Prioritization
Remediation Management
Root Cause Analysis
Incident Response
Attack Behavior Analytics
Automated Remediation
Compliance Reporting
Forensic Data Retention
Incident Alerting
Incident Database
Incident Logs
Incident Reporting
Privacy Breach Reporting
SIEM Data Ingestion / Correlation
SLA Tracking / Management
Security Orchestration
Threat Intelligence
Timeline Analysis
Workflow Automation
Workflow Management
Network Traffic Analysis (NTA)
Anomalous Behavior Detection
High Bandwidth Usage Monitoring
Historical Behavior Data
Identify High Network Traffic Sources
Network Transaction Visibility
Stream Data to IDR or Data Lake
Traffic Decryption
SIEM
Application Security
Behavioral Analytics
Compliance Reporting
Endpoint Management
File Integrity Monitoring
Forensic Analysis
Log Management
Network Monitoring
Real Time Monitoring
Threat Intelligence
User Activity Monitoring