Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | ServiceNow Security Incident Response by ServiceNow View product | Kroll Incident Response by Kroll View product |
|---|---|---|
| Overview | ||
| What it is | ServiceNow Security Incident Response offers automated SOAR playbooks. Use it for phishing investigation automation. See Incident Response alternatives. | Kroll Incident Response: digital forensics investigation. Built for crisis risk communication and data breach digital forensics. Compare Incident Response alternatives. |
| Product type | Security Incident Response (SIR) & SOAR Platform | Global Incident Response, Forensic Investigation & Cyber Retainer |
| Best for | Financial Services, Healthcare, Government, Energy, Global Enterprise, Banking, Government & Defense, Critical Infrastructure, Retail | Financial Services, Healthcare, Legal, Government, Enterprise IT, Energy |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: no |
| Deployment | ||
| Deployment options | SaaSCloud | Cloud |
| Deployment details | Cloud SaaS / Dedicated Now Platform Instance; Cloud SaaS; Enterprise Dedicated Instance | Professional Services; Incident Response Retainer; Professional Incident Response Services; Retainer-Based SLA |
| Data residency | Global datacenter pairs; Sovereign cloud regions | Global Operations (North America, EMEA, APAC, Latin America) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: no |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: yes | Mobile app: no |
| Supported platforms | Enterprise IT AssetsCloud InfrastructureCorporate EndpointsIdentity | Global Enterprise NetworksMulti-Cloud WorkloadsCorporate Endpoints |
| Compliance | NIST SP 800-61ISO 27035SOC 2 Type IIGDPRHIPAA | ISO 27001SOC 2GDPRHIPAAPCI-DSS QIRAForensic Standards |
| Integrations & coverage | ||
| Integrations | Microsoft SentinelSplunkCrowdStrikeSentinelOnePalo Alto Networks | CrowdStrikeMicrosoft SentinelSplunkEnCaseFTKAWSAzure |
| Industries | Financial ServicesHealthcareGovernmentEnergyGlobal EnterpriseBanking+3 more | Financial ServicesHealthcareLegalGovernmentEnterprise ITEnergy |
| Regions | Global ServiceNow cloud datacenters | Global |
| Vendor | ||
| Company | ServiceNow | Kroll |
| Headquarters | Santa Clara, California, USA | New York, New York, USA |
| Company size | 25,000+ | 6,000+ |
| Founded | 2004 | 1972 |
Overview
What it is
ServiceNow Security Incident Response
ServiceNow Security Incident Response offers automated SOAR playbooks. Use it for phishing investigation automation. See Incident Response alternatives.Kroll Incident Response
Kroll Incident Response: digital forensics investigation. Built for crisis risk communication and data breach digital forensics. Compare Incident Response alternatives.Product type
ServiceNow Security Incident Response
Security Incident Response (SIR) & SOAR PlatformKroll Incident Response
Global Incident Response, Forensic Investigation & Cyber RetainerBest for
ServiceNow Security Incident Response
Financial Services, Healthcare, Government, Energy, Global Enterprise, Banking, Government & Defense, Critical Infrastructure, RetailKroll Incident Response
Financial Services, Healthcare, Legal, Government, Enterprise IT, EnergyPricing
Pricing model
ServiceNow Security Incident Response
Contact VendorKroll Incident Response
Contact VendorFree trial
ServiceNow Security Incident Response
Free trial: yesKroll Incident Response
Free trial: noDeployment
Deployment options
ServiceNow Security Incident Response
Kroll Incident Response
Deployment details
ServiceNow Security Incident Response
Cloud SaaS / Dedicated Now Platform Instance; Cloud SaaS; Enterprise Dedicated InstanceKroll Incident Response
Professional Services; Incident Response Retainer; Professional Incident Response Services; Retainer-Based SLAData residency
ServiceNow Security Incident Response
Global datacenter pairs; Sovereign cloud regionsKroll Incident Response
Global Operations (North America, EMEA, APAC, Latin America)Key features
What it offers
ServiceNow Security Incident Response
- Automated incident triage
- Business impact scoring via CMDB
- Automated SOAR playbooks
- Threat intelligence lookup
- Cross-team containment orchestration
- Phishing investigation automation
- Ransomware cross-team containment
- SOC workflow orchestration
Kroll Incident Response
- 24/7 global emergency incident response
- Digital forensics investigation
- Ransomware negotiation and containment
- Court-admissible evidence reporting
- Emergency ransomware containment
- Data breach digital forensics
- Business email compromise investigation
- Crisis risk communication
Platform & access
API access
ServiceNow Security Incident Response
API access: yesKroll Incident Response
API access: noSingle sign-on (SSO)
ServiceNow Security Incident Response
SSO: yesKroll Incident Response
SSO: noRole-based access (RBAC)
ServiceNow Security Incident Response
RBAC: yesKroll Incident Response
RBAC: noMulti-tenant
ServiceNow Security Incident Response
Multi-tenant: yesKroll Incident Response
Multi-tenant: noMobile app
ServiceNow Security Incident Response
Mobile app: yesKroll Incident Response
Mobile app: noSupported platforms
ServiceNow Security Incident Response
Kroll Incident Response
Compliance
ServiceNow Security Incident Response
Kroll Incident Response
Integrations & coverage
Integrations
ServiceNow Security Incident Response
Kroll Incident Response
Industries
ServiceNow Security Incident Response
Kroll Incident Response
Regions
ServiceNow Security Incident Response
Kroll Incident Response
Vendor
Company
ServiceNow Security Incident Response
ServiceNowKroll Incident Response
KrollHeadquarters
ServiceNow Security Incident Response
Santa Clara, California, USAKroll Incident Response
New York, New York, USACompany size
ServiceNow Security Incident Response
25,000+Kroll Incident Response
6,000+Founded
ServiceNow Security Incident Response
2004Kroll Incident Response
1972