Incident Response & Digital Forensics

Incident Response Services & Software: IR Options Compared

Know who to call and what to run when a breach hits. Compare incident response services and IR software for retainers, forensics, playbooks and response time.

22 vendors28 products

See the Top 20 ranking

Incident Response vendors 22

Companies that offer Incident Response.

Featured vendors

StrangeBee logo

StrangeBee

Paris, France

Featured

Get the full picture on StrangeBee: Cortex, its focus on security incident response and case management with TheHive and Cortex, and the alternatives buyers compare most.

Mandiant logo

Mandiant

Reston, Virginia, USA

Featured

What does Mandiant do? It focuses on incident response. See Mandiant Red Team and Mandiant Incident Response, deployment options and leading alternatives.

Your company hereReach buyers browsing Incident ResponseBecome a sponsor

These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.

Elastic logo

Elastic

Mountain View, California, USA

Expel logo

Expel

Herndon, Virginia, USA

IBM logo

IBM

Armonk, New York, USA

Kroll logo

Kroll

New York, New York, USA

Optiv logo

Optiv

Denver, Colorado, USA

Rapid7 logo

Rapid7

Boston, Massachusetts, USA

Tanium logo

Tanium

Kirkland, Washington, USA

Incident Response products 28

Open a product to see its features, pricing and reviews, or compare it with others.

Cado Security logo

Cado Response

Evaluating Cado Response? See how this Cloud Security tool handles memory analysis and MITRE ATT&CK threat mapping, where it fits best and which alternatives to compare.

Cloud SecurityView details
StrangeBee logo

Cortex

Looking for Security Operations software? Cortex by StrangeBee provides REST API architecture for automated observable analysis. Compare features and alternatives.

Security OperationsView details
D3 Security logo

D3 SOAR

D3 SOAR from D3 Security focuses on security incident triage. Key capabilities: KPI dashboards and incident audit tracking. Compare it with the leading SOAR alternatives.

Security OperationsView details
Elastic logo

Elastic Attack Discovery

What does Elastic Attack Discovery do? It covers MITRE ATT&CK mapping. See typical use cases, cloud or hybrid deployment and how it compares to rivals.

Security OperationsView details
IBM logo

IBM X-Force

byIBM

IBM X-Force is a threat intelligence services used for research. Highlights include incident response. Compare it with other Threat Intelligence tools.

Managed Security ServicesView details
Kroll logo

Kroll Incident Response

Kroll Incident Response: digital forensics investigation. Built for crisis risk communication and data breach digital forensics. Compare Incident Response alternatives.

Governance, Risk & ComplianceView details
LogRhythm logo

LogRhythm SmartResponse

LogRhythm SmartResponse is an automated incident remediation & security automation plugin for automated endpoint quarantine. See features and SOAR alternatives.

Security OperationsView details
Mandiant logo

Mandiant Incident Response

Mandiant Incident Response: rapid crisis breach containment and deep digital forensics. Built for active breach investigation. Compare Incident Response alternatives.

Threat IntelligenceView details
Mandiant logo

Mandiant Red Team

Mandiant Red Team from Mandiant focuses on adversary emulation. Key capabilities: purple-team debriefs. Compare it with the leading Red Teaming alternatives.

Vulnerability & Exposure ManagementView details
Optiv logo

Optiv Incident Response

Get the facts on Optiv Incident Response: memory analysis. Built for Breach Investigation. Compare it with other Incident Response options before you decide.

Managed Security ServicesView details
Rapid7 logo

Rapid7 Incident Response

Evaluating Rapid7 Incident Response? See how this Incident Response tool handles incident retainers, where it fits best and which alternatives to compare.

Security OperationsView details
Shuffle logo

Shuffle Community Edition

Get the facts on Shuffle Community Edition: OpenAPI app generator. Built for open-source SOC automation. Compare it with other SOAR options before you decide.

Security OperationsView details
Tanium logo

Tanium Threat Response

See what Tanium Threat Response offers: real-time EDR. It is built for real-time EDR, supports cloud or on-premises deployment and competes with other EDR tools.

Endpoint SecurityView details
StrangeBee logo

TheHive

TheHive by StrangeBee: alert triage and audit trails. Ideal for alert investigation. Deployment: self-hosted. See how it compares with top Incident Response alternatives.

Security OperationsView details
Showing page 1 of 2 (28 products)
← PreviousNext →

Tell us your company and website, and we'll send the slots and details.

By sending this you agree to our Privacy Policy and Terms.