Get the full picture on StrangeBee: Cortex, its focus on security incident response and case management with TheHive and Cortex, and the alternatives buyers compare most.
Incident Response & Digital Forensics
Incident Response Services & Software: IR Options Compared
Know who to call and what to run when a breach hits. Compare incident response services and IR software for retainers, forensics, playbooks and response time.
22 vendors28 products
See the Top 20 rankingIncident Response vendors 22
Companies that offer Incident Response.
Featured vendors
What does Mandiant do? It focuses on incident response. See Mandiant Red Team and Mandiant Incident Response, deployment options and leading alternatives.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
Arctic Wolf
Eden Prairie, Minnesota, USA
Cado Security
London, United Kingdom
Cofense
Leesburg, Virginia, USA
CrowdStrike
Austin, Texas, USA
D3 Security
Vancouver, British Columbia, Canada
Elastic
Mountain View, California, USA
Expel
Herndon, Virginia, USA
IBM
Armonk, New York, USA
Kroll
New York, New York, USA
LogRhythm
Boulder, Colorado, USA
Mandiant
Reston, Virginia, USA
Optiv
Denver, Colorado, USA
Palo Alto Networks
Santa Clara, California, USA
Rapid7
Boston, Massachusetts, USA
Red Canary
Denver, Colorado, USA
Secureworks
Atlanta, Georgia, USA
ServiceNow
Santa Clara, California, USA
Shuffle
Open Source Project
StrangeBee
Paris, France
Tanium
Kirkland, Washington, USA
Trustwave
Chicago, Illinois, USA
eSentire
Waterloo, Ontario, Canada
Incident Response products 28
Open a product to see its features, pricing and reviews, or compare it with others.
Arctic Wolf Managed Detection and Response
Arctic Wolf Managed Detection and Response: MITRE ATT&CK mapping and proactive threat hunting. Built for 24/7 SOC threat monitoring. Compare MDR alternatives.
Cado Response
Evaluating Cado Response? See how this Cloud Security tool handles memory analysis and MITRE ATT&CK threat mapping, where it fits best and which alternatives to compare.
Cofense Phishing Remediation
Evaluating Cofense Phishing Remediation? See how this Email Security tool handles threat clustering, where it fits best and which alternatives to compare.
Cortex
Looking for Security Operations software? Cortex by StrangeBee provides REST API architecture for automated observable analysis. Compare features and alternatives.
CrowdStrike Falcon Complete
CrowdStrike Falcon Complete covers 24/7/365 expert threat monitoring, full surgical remediation and alert triage for 24/7 SOC outsourcing. Compare top MDR tools.
CrowdStrike Incident Response
CrowdStrike Incident Response: rapid breach containment and cloud-speed sensor deployment. Built for executive crisis advisory. Compare Incident Response alternatives.
D3 SOAR
D3 SOAR from D3 Security focuses on security incident triage. Key capabilities: KPI dashboards and incident audit tracking. Compare it with the leading SOAR alternatives.
Elastic Attack Discovery
What does Elastic Attack Discovery do? It covers MITRE ATT&CK mapping. See typical use cases, cloud or hybrid deployment and how it compares to rivals.
Expel Managed Detection and Response
Get the facts on Expel Managed Detection and Response: one-click containment. Built for automated containment. Compare it with other MDR options before you decide.
IBM X-Force
IBM X-Force is a threat intelligence services used for research. Highlights include incident response. Compare it with other Threat Intelligence tools.
IBM X-Force Incident Response
IBM X-Force Incident Response is an incident response services for DFIR, recovery and threat hunting. See features and Incident Response alternatives.
Kroll Incident Response
Kroll Incident Response: digital forensics investigation. Built for crisis risk communication and data breach digital forensics. Compare Incident Response alternatives.
LogRhythm SmartResponse
LogRhythm SmartResponse is an automated incident remediation & security automation plugin for automated endpoint quarantine. See features and SOAR alternatives.
Mandiant Incident Response
Mandiant Incident Response: rapid crisis breach containment and deep digital forensics. Built for active breach investigation. Compare Incident Response alternatives.
Mandiant Red Team
Mandiant Red Team from Mandiant focuses on adversary emulation. Key capabilities: purple-team debriefs. Compare it with the leading Red Teaming alternatives.
Optiv Incident Response
Get the facts on Optiv Incident Response: memory analysis. Built for Breach Investigation. Compare it with other Incident Response options before you decide.
Rapid7 Incident Response
Evaluating Rapid7 Incident Response? See how this Incident Response tool handles incident retainers, where it fits best and which alternatives to compare.
Red Canary Incident Response
Red Canary Incident Response: rapid breach containment and 24/7 digital forensics. Built for rapid breach containment. Compare Incident Response alternatives.
Secureworks Incident Response
Evaluating Secureworks Incident Response? See how this Incident Response tool handles tabletop exercises, where it fits best and which alternatives to compare.
Secureworks Taegis ManagedXDR
See what Secureworks Taegis ManagedXDR offers: threat hunting. It is built for SOC augmentation, supports cloud deployment and competes with other XDR tools.
ServiceNow Security Incident Response
ServiceNow Security Incident Response offers automated SOAR playbooks. Use it for phishing investigation automation. See Incident Response alternatives.
Shuffle Community Edition
Get the facts on Shuffle Community Edition: OpenAPI app generator. Built for open-source SOC automation. Compare it with other SOAR options before you decide.
Tanium Threat Response
See what Tanium Threat Response offers: real-time EDR. It is built for real-time EDR, supports cloud or on-premises deployment and competes with other EDR tools.
TheHive
TheHive by StrangeBee: alert triage and audit trails. Ideal for alert investigation. Deployment: self-hosted. See how it compares with top Incident Response alternatives.