CyberCPR

Overview

CyberCPR is a case-management platform built around cyber incident response, with support for other cases and investigations. It is designed for teams that need to coordinate investigation work, preserve case information and follow defined response procedures. Its strongest draw is the combination of configurable playbooks and flexible hosting; organizations should weigh that against the limited scope of the free edition and custom pricing for paid plans.

Key features

A five-step incident wizard gives teams a consistent route to opening a case. Template playbooks provide a starting point, and a drag-and-drop editor lets teams build and save their own procedures, with task owners and deadlines. That structure suits investigations where work needs clear ownership and repeatable steps; teams looking only to route alerts may find a dedicated incident management tool a closer fit.

Teams can assign tasks, communicate securely and track progress in one case workflow, then compile incident information into email reports. An API and Zapier integration, which CyberCPR says connects to more than 3,000 apps, provide ways to connect that work with other systems. Audit logs are supported.

Access controls include role-based permissions and need-to-know access for individual incidents. A user's access to an incident is removed when that user is removed from it, which helps limit exposure of case material. All accounts can use two-factor authentication through Google Auth. CyberCPR says TLS protects traffic between browser and server, and organizations can add their own certificate. Uploaded evidence is encrypted server-side using “SAH256” with per-item keys; evidence and notes are immutable, while an erroneous upload can be made private.

CyberCPR is browser-based and says it works with most modern operating systems and mobile devices. It can run on an organization's own network, a third-party cloud provider or Logically Secure's hosting. This range is useful to organizations with specific hosting needs, though a bespoke or air-gapped environment belongs to the custom Enterprise tier.

Pricing

CyberCPR has a free Lite edition and two paid options with custom pricing. Lite costs nothing and is a limited edition for charities and education, running on a shared AWS-hosted platform. It gives eligible organizations a way to use the platform without a subscription price, but the limited edition and shared hosting make it a narrower fit than the full product.

Pro (SaaS) is a non-minimum-term monthly subscription with all features on hosted SaaS. Its month-to-month terms suit teams that want the full feature set without committing to a minimum term; custom pricing means the cost must be established with the company.

Enterprise has custom pricing and supports bespoke deployment on cloud, on-premises or an air-gapped network. It also includes requests for add-ons and prioritized features. This is the relevant tier for organizations with deployment requirements or feature needs beyond the standard service, but it requires a pricing discussion. Support and training are offered for Pro and Enterprise, and Enterprise users can access the latest software upgrades through the support area.

Platforms

CyberCPR is listed for Android, iOS, Linux, macOS, Windows, web, API and self-hosted use. In practice, users access the application through a browser, including on mobile devices and most modern operating systems. The API supports integrations, while self-hosting gives organizations an option beyond the vendor-hosted service.

Who it's for

Lite is aimed at charities and education providers. Pro fits teams seeking the complete hosted platform with a monthly subscription and no minimum term. Enterprise is aimed at organizations that need bespoke cloud, on-premises or air-gapped deployment, or want add-on requests and prioritized features. CyberCPR was designed by police and cyber investigators, which aligns its case-management approach with structured incident investigation rather than alert handling alone.

Pros and cons

• Pros: The incident wizard and reusable, editable playbooks give teams a structured way to start cases and assign work with deadlines.
• Pros: Task coordination, secure communication, progress tracking and email reports keep investigation activity together.
• Pros: Browser access, API connectivity and several hosting choices make it adaptable to different technical environments.
• Pros: Incident-level permissions, two-factor authentication, audit logs and protected evidence support controlled case handling.
• Cons: Lite is both limited and restricted to charities and education, so other organizations need a paid plan for the platform.
• Cons: Pro and Enterprise use custom pricing, which makes it harder to compare costs before contacting the company.
• Cons: Organizations needing on-premises or air-gapped deployment must choose Enterprise rather than the shared Lite service or hosted Pro option.

Alternatives

Incident Management Software is a useful starting point for comparing products in the broader category. Choose DFIR-IRIS if a free, open-source, self-hosted option is the priority. incident.io is an alternative with a free Basic plan centered on Slack or Microsoft Teams native incident response, a single on-call team, a status page and essential automation. For a monitoring-oriented choice, Spectate has a Hobby plan with five monitors or servers and one status page, while its Solo plan costs $12 a month, billed $144 yearly, for one user and 15 monitors or servers. Grafana Cloud Application Observability offers a free plan with 2,232 host hours and a Pro option priced at $0.03 a month, billed at $0.025 per host hour plus a $19 monthly platform fee, with pay-as-you-go use above that. Readers comparing other incident response and alerting products can also consider ITOC360, PagerDuty, AlertOps and xMatters.

Verdict

CyberCPR is a strong fit for charities, education providers and investigation teams that need case records, repeatable playbooks and coordinated task ownership. Its flexible hosting makes it especially relevant when a shared SaaS deployment is not appropriate. Look elsewhere if you need transparent paid-plan pricing before contacting a vendor, or if your primary requirement is monitoring and alert routing rather than case management.