Cyber Triage
6.2#9 in incident response softwareFrom $3,500 a yearAPISelf-hostedWindows
Visit
| Fact | Cyber Triage | LimaCharlie |
|---|---|---|
| Headquarters | Somerville, Massachusetts, United States | Covina, California, United States; Vancouver, British Columbia, Canada |
| Integrations | The integrations page lists CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, Splunk, IBM QRadar, IRIS, and other tools, and says integrations are available with Team Edition. | The platform page names Tines, Slack, AWS S3, Twilio, Apache Kafka, Azure Event Hub, Azure Storage Blob, YARA, Velociraptor, VirusTotal, Sigma, AlienVault, and PagerDuty. |
| Purpose | Cyber Triage is an AI-powered investigation platform for rapid cyber incident and endpoint investigations. | LimaCharlie describes itself as an API-first SecOps platform for telemetry, detection, and response. |
| Support | Technical support is available by emailing [email protected]. | Community includes community Discourse support; Standard lists ticketing and Discourse; Builder Program lists a technical account manager, Slack, ticketing, and Discourse. |
Cyber Triage is intended for IR teams, SOC analysts, consultants, and law enforcement investigating incidents and endpoints. The Team options are relevant to groups seeking self-hosted, collaborative investigations.
It suits security teams seeking endpoint telemetry, detection, and response tools, as well as MSSPs managing separate customer environments. Teams can also define rules and configurations in YAML or Terraform.