An automation tool for security work. It turns your response checklists into steps the computer performs on its own.
It connects security tools through connectors, then runs playbooks, which are automated workflows triggered by alerts. Analysts can approve steps or let them run.
When a policy violation appears, administrators want a consistent response. Automation can take the same steps each time and keep a record.
- Automatically cuts off a device that violates policy.
- Opens a case and notifies the right staff.
- Keeps a full record of each action.
Check before you buy
Keep a person in the loop for any automated action that could affect door, camera or other safety systems.
- Policy-violation playbooks: for example, a repeated VPN attempt from an inmate device can trigger a block and a case for review.
- Hundreds of connectors link tools together.
- Playbooks enrich alerts and take containment steps.
- Case management records every action.
| Control | Priority | How this helps |
|---|---|---|
| IR-4Incident Handling | P2* | Automates incident handling. |
| IR-5Incident Monitoring | P2* | Tracks incidents. |
| IR-6Incident Reporting | P2* | Can include notification steps to support reporting. |
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table