#1 most frequent
United States of America
62.2%28 installations of 45
What is Rootly?
A solution to automate incident response on Slack, that lets users handoff alerts from PagerDuty and automatically create incidents without ever leaving Slack. Its relevant runbooks and metadata (deploy events) shortcut resolution times.
Categories & Use Cases
Product Demos
Top Performing Features
Company-wide Incident Reporting
Built-in enterprise-level ticketing system to leverage the knowledge of the entire workforce, not just the security team
Category average: 7.2
Integration with Other Security Systems
Pre-built integration with other security systems like SIEM and threat intelligence
Category average: 7.1
Attack Chain Visualization
Attack chain visualization to help identify root cause
Category average: 6.6
Areas for Improvement
Centralized Dashboard
A central dashboard provides analysts with a clear look at the most important data
Category average: 8.4
Machine Learning to Prevent Incidents
Incident prevention powered by machine learning with no human intervention
Category average: 7.8
Live Response for Rapid Remediation
Live remediation response allows incident responders to initiate remediation from anywhere over secure connection
Category average: 8.1
Who Buys & Uses Rootly
#2 most frequent
Canada
13.3%6 installations of 45
#3 most frequent
United Kingdom of Great Britain and Northern Ireland
6.7%3 installations of 45
learning curve but so worth it
Use Cases and Deployment Scope
Rootly is integrated with teams and slack (which is the main form of communication for our remote organization) and is used for incident management and tracking. Rootly helps us stay centralized when incidents pop up through their clean interface and easy step management process so everyone can see any updates on all incidents in one place
Pros
- clear tracking
- step management, for where we are at in the process of resolving the issues (whose hands it is currently in to deal with the problem)
- centralized clear and easy communication to our organization
Cons
- while the interface provides great information and everything that you need, there can be a learning curve to understand what you are looking at
- having all notifications on for slack/teams can cause lots of notifications in a larger organization
- like any technology, there is room for error with feature issues or integrations issues
Return on Investment
- streamlined communication for our entire business, one stop shop for incidents and their updates
- Improved collaboration and engagement from our org
- faster response times and more accurate reporting
Usability
Other Software Used
Atlassian Confluence, Microsoft SharePoint, Fathom
