Parachute is an incident response service that can automatically run configured procedures when alerts match set conditions. Teams can write runbooks in YAML or build them with a visual editor, keep them version controlled in Git and test them with simulated alerts. The service supports host isolation through AWS, GCP and Azure APIs. It can collect logs, process lists, network flow captures and memory snapshots, then package and hash that evidence. Integrations include PagerDuty, Opsgenie, Datadog, Splunk, AWS, GCP, Azure, Slack, Microsoft Teams, Jira, Linear and Elastic/Kibana. Webhook-capable tools can trigger a runbook, and the REST API accepts custom alerts. The maker says data in transit uses TLS 1.3, stored data uses AES-256-GCM, and customer incident data is not used to train AI models. Evidence is deleted after its configured retention period. Parachute was founded in 2024 and is headquartered in Sydney, Australia. It offers web and API access, a free plan, a 14-day trial and paid plans from $49/mo. SOC 2 Type II is planned but not yet certified; ISO 27001 is on its roadmap.
Who it is for
Parachute is aimed at lean security teams that want to automate alert-triggered response and evidence collection. Its listed integrations and cloud-provider APIs may fit teams using those services.
What is good
- Runbooks can be written in YAML or a visual editor.
- Runbooks support Git version control and simulated-alert tests.
- Can isolate hosts through AWS, GCP and Azure APIs.
- Collects and hashes multiple forms of incident evidence.
- Free Developer plan and 14-day trial are listed.
What to know first
- Developer alerts above 20 monthly are queued, not run automatically.
- SOC 2 Type II certification is not yet achieved.
- Developer evidence retention is seven days.
Verdict
Parachute combines configurable response automation with host isolation and evidence collection. Review the Developer plan’s alert cap and retention period, and account for the maker’s stated compliance status.
Parachute plans and pricing
All plansCompared on runbook automation software
- Free plan
- Yes
- Paid from
- $49/mo
- Event triggers
- Yes
- Incident integrations
- Yes
- Audit logs
- Yes
