Skip to content
SPECIFICTION
Get listed

Cyber Triage

cybertriage.com

From $291.67/mo Free trial WindowsAPISelf-hosted
Visit cybertriage.com
Spec score 8.2 #7 of 21 in Incident Response Software

What it is

Cyber Triage is an AI-powered platform for cyber incident and endpoint investigations. It ingests DFIR collections, EDR telemetry and disk images, including targeted collection and memory-image imports. Guided analysis combines heuristics, more than 40 malware-scanning engines, YARA rules and Hayabusa event-log analysis. The workflow scores artifacts, recommends related items and provides timeline views to help scope incidents. Investigators can review automated and generative-AI results with source references and explanations, and the product indicates when generative AI is used. Integrations include CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, Splunk, IBM QRadar and IRIS; integrations are available with Team Edition. A seven-day evaluation provides a fully featured installer for up to two hosts. Standard Pro costs $3,500 a year for one investigator and 20,000 malware scans per week. Team plans are self-hosted for collaborative investigations.

Spec sheet

Purpose
Cyber Triage is an AI-powered investigation platform for rapid cyber incident and endpoint investigations.Read 4 Oct 2026 · cybertriage.com
Intended users
The maker identifies IR teams, SOC analysts, consultants, and law enforcement as users of Cyber Triage.Read 4 Oct 2026 · cybertriage.com
Integrations
The integrations page lists CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, Splunk, IBM QRadar, IRIS, and other tools, and says integrations are available with Team Edition.Read 4 Oct 2026 · cybertriage.com
Support
Technical support is available by emailing [email protected].Read 4 Oct 2026 · cybertriage.com
Headquarters
Somerville, Massachusetts, United StatesRead 28 Sep 2026 · cybertriage.com
Founded
2023Read 28 Sep 2026 · cybertriage.com
AI safeguards
The maker says investigators can review automated and generative AI results, which include source references and explanations, and that users are notified when generative AI is used.Read 4 Oct 2026 · cybertriage.com
Analysis
Guided analysis uses heuristics, 40+ malware scanning engines, YARA rules, and Hayabusa event-log analysis.Read 4 Oct 2026 · cybertriage.com
Collection
Automated ingest supports targeted collection, disk-image and memory-image imports, and EDR telemetry import.Read 4 Oct 2026 · cybertriage.com
Evidence sources
It can ingest DFIR collections, EDR telemetry, and disk images.Read 4 Oct 2026 · cybertriage.com
Investigation workflow
The product scores artifacts and recommends related items and timeline views to help investigators scope incidents.Read 4 Oct 2026 · cybertriage.com
Malware scan limit
Each listed version has a malware scanning limit of 20,000 per week.Read 4 Oct 2026 · cybertriage.com
Training
The Cyber Triage Training Bundle includes unlimited access to the on-demand Cyber Triage Basics course for customers.Read 4 Oct 2026 · cybertriage.com
Trial limit
The free evaluation provides a fully featured installer for seven days on up to two hosts, with additional time available on request.Read 4 Oct 2026 · cybertriage.com

Plans and prices

Standard Pro $3,500 a year $3,500/year single investigator · desktop application · 20,000 malware scans/week Read 4 Oct 2026 · cybertriage.com
Standard Enterprise Priced on request Contact Sales single-user desktop application · imports EDR telemetry · publishes IOCs Read 4 Oct 2026 · cybertriage.com
Team Priced on request Contact Sales self-hosted server · multiple investigators · collaborative investigations Read 4 Oct 2026 · cybertriage.com
Team Enterprise Priced on request Contact Sales self-hosted server · integrations to import and publish results · incident-level access control Read 4 Oct 2026 · cybertriage.com

Every Cyber Triage plan and price →

Strong points and limits

Strong points

  • Ingests DFIR, EDR and disk-image evidence
  • Uses 40+ malware scanning engines
  • Provides artifact scores and timelines
  • AI results include source explanations
  • Team plans support collaboration

Limits

  • Seven-day evaluation covers up to two hosts
  • Each version limits scans to 20,000 weekly
  • Standard Pro costs $3,500 a year
  • Several plan prices require contacting sales

Who it suits

It is aimed at IR teams, SOC analysts, consultants and law enforcement investigating endpoints and incidents. Windows desktop and self-hosted deployments cover individual and team workflows.

Verdict

Cyber Triage combines evidence ingestion, guided analysis and reviewable AI output for incident investigations. Choose between the desktop Standard Pro plan and self-hosted team editions based on investigators and collaboration needs.

Where Specifiction places it

Alternatives to Cyber TriageAll alternatives →