Skip to content
SPECIFICTION
Get listed

IncidentFox

incidentfox.ai

Free trial WebSelf-hosted
Visit incidentfox.ai
Spec score 7.6 #10 of 19 in AIOps Platforms

What it is

IncidentFox is an incident investigation agent that operates through Slack, where teams can ask questions or share screenshots and files. It analyzes logs, metrics, and system data from connected observability tools, and searches Slack history for relevant discussions. Its responses can include charts, scripts, and reports in Slack threads; it also provides recommendations and can generate postmortems and documentation. The site lists 40+ integrations, including PagerDuty, AWS, Datadog, Prometheus, Grafana, GitHub, Kubernetes, Jira, and Confluence. Deployment options are hosted SaaS, on-premises or VPC, and self-hosted open core. Each investigation runs in an isolated container with a temporary filesystem. Sensitive data is redacted before it reaches the LLM, and API keys pass through a secure proxy. Write actions require human approval and include audit trails and rollback support. IncidentFox requires a Slack workspace, and installation requires a workspace administrator. Its full-feature trial is listed at free for 7 days.

Spec sheet

Purpose
IncidentFox is an AI-powered incident investigation agent that operates via Slack.Read 1 Oct 2026 · incidentfox.ai
Deployment
Deployment options are hosted SaaS, on-premises or VPC, and self-hosted open core.Read 1 Oct 2026 · incidentfox.ai
Integrations
The site lists Slack, PagerDuty, AWS, Datadog, Prometheus, Grafana, GitHub, Coralogix, Kubernetes, Elasticsearch, Splunk, Sentry, Jira, Linear, GitLab, OpsGenie, New Relic, PostgreSQL, MySQL, and Confluence, and says it works with 40+ integrations.Read 1 Oct 2026 · incidentfox.ai
Privacy
Sensitive data is automatically redacted before being sent to the LLM, and the company says customer data is not used to train AI models.Read 1 Oct 2026 · incidentfox.ai
Compliance
IncidentFox says it is undergoing a SOC 2 Type II audit and provides RBAC and full audit logging.Read 1 Oct 2026 · incidentfox.ai
Support
Email support is available without login with a stated response time of within 2 business days, plus Slack community support.Read 1 Oct 2026 · incidentfox.ai
Access requirement
Using IncidentFox requires a Slack workspace, and installation requires a Slack workspace administrator.Read 1 Oct 2026 · incidentfox.ai
Credential security
API keys are injected at request time through a secure proxy and the agent never sees raw credentials.Read 1 Oct 2026 · incidentfox.ai
Incident analysis
It analyzes logs, metrics, and system data from connected observability tools.Read 1 Oct 2026 · incidentfox.ai
Open source
IncidentFox states that it is open source and offers community support through GitHub and Slack.Read 1 Oct 2026 · incidentfox.ai
Outputs
It provides autonomous investigation and recommendations and generates postmortems and documentation.Read 1 Oct 2026 · incidentfox.ai
Remediation control
All write actions require human approval, and actions have audit trails and rollback support.Read 1 Oct 2026 · incidentfox.ai
Sandboxing
Each investigation runs in an isolated container with a fresh ephemeral filesystem.Read 1 Oct 2026 · incidentfox.ai
Slack context
It searches Slack history for relevant context and past discussions.Read 1 Oct 2026 · incidentfox.ai
Slack workflow
Users can ask questions, share screenshots or files, and receive charts, scripts, and reports in Slack threads.Read 1 Oct 2026 · incidentfox.ai

Plans and prices

Free Trial Free 7 days free with full feature access full feature access Read 1 Oct 2026 · incidentfox.ai

Every IncidentFox plan and price →

Strong points and limits

Strong points

  • Analyzes logs, metrics, system data, and Slack history.
  • Lists 40+ integrations.
  • Write actions require human approval and support rollback.
  • Investigations use isolated containers with ephemeral filesystems.
  • Available as hosted SaaS, on-premises or VPC, and self-hosted open core.

Limits

  • A Slack workspace is required.
  • Installation requires a Slack workspace administrator.
  • The full-feature trial lasts 7 days.

Who it suits

It suits teams that investigate incidents through Slack and connect observability, infrastructure, and collaboration tools. It requires a Slack workspace and administrator installation.

Verdict

IncidentFox brings investigation, Slack context, and post-incident documentation into a Slack-based workflow. Human approval gates write actions, but teams must have a Slack workspace and administrator available to install it.

Where Specifiction places it

Alternatives to IncidentFoxAll alternatives →