Parachute
withparachute.org
What it is
Parachute automates security incident response through web and API access. It can run a configured response when an alert matches, with runbooks authored in YAML or a visual editor, version controlled in Git, and tested with simulated alerts. The service can isolate hosts through AWS, GCP, and Azure APIs, and gather logs, process lists, network flow captures, and memory snapshots into packaged, hashed evidence. Listed integrations include PagerDuty, Opsgenie, Datadog, Splunk, AWS, GCP, Azure, Slack, Microsoft Teams, Jira, Linear, and Elastic/Kibana. Webhook-capable tools can trigger a runbook, and the REST API accepts custom alerts. The maker says data in transit uses TLS 1.3 and stored data uses AES-256-GCM; inbound webhooks are checked with HMAC-SHA256 and a five-minute timestamp tolerance. It says incident data is not used to train AI models and evidence is deleted after its configured retention period. Founded in 2024 and based in Sydney, Parachute offers a free Developer plan, a 14-day trial, and paid plans from $49/mo. SOC 2 Type II is planned but not yet certified; ISO 27001 is on the roadmap.
Spec sheet
- Intended users
- Parachute says it is built for lean security teams and describes its founders' experience supporting logistics and fintech teams across APAC.Read 5 Oct 2026 · withparachute.org
- Integrations
- Listed integrations include PagerDuty, Opsgenie, Datadog, Splunk, AWS, GCP, Azure, Slack, Microsoft Teams, Jira, Linear, and Elastic/Kibana.Read 5 Oct 2026 · withparachute.org
- Support
- Support ranges from community support on Developer to email on Starter and priority email plus Slack on Professional.Read 5 Oct 2026 · withparachute.org
- Headquarters
- Sydney, AustraliaRead 28 Sep 2026 · withparachute.org
- Founded
- 2024Read 28 Sep 2026 · withparachute.org
- Compliance status
- The maker says SOC 2 Type II is planned but not yet certified, and ISO 27001 is a roadmap item.Read 5 Oct 2026 · withparachute.org
- Custom integrations
- Any tool that can send a webhook can trigger a runbook, and the REST API supports custom alert ingestion.Read 5 Oct 2026 · withparachute.org
- Data handling
- The maker says it does not use customer incident data to train AI models and deletes evidence after the configured retention period.Read 5 Oct 2026 · withparachute.org
- Encryption
- The security page states that data in transit uses TLS 1.3 and data at rest uses AES-256-GCM encryption.Read 5 Oct 2026 · withparachute.org
- Evidence collection
- It collects logs, process lists, network flow captures, and memory snapshots, then packages and hashes the evidence.Read 5 Oct 2026 · withparachute.org
- Host isolation
- Parachute supports automated host isolation through AWS, GCP, and Azure APIs.Read 5 Oct 2026 · withparachute.org
- Incident response automation
- Parachute automatically executes incident runbooks in response to matching alerts.Read 5 Oct 2026 · withparachute.org
- Notable limit
- Developer plan alerts above 20 per month are queued but not automatically executed.Read 5 Oct 2026 · withparachute.org
- Runbook authoring
- Runbooks can be written in YAML or built with a visual editor, version controlled in Git, and tested with simulated alerts.Read 5 Oct 2026 · withparachute.org
- Webhook protection
- Inbound webhooks are verified with HMAC-SHA256 signatures, with a five-minute timestamp tolerance to prevent replay attacks.Read 5 Oct 2026 · withparachute.org
Plans and prices
Strong points and limits
Strong points
- Runbooks can be tested with simulated alerts
- Host isolation spans AWS, GCP, and Azure APIs
- Webhook tools can trigger runbooks
- Developer plan is free
Limits
- Developer alerts above 20 monthly are queued, not run
- SOC 2 Type II is not yet certified
- ISO 27001 is a roadmap item
- Starter starts at $49 a month
Who it suits
Parachute is aimed at lean security teams that want alert-triggered runbooks, host isolation, and evidence collection. Its plans range from a small Developer tier to Enterprise options.
Verdict
Parachute brings incident runbooks, integrations, host isolation, and evidence collection into one service. Teams should account for plan limits and note that its stated SOC 2 certification remains planned, not achieved.
Where Specifiction places it
- Runbook Automation Software#4 of 247.9