Cydarm vs SandsBytes
Cydarm
cydarm.comSandsBytes
sandsbytes.comSide by side
| Figure | Cydarm | SandsBytes |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 0 |
| Spec score · Incident Response Software | 7.9 (#9) | 7.3 (#16) |
| Case management | The platform includes case management, data enrichment, editable playbooks, reporting, collaboration, and response time SLAs. | Sands Manage supports team collaboration, case correlation, task assignment, evidence tracking, timelines, IOC tracking, and automated reports. |
| Deployment | Cydarm is offered as a hosted managed service or as an enterprise deployment on a customer's own infrastructure. | The platform is deployed as a containerized stack on Ubuntu Linux 20.04.6 LTS or later, with Docker Engine and Docker Compose. |
| Headquarters | Melbourne, Australia | Riyadh, Saudi Arabia |
| Integrations | The integrations page lists OpenAPI, email polling, webhooks, Jira, ServiceNow, Teams, PagerDuty, Slack, and SMS integrations. | Workflows can connect to external systems such as HTTP APIs, databases, queues, and file storage. |
| Intended users | Cydarm describes solutions for enterprise, virtual and hybrid security teams, and third-party providers including MSPs, MSSPs, and DFIR firms. | SandsBytes identifies incident response teams, SOC analysts, digital forensics specialists, MSSPs, and security consultancies as its intended users. |
| Purpose | Cydarm is a cyber incident response management platform for security operations teams. | SandsBytes is a cybersecurity investigation and incident response platform for triaging incidents, hunting threats, documenting findings, managing evidence and IOCs, and generating structured reports. |
Plans
In their own words
Cydarm
Cydarm is a cyber incident response management platform for security operations teams. It combines case management, data enrichment, editable playbooks, reporting, collaboration, and response-time SLAs. Teams can assign tasks using an open-source playbook format, while attribute-based access controls restrict visibility from whole cases down to individual comments or data types. Listed integrations include OpenAPI, email polling, webhooks, Jira, ServiceNow, Teams, PagerDuty, Slack, and SMS. Cydarm is offered as a hosted managed service or an enterprise deployment on a customer’s infrastructure, with web, API, and self-hosted platforms. It supports SSO through Microsoft Entra ID, Okta, Google, and AWS, with no SSO fee. Cydarm Technologies states it meets ISO 27001:2022 requirements and has achieved certification. Security information describes disk encryption, TLS 1.2 or higher, dedicated hosted infrastructure, and network segmentation. Pricing is on request; a 30-day trial costs nothing and needs no credit card.
SandsBytes
SandsBytes is a cybersecurity investigation and incident response case-management platform for triage, threat hunting, evidence, indicators of compromise, and reporting. Its three products divide that work: Sands Investigate converts forensic artifacts into searchable, ECS-normalized records, enriches them with threat intelligence and external lookups, and flags indicator matches and suspicious patterns. Sands Manage supports collaborative cases with evidence, timelines, findings, task assignment, indicator tracking, and automated reports. Reports can be produced as PDF or DOCX files from configured templates. Sands Flow offers visual playbooks for enrichment pipelines, alert routing, and service-level escalation. Workflows can connect with external HTTP APIs, databases, queues, and file storage. The Hunt interface supports dashboard and table analysis, pivot filtering, CSV export, and bulk tagging. Deployment is self-hosted on 64-bit Ubuntu 20.04.6 LTS or later, accessed with Chrome, Firefox, or Edge; minimum resources are 6 CPU cores, 16 GB RAM, and 100 GB free storage. A license key expires after its specified validity period, and access is rejected until renewal. Pricing is on request.