IncidentFox vs Keep
IncidentFox
incidentfox.aiKeep
keephq.devSide by side
| Figure | IncidentFox | Keep |
|---|---|---|
| Price from | — | $199/mo |
| Free plan | — | — |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · AIOps Platforms | 7.6 (#10) | 7.9 (#8) |
| Deployment | Deployment options are hosted SaaS, on-premises or VPC, and self-hosted open core. | Keep can be self-hosted or used as a managed cloud service; Enterprise offers managed on-premises or cloud deployment. |
| Integrations | The site lists Slack, PagerDuty, AWS, Datadog, Prometheus, Grafana, GitHub, Coralogix, Kubernetes, Elasticsearch, Splunk, Sentry, Jira, Linear, GitLab, OpsGenie, New Relic, PostgreSQL, MySQL, and Confluence, and says it works with 40+ integrations. | Keep lists 110+ providers and describes bidirectional integrations across monitoring, incident response, ticketing, source control, change management, and CMDB systems. |
| Support | Email support is available without login with a stated response time of within 2 business days, plus Slack community support. | Startup includes community-based support, Growth includes dedicated Slack support, and Enterprise includes 24/7 support. |
Plans
In their own words
IncidentFox
IncidentFox is an incident investigation agent that operates through Slack, where teams can ask questions or share screenshots and files. It analyzes logs, metrics, and system data from connected observability tools, and searches Slack history for relevant discussions. Its responses can include charts, scripts, and reports in Slack threads; it also provides recommendations and can generate postmortems and documentation. The site lists 40+ integrations, including PagerDuty, AWS, Datadog, Prometheus, Grafana, GitHub, Kubernetes, Jira, and Confluence. Deployment options are hosted SaaS, on-premises or VPC, and self-hosted open core. Each investigation runs in an isolated container with a temporary filesystem. Sensitive data is redacted before it reaches the LLM, and API keys pass through a secure proxy. Write actions require human approval and include audit trails and rollback support. IncidentFox requires a Slack workspace, and installation requires a workspace administrator. Its full-feature trial is listed at free for 7 days.
Keep
Keep is an open-source alert management and AIOps platform for bringing alerts together, reducing noise, and automating response workflows. Its alert workspace supports querying, slicing, analysis, and rule-based grouping. The YAML-based workflow engine has a UI and can query MySQL, enrich alerts, update Jira tickets, and run Python scripts. Keep lists 110+ providers and bidirectional integrations across monitoring, incident response, ticketing, source control, change management, and CMDB systems. It can be self-hosted or used as managed cloud; self-hosting options include local setup or Kubernetes with Helm or Docker Compose. The Enterprise plan includes alert correlation based on past incidents and a knowledge base. Growth costs $199 a month and includes 200 deduplicated alerts monthly, unlimited ingested alerts, 100 workflows, 20 integrations, 10 users, and 14 days of data retention. Startup is listed for personal or non-commercial projects, with five workflows, one integration, and one user. Keep is headquartered in Tel Aviv, Israel.