IncidentRelay vs MonoDuty

IncidentRelay is open-source software for self-hosted on-call management and incident response. It routes incoming alerts by source, labels, severity, and team ownership, then applies team rules and escalation policies. Teams can manage schedules, shifts, rotations, overrides, and escalation chains; responders can acknowledge, resolve, silence, or escalate alerts and temporarily shelve alert groups. Versioned event rules can enrich, group, route, suppress, and automate events, with execution history showing matches and results. Documented inputs include Alertmanager, AWS SNS and CloudWatch, Grafana, Datadog, Azure Monitor, Zabbix, Sentry, LibreNMS, PagerDuty Events API v2, RMON, heartbeats, and webhooks. Notifications include chat services, email, voice calls, outbound webhooks, and browser/PWA push. The automation interface provides Swagger UI, OpenAPI JSON, route-intake tokens, and personal API tokens. On-call calendars can be exported through CalDAV and ICS. Deployment options include Docker Compose, Kubernetes with Helm, RPM packages, and manual systemd installation. The IncidentRelay plan costs nothing; it is open-source and self-hosted.

MonoDuty is a workspace-based incident management service for teams responsible for production systems. It brings together team-owned services, on-call schedules, escalation policies, Heartbeats, uptime Monitors, and email, SMS, and voice notifications. All published plans include on-call scheduling. Systems that can send HTTP requests can submit incidents through its Universal HTTP Webhook using MonoDuty's documented JSON payload; Pro and Business plans can send lifecycle updates to Slack, Discord, and Microsoft Teams. Monitors check websites and APIs from Helsinki, tracking response times, validating responses, checking HTTPS certificates, and alerting on recovery. A REST API uses scoped, short-lived customer tokens, with documented access for incidents, services, and Monitors. Security controls include TLS 1.2/1.3, workspace roles, rate limits, CSRF protection, and optional time-based one-time-password MFA. MonoDuty says it does not currently publish security certifications. Its production service runs on a single European virtual server, without promised geographic failover, load-balanced application replicas, or provider redundancy. The free plan includes seven-day incident retention; Pro and Business list 30- and 90-day retention. A 14-day trial is listed.