- Home
- Incident Response Software
- Cyber Triage
Cyber Triage
Somerville, Massachusetts, United States
What it is
Cyber Triage is an AI-powered platform for investigating cyber incidents and endpoints. It accepts DFIR collections, EDR telemetry, and disk images, while automated ingest also handles targeted collection plus disk-image and memory-image imports. Guided analysis combines heuristics, more than 40 malware-scanning engines, YARA rules, and Hayabusa event-log analysis. The workflow scores artifacts and points investigators toward related items and timeline views for incident scoping. Investigators can review automated and generative AI results with source references and explanations, and the product indicates when generative AI is used. Deployment choices include a Windows desktop application, API access, and self-hosted options. Team plans provide multiple-investigator collaboration, while Team Enterprise adds integrations and incident-level access control. Listed integrations include CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, Splunk, IBM QRadar, and IRIS; integrations are available with Team Edition. A seven-day trial supports up to two hosts. Standard Pro costs $3,500 a year and includes one investigator and 20,000 malware scans weekly.
For and against
For
- Ingests DFIR collections, EDR telemetry, and disk images
- Guided analysis includes YARA and Hayabusa
- Scores artifacts and recommends timeline views
- Supports case management and evidence tracking
- Offers a seven-day trial for two hosts
Against
- No free plan is listed
- Standard Pro costs $3,500 a year
- Each version limits malware scans to 20,000 weekly
- On-call scheduling is not available
The verdict
Cyber Triage combines broad evidence ingestion with guided analysis and reviewable AI results. Check the plan structure, scan limit, and deployment needs before choosing it.
Who it suits
Cyber Triage suits IR teams, SOC analysts, consultants, and law enforcement investigating endpoints and incidents. It also fits teams needing collaborative, self-hosted investigations.
Plans and prices
Standard Pro
single investigator · desktop application · 20,000 malware scans/week
Read 4 Oct 2026 · cybertriage.com
Standard Enterprise
single-user desktop application · imports EDR telemetry · publishes IOCs
Read 4 Oct 2026 · cybertriage.com
Team
self-hosted server · multiple investigators · collaborative investigations
Read 4 Oct 2026 · cybertriage.com
Team Enterprise
self-hosted server · integrations to import and publish results · incident-level access control
Read 4 Oct 2026 · cybertriage.com
On the record
- AI safeguards
- The maker says investigators can review automated and generative AI results, which include source references and explanations, and that users are notified when generative AI is used.cybertriage.com · read 4 Oct 2026
- Analysis
- Guided analysis uses heuristics, 40+ malware scanning engines, YARA rules, and Hayabusa event-log analysis.cybertriage.com · read 4 Oct 2026
- Collection
- Automated ingest supports targeted collection, disk-image and memory-image imports, and EDR telemetry import.cybertriage.com · read 4 Oct 2026
- Evidence sources
- It can ingest DFIR collections, EDR telemetry, and disk images.cybertriage.com · read 4 Oct 2026
- Integrations
- The integrations page lists CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, Splunk, IBM QRadar, IRIS, and other tools, and says integrations are available with Team Edition.cybertriage.com · read 4 Oct 2026
- Intended users
- The maker identifies IR teams, SOC analysts, consultants, and law enforcement as users of Cyber Triage.cybertriage.com · read 4 Oct 2026
- Investigation workflow
- The product scores artifacts and recommends related items and timeline views to help investigators scope incidents.cybertriage.com · read 4 Oct 2026
- Malware scan limit
- Each listed version has a malware scanning limit of 20,000 per week.cybertriage.com · read 4 Oct 2026
- Purpose
- Cyber Triage is an AI-powered investigation platform for rapid cyber incident and endpoint investigations.cybertriage.com · read 4 Oct 2026
- Support
- Technical support is available by emailing [email protected].cybertriage.com · read 4 Oct 2026
- Training
- The Cyber Triage Training Bundle includes unlimited access to the on-demand Cyber Triage Basics course for customers.cybertriage.com · read 4 Oct 2026
- Trial limit
- The free evaluation provides a fully featured installer for seven days on up to two hosts, with additional time available on request.cybertriage.com · read 4 Oct 2026
