- Home
- Runbook Automation Software
- Parachute
Parachute
Sydney, Australia
What it is
Parachute automates incident response for security teams. When an alert matches a configured condition, it can run the associated response playbook. Teams can write runbooks in YAML or use a visual editor, manage versions in Git, and test them with simulated alerts. Parachute can isolate hosts through AWS, GCP, and Azure APIs, and collect logs, process lists, network flow captures, and memory snapshots into packaged, hashed evidence. Listed integrations include PagerDuty, Opsgenie, Datadog, Splunk, AWS, GCP, Azure, Slack, Microsoft Teams, Jira, Linear, and Elastic/Kibana. Webhook-capable tools can trigger a runbook, and the REST API accepts custom alerts. The maker says data in transit uses TLS 1.3 and stored data uses AES-256-GCM; inbound webhooks are checked with HMAC-SHA256 signatures and a five-minute timestamp tolerance. It says incident data is not used to train AI models and evidence is deleted after the configured retention period. Parachute offers web and API access, a free Developer plan, a 14-day trial, and paid plans from $49/mo. The maker says SOC 2 Type II is planned but not yet certified, while ISO 27001 is a roadmap item.
For and against
For
- Runbooks can be authored in YAML or a visual editor.
- Supports host isolation through AWS, GCP, and Azure APIs.
- Collects and hashes multiple forms of incident evidence.
- Offers a free Developer plan and a 14-day trial.
Against
- Developer plan alerts above 20 monthly are queued, not executed.
- SOC 2 Type II is planned but not yet certified.
- ISO 27001 is a roadmap item.
The verdict
Parachute combines alert-triggered runbooks, host isolation, and evidence collection, with a free Developer plan and paid plans from $49/mo. Teams should account for the Developer plan’s execution limit and the maker’s stated certification status.
Who it suits
Parachute is aimed at lean security teams that want automated runbooks and integrations with alerting, cloud, and collaboration tools. Its Developer plan has a 20-alert monthly limit, with alerts above that queued rather than automatically executed.
Plans and prices
Starter
1 workspace · 15 runbooks · Unlimited alerts · 3 users
Read 5 Oct 2026 · withparachute.org
Professional
3 workspaces · Unlimited runbooks · Unlimited alerts · 10 users
Read 5 Oct 2026 · withparachute.org
Developer
1 workspace · 3 runbooks · 20 alerts/month · 1 user
Read 5 Oct 2026 · withparachute.org
Enterprise
Unlimited workspaces · Unlimited runbooks · Unlimited alerts · Unlimited users
Read 5 Oct 2026 · withparachute.org
On the record
- Compliance status
- The maker says SOC 2 Type II is planned but not yet certified, and ISO 27001 is a roadmap item.withparachute.org · read 5 Oct 2026
- Custom integrations
- Any tool that can send a webhook can trigger a runbook, and the REST API supports custom alert ingestion.withparachute.org · read 5 Oct 2026
- Data handling
- The maker says it does not use customer incident data to train AI models and deletes evidence after the configured retention period.withparachute.org · read 5 Oct 2026
- Encryption
- The security page states that data in transit uses TLS 1.3 and data at rest uses AES-256-GCM encryption.withparachute.org · read 5 Oct 2026
- Evidence collection
- It collects logs, process lists, network flow captures, and memory snapshots, then packages and hashes the evidence.withparachute.org · read 5 Oct 2026
- Host isolation
- Parachute supports automated host isolation through AWS, GCP, and Azure APIs.withparachute.org · read 5 Oct 2026
- Incident response automation
- Parachute automatically executes incident runbooks in response to matching alerts.withparachute.org · read 5 Oct 2026
- Integrations
- Listed integrations include PagerDuty, Opsgenie, Datadog, Splunk, AWS, GCP, Azure, Slack, Microsoft Teams, Jira, Linear, and Elastic/Kibana.withparachute.org · read 5 Oct 2026
- Intended users
- Parachute says it is built for lean security teams and describes its founders' experience supporting logistics and fintech teams across APAC.withparachute.org · read 5 Oct 2026
- Notable limit
- Developer plan alerts above 20 per month are queued but not automatically executed.withparachute.org · read 5 Oct 2026
- Runbook authoring
- Runbooks can be written in YAML or built with a visual editor, version controlled in Git, and tested with simulated alerts.withparachute.org · read 5 Oct 2026
- Support
- Support ranges from community support on Developer to email on Starter and priority email plus Slack on Professional.withparachute.org · read 5 Oct 2026
- Webhook protection
- Inbound webhooks are verified with HMAC-SHA256 signatures, with a five-minute timestamp tolerance to prevent replay attacks.withparachute.org · read 5 Oct 2026
