RightITnow ECM

RightITnow ECM correlates events from monitoring tools into root-cause incidents and gives network operations teams and management a shared view. Configurable rules deduplicate, suppress, and group related alerts. ECM builds a live dependency graph from discovered topology and a CMDB, highlighting critical paths to show cause and impact. Historical Trends tracks alert volume across 7-day, 30-day, 90-day, and one-year periods, with export through a REST API. The platform lists 50+ connectors, including SolarWinds, Nagios, Zabbix, Zenoss, Dynatrace, Datadog, AWS, Azure, Google Cloud, and ServiceNow. Bidirectional ticket integration covers ServiceNow, Jira Software 9.x, Jira Software Cloud, and BMC. Workflows can trigger remediation scripts, acknowledgements, or escalations when incidents are created or cleared. AI Incident Narrator generates plain-language incident summaries. ECM is offered as a cloud service or for on-premises deployment, with dedicated nodes also deployable across Azure, AWS, and Google Cloud. Its iOS app lets on-call engineers receive alerts and acknowledge, escalate, or resolve incidents. The free tier supports up to 100 managed entities; paid pricing is based on entity count, with no per-event licensing.

RightITnow ECM combines alert correlation, dependency context, integrations, and incident workflows for operations teams. Its free tier has a defined entity limit, while paid pricing depends on entity count.

RightITnow ECM suits organizations managing monitoring alerts and incident response, including financial services, MSPs and ISPs, government agencies, and IT consulting firms. It also offers an iOS app for on-call engineers.

RightITnow ECM is an event-correlation and incident-management platform for IT operations and NOC teams. It is most useful where a monitoring estate spans services and infrastructure that operators need to understand together. Its breadth of correlation, dependency mapping, integrations, and response workflows is a strong fit for that work, though paid pricing depends on the number of managed entities.

Overview

ECM turns monitoring events into root-cause incidents and provides a shared view for NOC operators and management. Configurable rules deduplicate, suppress, and group alerts, addressing noise at the point where teams need to decide what warrants attention. The live dependency graph adds discovered topology and CMDB context, with critical paths highlighting potential cause and impact. That makes ECM more compelling for teams managing interconnected environments than for organizations that need only a basic alert inbox.

Key features

Correlation and operational context

Deduplication and suppression can keep repeated or irrelevant alerts from dominating the queue, while grouping related events into incidents gives responders a more useful unit of work. The dependency graph connects incidents to affected services and infrastructure, helping teams consider impact rather than triage each alert in isolation.

Connectors, tickets, and automation

ECM lists more than 50 connectors, including SolarWinds, Nagios, Zabbix, Zenoss, Dynatrace, Datadog, AWS, Azure, Google Cloud, and ServiceNow. Bidirectional ticket integration also covers ServiceNow, Jira Software 9.x and Jira Software Cloud, and BMC. For teams that already use those systems, the range can make ECM a practical coordination layer; the broad connector count alone does not establish how well any one environment is covered.

Workflows can trigger remediation scripts, acknowledgements, or escalations when incidents are created or cleared. This gives operations teams a way to connect incident state to response actions. The AI Incident Narrator produces plain-language summaries aimed at NOC operators, IT managers, and CIOs, which can make incident information more accessible across roles.

Trends, anomaly analysis, and mobile response

Historical Trends tracks alert volume over 7-day, 30-day, 90-day, and one-year periods, with export through a REST API. Alerts can also be exported to Elasticsearch Cloud for real-time anomaly detection and analysis by severity, priority, and source. On-call engineers using the iOS app can receive alerts and acknowledge, escalate, or resolve incidents. These options extend ECM beyond immediate triage, though the mobile incident workflow described is specifically for iOS.

Pricing

ECM uses a freemium model, with a 45-day trial and paid pricing on request. The Free tier costs nothing and covers up to 100 managed entities. That gives smaller environments a defined way to start, but the cap matters for teams managing larger estates.

The paid plan has custom pricing based on entity count and does not use per-event licensing. That structure may suit teams whose alert volume varies but whose managed-entity footprint is predictable; buyers still need a quote to assess cost. No seat or event quota is given for the paid plan.

Platforms

ECM supports api, ios, linux, macos, self-hosted, web, and windows. It is offered as a cloud service or for on-premises deployment, and dedicated nodes can also be deployed across Azure, AWS, and Google Cloud. The Alert Console is available in English, French, and Japanese. This range gives organizations deployment flexibility, including those that need an on-premises option, while mobile incident actions are described for iOS.

Who it's for

ECM is a strong candidate for NOC and IT operations groups coordinating incidents across monitoring tools, ticket systems, and infrastructure dependencies. The company identifies financial services, MSPs and ISPs, government agencies, and IT consulting firms among the industries using it. Teams with up to 100 managed entities can begin on the free tier; larger teams should weigh the custom entity-based quote against their deployment needs. Organizations seeking only basic alert routing, or a fixed paid price, may prefer a more narrowly scoped option.

Pros and cons

• Pros: Configurable deduplication, suppression, and grouping turn alert streams into incidents rather than leaving teams to sort repeated events individually.
• Pros: A live dependency graph, critical-path highlighting, and broad integrations connect alert handling to service impact and existing ITSM workflows.
• Pros: Cloud and on-premises deployment, plus dedicated nodes across major cloud platforms, accommodate different infrastructure choices.
• Cons: The free tier is capped at 100 managed entities, so it may not cover a larger environment.
• Cons: Paid pricing requires a quote based on entity count, making budget comparison less direct.
• Cons: The stated mobile incident actions are for iOS, which is a limitation for teams that need the same workflow on Android.

Alternatives

Alert Management Software is a useful starting point for comparing tools in the category.

Choose PagerDuty if a free plan for five users with one on-call schedule and one escalation policy better fits a small response team, or if Android support matters. Choose AlertOps for a free plan capped at five users that includes basic alert routing, three escalation policies, and 200+ integrations. xMatters offers a free plan for up to five users and a Starter (Essentials) plan at $15 a month, billed per user/month for up to 25 users; consider it if those user-based tiers suit your team better than ECM's entity-based pricing.

SolarWinds Incident Response is a paid alternative with a Pro plan at $15 a year, billed per user/month annually, and a free trial. Grafana Cloud Application Observability is another option, with a free tier and host-hour-based Pro pricing. MISP is free, open-source software released under AGPL, with a separate yearly support contract. OpenNMS offers a free Horizon community distribution whose features may not all be production-ready. Wazuh offers free, open-source self-hosted software. These alternatives serve different needs; compare their plans and platform fit before choosing them over ECM.

Verdict

RightITnow ECM is best for operations teams that need to correlate alerts, understand service dependencies, and coordinate incident response across existing tools. Its defining advantage is the combination of topology context and configurable incident workflows, backed by flexible deployment options. The 100-entity free-tier cap and quote-based paid pricing are the main reasons to look elsewhere if you need a larger free footprint or a clear price before engaging with the vendor.