alertescalation.com Add your tool
Lists / Incident management

Best incident management tools in 2026

Incident roles, channels, timelines, runbook automation and postmortems: the work that starts once someone has acknowledged. This list has the top 10 of 20 incident management tools, ranked by a published score. Of these, 5 are open source, 7 have a free plan and 5 can be self-hosted. Checked by hand on 30 September 2026.

How this list is ranked

Each active tool gets a score out of 100. Archived, end-of-sale and maintenance-only tools are left out.

  • Capabilities: up to 75 points for the share of the category checklist that the tool's own documentation confirms. A tool meeting 8 of 10 items gets 60.
  • Free to start: 15 points for a free plan or a free edition.
  • Open or self-hostable: 10 points if it is open source or can be self-hosted.

Each category has a fixed checklist of capabilities (shown in the table below and on every tool page). An item counts only when the tool's own documentation confirms it; anything we could not confirm counts as not met. How long a tool has existed is deliberately not scored, so a new tool is not ranked below an older one for being new. Tools with the same score share a rank (shown as =), are listed A to Z within it, and the list never cuts between them. Nobody pays for a position.

  1. 1

    Incident Bot

    Self-hosted Slack or Matrix bot for incident response: opens channels, tracks severity, status and roles, posts a digest and builds postmortem documents.

    Free Open source (MIT) Self-hosted Incident responseChatOpsPostmortems
    93 9 of 10 capabilities (68), free 15, open 10
  2. =2

    FireHydrant

    Incident management platform with runbooks, Slack and Teams incident channels, retrospectives and status pages. Bought Blameless in 2024 and agreed to join Freshworks in December 2025.

    Free plan Free: Up to 10 responders, 1 public status page Incident responseRunbooksPostmortemsChatOps
    90 10 of 10 capabilities (75), free 15, open 0
  3. =2

    incident.io

    Incident management run from Slack or Microsoft Teams: declares incidents, assigns roles, keeps timelines, automates workflows and drafts postmortems, with status pages and on-call.

    Free plan Free: Basic plan: Slack/Teams incidents, status page Incident responseChatOpsPostmortemsStatus page
    90 10 of 10 capabilities (75), free 15, open 0
  4. 4

    Rootly

    Incident management run from Slack with automated workflows, roles, timelines, retrospectives and status pages, alongside Rootly's own on-call product.

    Paid Incident responseChatOpsPostmortemsStatus page
    75 10 of 10 capabilities (75), free 0, open 0
  5. 5

    Harness AI SRE

    Incident response module in the Harness platform that gathers alerts and change events, runs response workflows and uses AI agents to suggest causes.

    Paid Incident responseRunbooks
    60 8 of 10 capabilities (60), free 0, open 0
  6. =6

    Event-Driven Ansible

    Rulebooks that listen to events from monitoring tools, webhooks or Kafka and trigger Ansible playbooks, used for automatic remediation. Open source core, supported in Red Hat Ansible Automation Platform.

    Free plan Open source (Apache-2.0) Self-hosted Runbooks
    33 1 of 10 capabilities (8), free 15, open 10
  7. =6

    HolmesGPT

    Open source agent that investigates alerts by querying Kubernetes, Prometheus, logs and other sources with an LLM and summarises likely root causes. CNCF sandbox project started at Robusta.

    Free Open source (Apache-2.0) Self-hosted Incident responseKubernetes
    33 1 of 10 capabilities (8), free 15, open 10
  8. =6

    Rundeck

    Runbook automation server that wraps scripts and commands into access-controlled jobs that operators or alerts can trigger. The commercial edition is PagerDuty Runbook Automation.

    Free plan Open source (Apache-2.0) Self-hosted Runbooks
    33 1 of 10 capabilities (8), free 15, open 10
  9. =6

    StackStorm

    Event-driven automation engine that runs rules, workflows and ChatOps actions in response to alerts and events, often used for automatic remediation.

    Free Open source (Apache-2.0) Self-hosted RunbooksChatOps
    33 1 of 10 capabilities (8), free 15, open 10
  10. 10

    Cutover

    Runbook platform for large organisations that turns disaster recovery, cloud migration, release and major-incident procedures into shared, partly automated task lists.

    Paid RunbooksIncident response
    30 4 of 10 capabilities (30), free 0, open 0

Side by side

Tool Pricing Free plan Open source Self-hosted Declare from chatIncident channelsIncident rolesSeverity levelsTimelineWorkflowsStatus page updatesPostmortemsFollow-up actionsPaging
Incident Bot Free Yes Yes Yes YesYesYesYesYesYesYesYesYesNo
FireHydrant Free plan Up to 10 responders, 1 public status page No No YesYesYesYesYesYesYesYesYesYes
incident.io Free plan Basic plan: Slack/Teams incidents, status page No No YesYesYesYesYesYesYesYesYesYes
Rootly Paid No No No YesYesYesYesYesYesYesYesYesYes
Harness AI SRE Paid No No No YesYes-YesYesYes-YesYesYes
Event-Driven Ansible Free plan Yes Yes Yes NoNoNoNoNoYesNoNoNoNo
HolmesGPT Free Yes Yes Yes NoNoNoNo-YesNo--No
Rundeck Free plan Yes Yes Yes NoNoNoNoNoYesNoNoNoNo
StackStorm Free Yes Yes Yes NoNoNoNoNoYesNoNoNoNo
Cutover Paid No No No --Yes-YesYes-Yes--

Yes: confirmed in the tool's documentation. No: documented as not offered. -: not confirmed. Plans and prices change; check each tool's own site before you decide.

More lists