Parachute

APIyesOSS—FREE—DOCS5/5
PA6.9#8 of 23
outWeb—Windows—Mac—Linux—Android—iOS

Ranked in Runbook Automation Software ·Free trial· paid from $49/mo

About

Parachute is an incident response automation platform for security teams, available through web and API. It runs configured incident runbooks when alerts match their conditions. Teams can write runbooks in YAML or use a visual editor, keep them version controlled in Git, and test them with simulated alerts. The platform can isolate hosts through AWS, GCP, and Azure APIs, and collect logs, process lists, network flow captures, and memory snapshots into packaged, hashed evidence. Integrations include PagerDuty, Opsgenie, Datadog, Splunk, Slack, Microsoft Teams, Jira, Linear, and Elastic/Kibana, alongside cloud services. Webhook-capable tools can trigger runbooks, and the REST API accepts custom alerts. The maker says data is encrypted in transit with TLS 1.3 and at rest with AES-256-GCM; inbound webhooks use HMAC-SHA256 verification. Parachute says it does not use incident data to train AI models and deletes evidence after its configured retention period. A free plan and 14-day trial are available; paid plans start at $49.00 USD per month, billed monthly.

Who it is for

Parachute is aimed at lean security teams that want automated responses and configurable runbooks. Teams should note that Developer plan alerts above 20 per month are queued rather than automatically executed.

What is good

  • Runbooks can be authored in YAML or a visual editor.
  • Git version control and simulated alert testing are supported.
  • Host isolation uses AWS, GCP, and Azure APIs.
  • Webhook triggers and REST API allow custom alert ingestion.

What to know first

  • Developer plan automates only 20 alerts per month.
  • SOC 2 Type II certification is planned, not achieved.
  • ISO 27001 is a roadmap item.

Verdict

Parachute combines runbook automation, evidence collection, and cloud host isolation with multiple ways to connect alert sources. Its plan limits and not-yet-achieved compliance certifications matter when evaluating it for a security stack.

Compared on runbook automation software

Free plan
Yeswithparachute.org
Paid from
$49/mowithparachute.org
Event triggers
Yeswithparachute.org
Incident integrations
Yeswithparachute.org
Audit logs
Yeswithparachute.org

Facts

Incident response automation
Parachute automatically executes incident runbooks in response to matching alerts.withparachute.org · 5 Oct 2026
Runbook authoring
Runbooks can be written in YAML or built with a visual editor, version controlled in Git, and tested with simulated alerts.withparachute.org · 5 Oct 2026
Host isolation
Parachute supports automated host isolation through AWS, GCP, and Azure APIs.withparachute.org · 5 Oct 2026
Evidence collection
It collects logs, process lists, network flow captures, and memory snapshots, then packages and hashes the evidence.withparachute.org · 5 Oct 2026
Integrations
Listed integrations include PagerDuty, Opsgenie, Datadog, Splunk, AWS, GCP, Azure, Slack, Microsoft Teams, Jira, Linear, and Elastic/Kibana.withparachute.org · 5 Oct 2026
Custom integrations
Any tool that can send a webhook can trigger a runbook, and the REST API supports custom alert ingestion.withparachute.org · 5 Oct 2026
Encryption
The security page states that data in transit uses TLS 1.3 and data at rest uses AES-256-GCM encryption.withparachute.org · 5 Oct 2026
Webhook protection
Inbound webhooks are verified with HMAC-SHA256 signatures, with a five-minute timestamp tolerance to prevent replay attacks.withparachute.org · 5 Oct 2026
Compliance status
The maker says SOC 2 Type II is planned but not yet certified, and ISO 27001 is a roadmap item.withparachute.org · 5 Oct 2026
Data handling
The maker says it does not use customer incident data to train AI models and deletes evidence after the configured retention period.withparachute.org · 5 Oct 2026
Support
Support ranges from community support on Developer to email on Starter and priority email plus Slack on Professional.withparachute.org · 5 Oct 2026
Notable limit
Developer plan alerts above 20 per month are queued but not automatically executed.withparachute.org · 5 Oct 2026
Intended users
Parachute says it is built for lean security teams and describes its founders' experience supporting logistics and fintech teams across APAC.withparachute.org · 5 Oct 2026

Company

Founded
2024withparachute.org · 28 Sept 2026
Headquarters
Sydney, Australiawithparachute.org · 28 Sept 2026

Best Parachute alternatives

See all 20

Where it ranks on Inferse

Sources