Enterprise and often government are required to handle dozens of incident reporting sources at once, which is not resources or cost-effective at all.
Some companies are still using emails, ticket systems, CRMs, or messaging systems for incident reports.
To resolve this issue, they need a centralized incident tracking management system and here comes Cyphon.
Cyphon is an open-source incident management and response platform. It helps the enterprise to track incident from different sources, prioritize them and automate the response system for them.
Features
- Collect incidents from many sources: REST-API, Firewall activities, log files, webhooks, social media and emails.
- Streamline incidents into a stream-flow
- Categorize the events
- Prioritize the events
- Alert certain events to a specific team
- View alerts by category, priority, and source
- Assign certain incidents to certain response team
- Automate the response to a ticketing system, an API-call
- Track/ investigate alerts and incidents to the source
Use cases
Security management:
Cyphon can monitor Firewall events (incidents), log files and REST-APL and it can respond with a process like blocking an IP or locking down the system.
With it's alerting, reporting and response capabilities, is the best open-source security incident management system.
Incident management for enterprises:
Enterprise setup is complex, sometimes it has many installed system to report the incidents. With Cyphon it can work with variety of sources as to aggregate all incidents into one stream, categorizing, prioritizing and sending alerts to the designated teams to response.
Internet of Things (IoT):
With hundreds or thousands of IoT devices installed, it's essential to keep tracking of their logs and incidents. Cyphon can provide a streamed log monitoring for the devices and report back for incidents as if a device goes offline.
Social media monitoring.
Cyphon has built-in social media monitoring tools, which will come in handy for enterprises that use social media to communicate with their customers.
LICENSE
Cyphon project has two parts: ControlScan which is distributed under dual license, and Cyphon Engine which is distributed under GPLV3.0 license. However, Cyphon is free for personal and professional use.