Netflix/dispatchArchived
Dispatch
Dispatch is an incident response orchestration platform that automates the coordination of detection, participant assembly, and task tracking across existing communication and project management tools. It provides a web-configurable state machine to manage incident lifecycle transitions, with template-driven incident models that define types, priorities, and severity levels. The platform enforces role-based access control to map user roles to specific actions and data access, while maintaining a database-backed audit trail of all incident events and system changes for compliance and post-incident review.
The platform distinguishes itself through an event-driven workflow engine that emits and consumes events to trigger automated resource creation, notifications, and task tracking across integrated tools. Its plugin-based integration architecture connects to external platforms via standardized adapters, while an API-first extensibility layer allows customization of workflows and integration with tools beyond the plugin system. A web administration interface enables configuration of incident types, notification rules, and escalation policies without manual scripting, and supports assigning incident commanders with decision authority and delegation capabilities.
The system covers the full incident lifecycle, including automated timeline tracking so responders can focus on resolution without manual logging, task management to ensure follow-through on required actions, and post-incident review management that collects and organizes incident data for analysis and improvement. Participant roles can be customized through the web interface to control access and responsibilities during active incidents.
Features
- Incident Response Platforms - An automated platform that coordinates incident detection, participant assembly, and task tracking across communication and project management tools.
- Event-Driven Workflow Triggers - Orchestrates incident response by emitting and consuming events that trigger automated resource creation and notifications.
- Incident Workflow Customizations - Provides a programmatic API to customize incident workflows and integrate with external tools beyond the plugin system.
- API Integrations - Ships an API-first extensibility layer for integrating incident workflows with external tools and services.
- Incident Notification Services - Sets up automated alerts and escalation policies for incident events through an administration interface.
- Role-Based Access Control - Enforces permissions and responsibilities by mapping user roles to specific actions and data access within incident workflows.
- Incident Response Resources - Automates resource creation, participant assembly, and task tracking during active security incidents via integrated tools.
- Incident Workflow Customizations - Provides a programmatic API to customize incident workflows and integrate with external tools beyond the plugin system.
- Incident Response Plugin Adapters - Extends functionality through a plugin system that connects to external communication and project management platforms via standardized adapters.
- Incident Management - Provides a web-based console for configuring incident types, priorities, severity levels, and notification rules.
- Automated Incident Response Workflows - Automates resource creation, participant assembly, notifications, and task tracking across integrated tools.
- Incident Documentation - Collects and organizes incident data to simplify post-incident review processes.
- Incident Timelines - Automatically records timelines and documentation so responders can focus on resolving the incident.
- Automated Timeline Trackers - Automatically tracks and updates incident timelines so responders can focus on resolution without manual logging.
- Web-Configurable Incident State Machines - Manages incident lifecycle transitions through a state machine configurable via a web administration interface.
- Incident Responder Roles - Assigns and modifies responder roles through a web interface to manage permissions and responsibilities during incident response.
- Incident Role Customizations - Assigns and modifies roles for incident responders within a web interface to control access and responsibilities.
- Incident Notification Rules - Sets up automated alerts and escalation policies for incident events through an administration interface.
- Incident Commander Assignments - Ships a system to designate an incident commander with decision authority and delegation capabilities.
- Incident Task Trackers - Manages and tracks tasks throughout an incident lifecycle, ensuring follow-through on required actions.
- Incident Templates - Defines incident types, priorities, and severity levels using configurable templates that populate response workflows.
- Post-Incident Review Guides - Provides structured post-incident review workflows that collect and organize incident data for analysis.
- Post-Incident Review Tools - Collects and organizes incident data to streamline post-incident analysis and improvement workflows.
- Incident Type Configurations - Provides a web interface for configuring incident types, priorities, and severity levels to tailor response workflows.
- Incident Audit Trails - Persists all incident events, participant actions, and system changes to a relational database for post-incident review and compliance.
- Forensics and Incident Response - Manages incident response workflows and coordination.
- Detection and Hunting Tools - Orchestration framework for crisis management.
- Incident Management - System for managing incident response and coordination at scale.
- Example Applications - Platform for managing and coordinating security incidents.
- Project and Task Management - Incident management service with notification and task integrations.
