Why we built IR Now
Because readiness should be something you can measure, not something you assume.
The money buys artifacts. It doesn't buy readiness.
We've watched organizations spend six figures on incident response, sometimes far more, and end up unable to say whether anyone is ready.
The money buys artifacts. A plan. A set of playbooks. A framework mapping. All of it competent, all of it delivered as a document. A walkthrough or two, and the engagement closes.
Ten weeks of scoping, scenario design and scheduling, to put eight or ten people in a room for half a day. It's the most valuable thing in the package, and it's an exercise, not an assessment. People participate, the discussion is good, everyone leaves feeling better prepared. Nothing is scored.
Occasionally something surfaces that sends the plan back for revision. That's a real result, and it improves the document, not the people. The plan gets better. The organization doesn't.
Everyone named in the plan who wasn't in that room still has nothing. Not the rest of IT, not legal, comms, HR, or the executives who'll make the calls that decide what the incident costs. The stack has changed, people have left, and the only honest answer to “are we more ready than we were?” is that nobody knows.
- Incident response plan
- Playbooks
- Framework mapping
- Tabletop exercise, half a day
- After-action summary
- Any measure of whether anyone is ready
The output is a summary and a feeling.
Readiness was never measured, so it was never managed.We got fed up with it.
The product was built by an engineer who ships
The technology and product behind IR Now were built by an engineer who has shipped production software at Amazon, Twitch, and SeatGeek, with training at Carnegie Mellon, Stanford, and Georgia Tech.
Same engineering rigor, pointed at a problem that actually matters.
That background shaped a specific decision: this had to be something a team could use immediately and see real results from, not a platform requiring a six-week rollout, a dedicated administrator, or a consultant to operate.
What readiness actually requires
Readiness is a practice, not an artifact.
A plan that has never been used is an intention, not a capability.
If it isn't measured, it didn't happen.
Attendance isn’t readiness. You need to know where a team would break down, by role, before it does.
Three promises you can hold us to
We'll tell you what we don't do.
IR Now provides training evidence. It doesn't replace a tabletop exercise, and it doesn't make you compliant on its own. We'd rather be precise than oversold.
Everyone gets trained.
No per-seat limits, on any plan. Incident response fails in the parts of an organization nobody trained, so we won't price in a way that makes you choose who to leave out.
We offset what we use.
Generating training takes compute, and compute has a footprint. We've partnered with 1ClickImpact to plant five trees for every course generated, on every plan, funded by us. Use the product without the guilt.
Join the teams getting ready.
Request access and bring real incident response readiness to your organization, usually live within 24 hours.