Keep is an AIOps and alert management platform that consolidates alerts and incidents from monitoring and observability tools into a unified interface.
It helps operations teams reduce alert noise through deduplication, correlation, filtering and enrichment.
The platform supports bidirectional integrations with observability, ticketing, communication, cloud and AI services. Declarative YAML workflows can automate responses to alerts and incidents, perform enrichment, update tickets, send notifications and execute operational actions.
This is free and open source software.
Key Features
- Provides a unified interface for managing alerts and incidents.
- Deduplicates, correlates, filters and enriches incoming alerts.
- Uses AI services to correlate alerts, generate summaries and gather incident context.
- Offers customizable dashboards for monitoring operational data.
- Supports bidirectional integrations with monitoring, observability, ticketing and communication platforms.
- Automates alert and incident management with declarative YAML workflows.
- Supports alert, incident, scheduled and manually initiated workflow triggers.
- Can update tickets, send notifications and execute remediation actions.
- Provides REST APIs and software development kits for integration with other systems.
- Supports deployment with Docker, Kubernetes, OpenShift and AWS ECS.
- Can be deployed on-premises and in isolated environments.
Website: github.com/keephq/keep
Support:
Developer: Keep Alerting Ltd.
License: MIT License (core); proprietary (Enterprise Edition).

Keep is written in Python and TypeScript. Learn Python with our recommended free books and free tutorials. Learn TypeScript with our recommended free books and free tutorials.
Related Software
| Incident Response | |
|---|---|
| GRR | Remote live forensics for incident response |
| GoAlert | On-call scheduling, automated escalations and notifications |
| OneUptime | Unified observability, on-call scheduling, and incident response |
| Keep | AI-powered alert correlation and workflow automation for operations teams |
| Alertmanager | Handles alerts sent by client applications such as the Prometheus server |
| Shuffle | Connects security tools to automate workflows and accelerate response |
| Velociraptor | Endpoint visibility and collection tool |
| DFIR-IRIS | Collaborative case management for forensics and incident response. |
| FIR | Cybersecurity incident management platform |
| Iris | Automated incident paging system at LinkedIn |
| Dispatch | Manage security incidents by deeply integrating with existing tools |
Read our verdict in the software roundup.
LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |


Please read our Comment Policy before commenting.