CyberCPR

Overview

CyberCPR is a case-management platform for cyber incident response, with support for other cases and investigations. It is best suited to charities, education providers and response teams that need to coordinate investigation work; its main trade-off is choosing between a limited shared service and custom-priced deployment options.

Key features

A five-step incident wizard gives teams a consistent way to open a case. Template playbooks provide a starting point, while drag-and-drop authoring lets teams save their own procedures with assigned tasks and deadlines. That combination is useful when response work needs repeatable steps and clear ownership, rather than only alert routing.

Teams can communicate securely, track progress and compile incident information into email reports. An API and a Zapier integration that the maker says connects to more than 3,000 apps offer routes into other workflows. Role-based access and incident-level, need-to-know permissions help keep case material limited to the people involved; access is removed when a user is removed from an incident. Audit logs are supported.

All accounts can use two-factor authentication through Google Auth. The maker says browser-to-server traffic uses TLS and that organizations can add their own certificate. Uploaded evidence is described as server-side encrypted using “SAH256” with per-item keys; evidence and notes are immutable, though an erroneous upload can be made private. These controls suit sensitive investigations, while teams should assess the deployment and security arrangements against their own requirements.

CyberCPR is accessed through a browser and is described as compatible with most modern operating systems and mobile devices. It can be hosted on an organization's network, a third-party cloud provider, or by Logically Secure. The breadth of hosting choices is valuable for organizations with deployment constraints, but the bespoke Enterprise route is custom-priced.

Pricing

Lite costs nothing. It is a limited edition for charities and education, hosted on a shared AWS platform. That makes it the clearest starting point for eligible organizations, but the limited edition and shared hosting are meaningful constraints for teams needing a bespoke environment.

Pro (SaaS) has custom pricing and is a non-minimum-term monthly subscription. It includes all features on hosted SaaS, making it the more flexible paid route for teams that want the full feature set without a minimum commitment.

Enterprise also has custom pricing. It supports bespoke deployment in the cloud, on-premises or on an air-gapped network, plus add-on requests and prioritized features. This is the plan to consider when deployment control or tailored product priorities matter; support and training are offered for Pro and Enterprise, and Enterprise users can access the latest software upgrades through the support area.

Platforms

The listed platforms are Android, iOS, Linux, macOS, Windows, web, API and self-hosted. Browser access and hosting choices accommodate a range of devices and infrastructure preferences, though the platform list alone does not establish feature parity across deployments.

Who it's for

Lite is aimed at charities and education. The case-management platform was designed by police and cyber investigators, making it relevant to organizations coordinating cyber investigations and other casework. Teams that primarily need monitoring, on-call scheduling or alert escalation rather than investigation records should compare tools focused on those jobs.

Pros and cons

• Pros: Guided case setup, reusable and custom playbooks, task ownership and progress tracking bring response work into one workflow.
• Pros: Incident-level permissions, audit logs, two-factor authentication and encrypted evidence address access and record-handling needs.
• Pros: Shared SaaS, third-party cloud, on-premises and air-gapped deployment options cover different infrastructure constraints.
• Cons: Lite is explicitly limited and uses shared AWS hosting, which may not suit organizations needing a dedicated deployment.
• Cons: Pro and Enterprise prices are custom, so prospective buyers must contact the maker to assess cost.
• Cons: Pro is hosted SaaS; organizations requiring on-premises or air-gapped deployment need to consider Enterprise instead.

Alternatives

Incident Management Software is a useful category to compare if you want to survey incident-response options beyond CyberCPR.

• DFIR-IRIS is the alternative to consider when a free, open-source, self-hosted deployment and no licence fee are priorities.
• Grafana Cloud Application Observability is a better fit when application observability is the goal; its free tier includes 2,232 host hours, unlike CyberCPR's investigation-oriented case management.
• incident.io suits teams seeking native Slack or Microsoft Teams incident response, on-call and status-page features in its free Basic plan.
• ITOC360 is worth considering for a free plan centered on monitoring, SMS and voice-call allowances, with a free trial also available.
• PagerDuty is a fit for teams looking for free incident management with defined user, on-call schedule and escalation-policy limits, or a free trial.
• Spectate is another alternative.
• AlertOps may suit teams looking for free alert routing and escalation policies with a five-user cap, with a free trial also available.
• DFIRe is another alternative.

Verdict

Choose CyberCPR if your team needs structured cyber-incident casework, configurable playbooks and controls over where the platform is hosted. Its strongest case is bringing assignments, investigation records and collaboration into a managed response workflow. Look elsewhere if you need a clearly priced full-feature plan, or if your primary need is observability or on-call alerting rather than case management.