Open-source incident management and on-call tools in 2026
17 open-source projects, ranked by GitHub stars and how recently each was worked on. Nightingale leads with 13k stars, ahead of Versus Incident. 8 had code pushed in the last three months. Most common licenses: MIT (10), GPL-3.0 (3) and Apache-2.0 (2). Commercial incident management and on-call tools are listed separately.
New this season
-
1
KYB alex09x
Git-backed shared memory for AI agent fleets: searchable knowledge base, incident and task tracking, every write versioned and attributed. CLI, HTTP API and MCP server.
Complete system Experimental You run several coding agents and want them to share versioned, attributable memory.
★ 127 MIT Rust Active, pushed 7 days ago
All open-source incident management and on-call tools, ranked
Complete systems you can adopt 12
-
1
Nightingale ccfos
Open-source, self-hosted alerting for metrics, logs, and databases. Includes a built-in AI agent and MCP server.
Complete system Production-ready Ops teams want a central alerting console over existing metric and log stores, popular in China as an Alertmanager alternative.
★ 13k Apache-2.0 Go Active, pushed 6 days ago -
2
Versus Incident VersusControl
The self-hosted AI SRE agent. You don't have to monitor your systems alone. Versus Incident will keep track of your services, applications, and systems, detect new or unexpected problems, and provide your team with the evidence needed to investigate.
Complete system Usable A small ops team wants on-call alert routing and AI-assisted triage without paying for PagerDuty.
★ 916 MIT Go Active, pushed 6 days ago -
3
Aurora Arvo-AI
Aurora — Open source AI-powered agentic incident management & root cause analysis for SREs. LangGraph agents investigate across AWS, Azure, GCP, Kubernetes. Integrates with PagerDuty, Datadog, Grafana, Slack and More. Apache 2.0.
Complete system Experimental An SRE team wants to trial self-hosted AI root-cause analysis across clouds.
★ 437 Apache-2.0 Python Active, pushed 14 days ago -
4
OpsiMate OpsiMate
Open-source alert management for NOC/DevOps teams: one queue for Grafana, Datadog, Zabbix, Uptime Kuma and GCP alerts — with ownership, mute policies, root-cause analysis and insights. Self-hosted, one container.
Complete system Experimental A NOC or DevOps team is drowning in alerts from several tools and wants one self-hosted inbox.
★ 259 AGPL-3.0 TypeScript Active, pushed 14 days ago -
5
Kanvas WithSecureOpenSource
A simple-to-use IR (incident response) case management tool for tracking and documenting investigations.
Complete system Experimental A small DFIR team wants a structured alternative to tracking investigations in spreadsheets.
★ 468 GPL-3.0 Python Slowing, pushed 6 months ago -
6
Issue-status tadhglewis
A flexible, modern and blazingly fast ☄️ status page
Complete system Usable You want to manage your status page by opening and labelling GitHub issues.
★ 429 MIT TypeScript Slowing, pushed 5 months ago -
7
Incidentbot incidentbot
The Open Source Incident Management Framework
Complete system Usable A team wants incident.io-style Slack incident handling on its own infrastructure.
★ 165 MIT Python Active, pushed 2 months ago -
8
KYB alex09x
Git-backed shared memory for AI agent fleets: searchable knowledge base, incident and task tracking, every write versioned and attributed. CLI, HTTP API and MCP server.
Complete system Experimental You run several coding agents and want them to share versioned, attributable memory.
★ 127 MIT Rust Active, pushed 7 days ago -
9
IMPulse eslupmi
ChatOps Incident Management
Complete system Usable You run Prometheus and want alert-to-incident handling in your chat tool without a paid on-call service.
★ 108 GPL-3.0 Python Active, pushed 20 days ago -
10
Response monzo
Monzo's real-time incident response and reporting tool ⚡️
Complete system Experimental Only as a reference for a Slack incident workflow.
★ 1.6k MIT JavaScript Quiet, pushed 3 years ago -
11
Incidental incidentalhq
An opensource incident management platform integrating with Slack.
Complete system Experimental Only as a starting point to fork; it is not maintained enough to depend on.
★ 563 MIT Python Quiet, pushed 2 years ago -
12
Openduty-archive openduty
Open source incident escalation tool
Complete system Experimental Not for new use; it is an archive.
★ 139 MIT CSS Quiet, pushed 4 years ago
Integrations 3
-
1
Formcreator pluginsGLPI
GLPI Plugin Formcreator (DOWNLOAD : https://github.com/pluginsGLPI/formcreator/releases)
Integration Usable Only if you are on an older GLPI version that still relies on it.
★ 186 GPL-3.0 PHP Active, pushed 20 days ago -
2
Aws-health-aware aws-samples
AHA is an incident management & communication framework to provide real-time alert customers when there are active AWS event(s). For customers with AWS Organizations, customers can get aggregated active account level events of all the accounts in the Organization. Customers not using AWS Organizations still benefit alerting at the account level.
Integration Usable You run many AWS accounts and want AWS service events pushed to your chat channels.
★ 371 MIT-0 Python Quiet, pushed 2 years ago -
3
ShoMon kaansk
Shodan Monitoring integration for TheHive.
Integration Usable A security team already uses TheHive and Shodan Monitor on its own IP ranges.
★ 129 MIT Go Quiet, pushed 2 years ago
Templates and starters 1
-
1
Mthc pe3zx
All-in-one bundle of MISP, TheHive and Cortex
Template or starter Experimental Only for a quick lab setup of that security stack.
★ 160 MIT Quiet, pushed 4 years ago
Lists, courses and other material 1
-
1
Wheel of Misfortune dastergon
A role-playing game for incident management training
List, course or other material Usable You want to run incident drills for on-call engineers.
★ 189 MIT HTML Quiet, pushed 3 years ago
Compared head to head
Also under monitoring and observability tools
Open-source licenses
- Permissive: 12. Use it anywhere, including in closed products. You keep the copyright notice; Apache-2.0 also grants patent rights.
- Strong copyleft: 3. If you distribute the program or anything built on it, you must release the whole source under the same license.
- Network copyleft: 1. Like GPL, and running a changed version as a web service counts as distributing it, so its users get the source too.
- Public domain: 1. No conditions at all. You can copy, change and sell the code without even keeping the notice.
Languages
Python 6, Go 3, TypeScript 2, PHP 1, Rust 1, JavaScript 1, HTML 1 and CSS 1.
Made software that belongs here? Add it. Listing is free.