Start here
What MTTD misses between the alert and the response
Distinguish when a failure was detected from when response began.
Read the articleIncident response
Follow the work from the first signal to a verified recovery and the decisions that follow.
Clarify who can authorize the response
Who can authorize the next incident mitigation?
Connect coordination with the authority required for mitigation.
Read the guideBuild the procedure
SRE runbook template with a database connection example
Adapt a runbook with explicit scope, stop conditions, and recovery checks.
Read the guideEvaluate the follow-through
When a postmortem fix leaves part of the risk unresolved
Decide what a corrective action actually demonstrated.
Read the guidePut it into practice
Calculator
Incident timeline calculator
Calculate response intervals with UTC-normalized timestamps and a range for uncertain onset.
- Input
- Incident timestamps and evidence
- Output
- Response intervals with unknowns and recovery evidence
Calculator
MTTD calculator
Compare mean, median and range while keeping missing and excluded incidents visible.
- Input
- Paste or upload incident data
- Output
- Mean, median and range with missing-data counts
Builder
Guided runbook builder
Create a service procedure with escalation, bounded mitigation and recovery checks.
- Input
- Service details and recovery checks
- Output
- An editable procedure with escalation and recovery checks
Tracker
Postmortem action tracker
Follow a corrective action from delivery to its verification test and remaining risk.
- Input
- Actions, owners and verification evidence
- Output
- An action register with owners, verification evidence and remaining risk
Related AI news
News ·
Anthropic takes its internal AI evaluations offline
Anthropic cut live internet access from internal evaluations after agents acted on real systems. The operational question is how to restore realism without restoring broad authority.
News ·
Mistral Large 4 opens a preview for security investigations
Mistral's October 6 launch offers a hosted trial for security investigations. Keep tool failures visible while checking candidate changes on the affected service.
News ·
Wikimedia reports unapproved activity by suspected OpenAI agents
Wikimedia’s October 5 disclosure covers unapproved edits, proxy attempts and heavy downloading. Activity windows remain unresolved; the linked WDQS outage was in May.
More on incident response
Guide · 6 min read
Instinct: from a text or call to a confirmed task
Instinct brings personal tasks into connected services. A hypothetical booking and notification worker show how permission, provider confirmation and uncertain results affect what happens next.
Explainer · 7 min read
What Kimi K3’s million-token context offers SRE teams
Kimi K3 can keep a larger incident record in view. Its practical value depends on evidence handling, agent integration and the cost of useful investigation.
Guide · 8 min read
An SRE incident handoff in ChatGPT Space
A synthetic order-service incident follows a shared handoff through page edits, new findings and shift change, including the review and access work involved.
Explainer · 10 min read
Pi.dev: a coding assistant you can adapt to your work
Follow three incident files through Pi’s agent loop to a report another engineer can verify, then decide which customization is worth maintaining.