AcademySubagentsOperations

Incident Responder

Operations, security and on-call teams that need a clear process when something breaks.

  • Recommendedour rating
  • 25,623repository stars
  • MITlicence
  • 6 days agolast update
mkdir -p .claude/agents && curl -fsSL https://raw.githubusercontent.com/VoltAgent/awesome-claude-code-subagents/main/categories/03-infrastructure/incident-responder.md -o .claude/agents/incident-responder.md
incident-responder.md

Loading the file...

What it does

A Claude Code subagent for handling security breaches and operational incidents. It helps classify an incident, decide severity, preserve evidence, plan containment and recovery, and structure communication and lessons learned afterwards.

Use cases

  1. 01Classify and rate the severity of a new incident
  2. 02Draft a containment and recovery plan
  3. 03Write up lessons learned after an outage

Questions about
Incident Responder.

What is Incident Responder used for?

Operations, security and on-call teams that need a clear process when something breaks. A Claude Code subagent for handling security breaches and operational incidents. It helps classify an incident, decide severity, preserve evidence, plan containment and recovery, and structure communication and lessons learned afterwards.

How do I install Incident Responder?

Run this in your terminal: mkdir -p .claude/agents && curl -fsSL https://raw.githubusercontent.com/VoltAgent/awesome-claude-code-subagents/main/categories/03-infrastructure/incident-responder.md -o .claude/agents/incident-responder.md

Is Incident Responder open source?

Yes. The code is on GitHub (VoltAgent/awesome-claude-code-subagents) under the MIT licence.

Is Incident Responder safe to use?

It passed our automatic scan for credential theft, hidden instructions and risky install commands. Third party open source software. Sabemos AI does not maintain it. Check the code and permissions before you connect it to company data.