RunbookIQ

RunbookIQ is a web app (with optional desktop agent) that converts messy incident-response runbooks—wikis, PDFs, Slack threads—into executable SOAR playbooks and keeps them current. It ingests existing documentation, maps steps to common actions (ticketing, EDR isolation, IAM disable, email purge), and generates a draft workflow with required approvals, rollback steps, and evidence capture. The product focuses on the unglamorous middle: making playbooks actually runnable, auditable, and safe. It includes a lightweight connector framework for the top 10 tools most mid-market teams use, plus a “human-in-the-loop” mode so analysts can approve risky actions. It also tracks drift: when tools change APIs or teams deviate from the playbook, it flags the playbook for review. This is a combination traditional + AI app: AI accelerates playbook creation and maintenance, but execution is deterministic and controlled.