Investigations

Agentic root cause analysis

Investigations tackles the hardest part of the incident and gets you from alert to resolution an order of magnitude faster.

A production harness for reliability agents

Investigations runs on a purpose-built harness that re-assesses as new signals land, builds findings from real evidence, and pressure-tests every hypothesis with an adversarial agent before it reaches you.

Investigations

Respond at a fundamentally different speed

With our agent scanning through logs, code, and context, your team can move at a speed that manual debugging alone couldn't match.

Triage quicker than ever

Triage quicker than ever

Before investigating, understand the severity, impact area, and if escalation is needed or you can relax.

Instant root cause analysis

Instant root cause analysis

When it's serious, Investigations has already gathered context to show what broke and why, so you start with real evidence.

Context-aware agent for debugging

Context-aware agent for debugging

Our agent works alongside you for the rest of the incident, running parallel analysis and surfacing things before you've thought to look.

Reduce the cost of incidents

The cost of an incident isn't just the downtime. It's everything around it: engineering hours, customer trust, and product velocity.

  • Fewer people pulled in
  • More time building
  • Less customer impact

Works with every agent in your stack

Investigations can hand off seamlessly to the agents and tools you already use: a coding agent, a support tool, anything connected via MCP. Our goal is humans and agents in lockstep, all the way to resolution.

Works with every agent in your stack

Contentful
Investigations drilled down into what changed in that pull request, connected it across multiple repositories, and arrived at the conclusion. Tracing all of those dots as a human would have been nearly impossible.

James Bourne

Platform Engineer, Contentful

GoCardless
On live incidents, it cuts out a huge amount of the initial toil in getting to the root cause. People have really got to the point where they can trust what the tool is telling them.

Russ Williams

Head of Operational Resilience & Incident Management, GoCardless


No more cold starts

The moment an incident is declared, Investigations has already done a first pass. Before anyone starts digging, you have a clear picture of what you're dealing with and where to start.

Every hypothesis names what broke, why, and how confident it is

Root cause hypothesis

You don't have to debug alone

You get an agent with full context on your environment that works with you, answering questions and running parallel analysis, across the whole investigation.

Query your code or telemetry via the agent using natural language, without leaving your terminal

Query telemetry

Built on the power of Nexus

Investigations runs on Nexus, our production intelligence model. It reasons across your entire environment in real time, so at 3am it can make high-conviction hypotheses on a system it knows inside out.

Learn more about Nexus
  • Has access to every piece of relevant context your team has ever produced

  • Reasons across telemetry, deployments, code, and incident history

  • Uses an adversarial agent to challenge its own conclusions before sharing

  • Gets smarter with every incident, the model learns which patterns repeat

Intelligence compounds

Every incident teaches it something. The more you use it, the smarter it gets.


Trusted when it matters most

Built for your most critical moments, with the accuracy, transparency, and data isolation enterprise teams require.
View our Vanta trust center

Measurably accurate

Measurably accurate

We backtest against real historical incidents daily, and alert on any degradation before it reaches you.

Evidence-backed audit trail

Evidence-backed audit trail

Every hypothesis links back to its sources and an investigation timeline lets you follow the agent's reasoning from first signal to final conclusion.

Your data stays yours

Your data stays yours

Every customer gets their own instance of Nexus, our production intelligence model, never shared with other customers.

SOC 2 compliant

SOC 2 compliant

Code analysis runs in isolated, sandboxed containers torn down after use, and we redact sensitive data before it ever reaches a model.

Zero data retention with model providers

Zero data retention with model providers

We have agreements with our providers so they can't store customer data for logging or training.

Never takes action without you

Never takes action without you

The only change Investigations can make to your systems is a pull request you review and merge yourself.

So good, you’ll break things on purpose

Ready to put AI to work on your incidents? Book a call with our team today.