Email Incidents — every issue as a lifecycle

Every issue as a story, not a stray alert. A raw feed of alerts tells you something happened; it doesn’t tell you whether this is the third time this month, whether your last fix held, or how long it’s been open. The Incident Center turns each problem into a coherent lifecycle you can actually investigate — and one that remembers its own history.

How it works

ToolTrusted groups the change events for each issue on a domain into an incident with a real lifecycle: opened → updated → resolved → reopened. Because it reads an immutable, replayable event history, each incident can derive its own lessons — is this issue chronic (keeps coming back), flapping (opens and closes rapidly), or was it first-pass resolved (the fix stuck)? That is context a mutable issue-tracker throws away.

Replayable and explainable. Incidents are a deterministic projection over the immutable alert log — reconstructable at any time, with every transition traceable to the measured signal and rule that caused it. Nothing is overwritten, so the story is always complete.

What you get

  • Open vs resolvedWhat needs investigation now, and what’s been put right — cleanly separated.
  • Lifecycle & durationWhen it opened, how long it’s been open, whether it reopened.
  • Auto-derived lessonsChronic, flapping and first-pass patterns surfaced from the full history.
  • Drill-downInvestigate straight to the scan and evidence behind any incident.

Where it fits

Incidents sit between watching and acting: they take the changes Monitoring detects and the patterns Analytics finds, and shape them into problems you can act on with Recommendations — or push straight to your team via Automation.

Free or Premium

Premium
The Incident Center is part of Premium’s intelligence layer. It’s independent, deterministic and evidence-backed — every incident is measured, never inferred, and we never claim to measure inbox placement (we track the infrastructure that determines it).

See your domain’s incidents