Incident-first observability for your apps and your AI

Every signal becomes
an incident someone owns.

  • Every alert opens an incident with an owner
  • P95, error rate and requests across every product
  • From the slow trace to the log line that names the cause
  • Cost per AI call, per model, product and environment
  • Agent runs traced step by step, tool by tool
  • On-call rotations and overrides, assigned automatically
  • Alert rules armed within sixty seconds of saving
  • Scanner findings from GitHub, Snyk and SonarQube as incidents
  • Customer feedback tied to the exact request
  • SSO for every organisation, isolation audited three times
  • OpenTelemetry-native
  • Python: one line
  • Every OTel language
  • Logs, Kubernetes, cloud metrics via the Collector
  • Security findings as incidents
  • MCP for AI assistants

Your customer waits while you switch tabs.

Stop switching tools. Start closing incidents.

  • Monitoringa separate tool today
  • Paginga separate tool today
  • Logsa separate tool today
  • AI costa separate tool today
One incidentthe alert, the owner, the trace, the log and the cost

The practiceEverything points at one incident.

APM on one side, AIPM on the other, the incident in the middle.

  • Incident workflow

    • On-callOwners, rotations, overrides

      Who is on for each product right now, and who covers when they are out.

    • IncidentsTimeline, owner and evidence

      Severity, status, assignee, ordered updates and the linked alerts, on one page.

    • Alert RulesAlert rules in plain language

      Armed within sixty seconds of saving. A firing rule opens the incident.

  • APMApplication observability

    • TracingTraces, logs and sessions

      One dataset: from the slow trace to the log line that names the cause.

    • TracingLatency and error rate

      P95, error rate and requests across every product, at a glance.

    • TracingcomingFull-Request Tracing

      Every hop from the Python one-liner: database, HTTP, cache and queue.

    • ErrorsError Pinpointing

      Where in the request it failed, with the stack trace.

    • ErrorsError Grouping

      Thousands of identical errors into one group, with an owner.

    • ErrorscomingIncident Grouping

      One root cause, one page, one owner.

    • ErrorscomingCode Context

      A stack frame linked to its line on GitHub.

    • InfracomingOne Key for Your Cluster

      Kubernetes and infrastructure metrics, visible and alertable.

    • ReliabilitycomingSmart Baselines

      Anomaly alerts that learn normal, with no thresholds to tune.

    • ReliabilityIncident Scorecard

      Whether the incident function is actually working, in numbers.

  • AIPMAI observability

    • Usage & CostCost per AI call

      Tokens from the provider, cost computed server-side, per model, product and environment.

    • Usage & CostAI Spend Control

      Budgets, allocation and a forecast.

    • Usage & CostcomingEnterprise AI Usage

      What the company actually uses, including keys nobody registered.

    • AgentsAgent runs as traces

      Agent, step and tool spans in the same tree as the request that started them.

    • AgentsAgent Reliability

      A stuck agent becomes an incident.

    • AgentscomingEnterprise AI Gateway

      Every AI call in the organisation, with no code change.

    • QualityFeedback tied to the trace

      Thumbs and comments linked to the exact request that produced them.

    • QualitycomingAI Quality Watch

      Quality regressions become incidents.

    • QualitycomingAI Safety Signals

      PII, injections and refusals, filed into the incident queue.

  • Platform & security

    • API KeysOne key, one line

      The key decides tenant, product and environment. Python needs one line.

    • ConnectorsSlack, Teams, PagerDuty, webhooks

      The page reaches people where they already work, and every action is logged.

    • SecuritySecurity findings as incidents

      Scanner findings and platform misuse, filed into the same queue.

    • Audit TrailAudit trail on everything

      Every key minted, role changed and incident resolved, streamed or pulled.

    • PlatformSSO, roles, isolation

      SAML SSO for every organisation, owner and member roles, isolation audited three times.

Product tourIncident management, from first alert to root cause.

Six screens, in the order an incident actually runs.

The 30-second situation report

The on-call opens the platform and knows in thirty seconds what is wrong and who owns it.

live
Overview: six products, error rate and P95 over the SLA, AI cost, feedback, and a Needs attention list with one acknowledged critical incident and two unassigned ones.

AIPMAI observabilityEvery AI call, in the same trace as the request.

The request, the agent that handled it, every tool it called and every model call inside them: one waterfall, parent to child.

Usage & Cost

  • Cost per callliveTokens from the provider, cost computed server-side, per model, product and environment.
  • AI Spend ControlliveBudgets, allocation and a forecast.
  • Enterprise AI UsagecomingWhat the company actually uses, including keys nobody registered.

Performance & Reliabilityagent observability

  • Agent runs as tracesliveAgent, step and tool spans in the same tree as the request that started them.
  • Agent ReliabilityliveA stuck agent becomes an incident.
  • Enterprise AI GatewaycomingEvery AI call in the organisation, with no code change.

Quality & Safety

  • Feedback tied to the traceliveThumbs and comments linked to the exact request that produced them.
  • AI Quality WatchcomingQuality regressions become incidents.
  • AI Safety SignalscomingPII, injections and refusals, filed into the incident queue.
AI usage for the route optimizer: 600 thousand tokens and $1.60 across two models, with cost per call.
Trace waterfall for a failed checkout: the request, the order write, a database connection wait that timed out after 5000 ms with an exception marker, a model call inside an agent span, and a retry.

APMApplication observabilityTracing and error grouping, paged to the owner.

The waterfall is live for every request today, with an exception marker and the stack trace on the failing span.

Tracing & Performancedistributed tracing

  • Traces, logs and sessionsliveOne dataset: from the slow trace to the log line that names the cause.
  • Latency and error rateliveP95, error rate and requests across every product, at a glance.
  • Full-Request TracingcomingEvery hop from the Python one-liner: database, HTTP, cache and queue.

Errors & Debuggingerror tracking

  • Error PinpointingliveWhere in the request it failed, with the stack trace.
  • Error GroupingliveThousands of identical errors into one group, with an owner.
  • Incident GroupingcomingOne root cause, one page, one owner.
  • Code ContextcomingA stack frame linked to its line on GitHub.

Infrastructure & Reliability

  • One Key for Your ClustercomingKubernetes and infrastructure metrics, visible and alertable.
  • Smart BaselinescomingAnomaly alerts that learn normal, with no thresholds to tune.
  • Incident ScorecardliveWhether the incident function is actually working, in numbers.
Trace waterfall for a failed checkout: the request, the order write, a database connection wait that timed out after 5000 ms with an exception marker, a model call inside an agent span, and a retry.

Trace waterfall liveException marker live

MCPConnector for AI assistantscomingYour AI assistant works the incidents.

Ask Claude, ChatGPT, Cursor or any other agentic tool what is open and who has it, and get the answer from live incident data.

Chat preview: an assistant is asked what is open on checkout-api and answers with the critical connection-pool incident, its owner Marcus Lindqvist, and its age of 41 minutes.

Things to ask

  • “What is open on checkout-api?”
  • “Who has it?”
  • “Acknowledge the checkout-api incident for me”
  • Read incidents, alerts, traces and logscoming
  • Acknowledge and annotate with scopes, every action auditedcoming
  • Listed in the Claude connectors directorycoming
  • Listed for ChatGPT and Cursorcoming

One key, one lineOpenTelemetry for every language you run.

Python and Node.js in one line today, Go next. Every other language through its OpenTelemetry exporter, same key.

  1. Create a product
    Name the thing you want to watch.
  2. Copy your key
    One per environment. Shown once.
  3. Add one line
    The init call in Python, or one start flag in Node.js.
  4. Watch it turn active
    Your product card goes green on the first span.
# in your app's environment
$ pip install indratrace
app.py
from indratrace import init_observability

init_observability(api_key="it_live_…")
# that's it: HTTP spans, model tokens and logs, one trace tree
# in your app's environment
$ npm install indratrace
start your app
INDRATRACE_API_KEY="it_live_…" \
  node --import indratrace/register app.js
# that's it: HTTP spans, model tokens and logs, one trace tree
.env
# any OpenTelemetry SDK or the Collector: the same key, as an OTLP header
OTEL_EXPORTER_OTLP_HEADERS="x-indratrace-key=it_live_…"
  • Pythonone line
  • Node.jsone line
  • Goone linecoming
  • Javavia OpenTelemetry
  • .NETvia OpenTelemetry
  • Rubyvia OpenTelemetry
  • PHPvia OpenTelemetry
  • OpenTelemetryany OTLP exporter

Plain OTLP over HTTP, and the SDK is Apache-2.0. The whole configuration is one API key. No endpoint, no product name, nothing else to set: the key says which product, which environment, and whose.

Beyond your code

Log files, Kubernetes and cloud metrics through the OpenTelemetry Collector with the same key.

  • Log files through the CollectorliveTail the log files on any host and ship them with the same key.
  • One Key for Your ClustercomingKubernetes and cloud metrics, visible and alertable.

ConnectorsEverything becomes an incident.

Notify the team where it works, take scanner findings in as incidents, and stream the audit trail to your SIEM.

Notify

Out to where the team already works.

  • Slack
  • Microsoft Teams
  • PagerDuty
  • Webhook

Findings in

Scanner findings, filed as incidents.

  • GitHub
  • GitLab
  • Snyk
  • SonarQube
  • Wizcoming
  • CrowdStrikecoming

Audit out

The audit trail, streamed to your SIEM.

  • Splunk
  • Microsoft Sentinelcoming
  • Datadogcoming
  • Elasticcoming
  • Sumo Logiccoming

Audit log API

Pull the audit trail on your schedule, from behind your firewall.

  • Pull API
  • Data export

ComparedWhy not another observability platform?

Most platforms are a dozen products on a dozen meters. IndraTrace is one incident, one meter, one key.

Typical observability platformIndraTrace
PricingPer host, plus a meter for each productA platform fee plus what you ingest
Where an incident livesA separate product beside the dashboardsThe front page, with the on-call assigned automaticallylive
AI callsAn add-on, metered in its own creditsThe same trace tree as the request, with cost per calllive
LanguagesA vendor agent per languageOpenTelemetry-native, one keylive
Security findingsA different tool and a different queueIncidents with owners, in the same queuelive
AI assistant accessAn assistant inside their own screensAn MCP connector with scopes and auditcoming
SetupAn agent on every hostOne line in the app, or one Collector keylive

TrustSecurity questions, answered before the call.

Encryption, isolation, access and retention: what your security review asks, on the page.

  • Encrypted and isolated
    • Encrypted in transit and at rest
    • Per-organisation isolation, audited three times
  • Access you control
    • SSO for every organisation
    • Payload capture off by default
  • Kept as long as you say
    • Retention per organisation
    • comingSOC 2 in progress

PricingPay as you goPay for what you send. Nothing per host, seat or tag.

A flat platform fee, then ingest and retention by the gigabyte. The meter is on the page, not in a sales call.

  • Platform feereading the rate cardper month, with the first gigabytes and unlimited team members included
  • Ingestreading the rate cardon the gigabytes above the included ones, priced in bands
  • Retentionreading the rate carda window is included; keep data longer and it is a per-GB add-on, only on the days the longer window is in force
  • Pay as you go: billed after the usage month, never in advance
  • No per-host or per-seat charges
  • Retention you can widen mid-month and pay for by the day
  • One bill, three lines, every month

FAQQuestions we get asked.

Straight answers on setup, pricing, security and what is coming next.

Is it Python only?

No. Python and Node.js are one line with auto-instrumentation, and Java, .NET, Go, Ruby and PHP send through their standard OpenTelemetry exporter with the same key.

  • Every OTel language, one key live
How is it different from other observability platforms?

Most platforms are a dozen products on a dozen meters. IndraTrace is one incident, one meter, one key: the incident is the front page, the bill is a platform fee plus what you send, and setup is one line.

  • Incidents with timeline, owner and evidence live
Where is it hosted and where does data live?

IndraTrace is a hosted service. Each organisation's data is isolated from every other's, with that isolation audited three times; it is encrypted in transit and at rest, and kept for the retention your organisation sets.

  • Isolation, encryption and retention live
Can our AI assistants and agents use it?

Agent runs are traced today. An MCP connector for AI assistants is coming: read incidents, acknowledge and annotate with scopes, and every action audited.

  • Agent runs as traces live
  • MCP connector for AI assistants coming
What do we pay for?

Three lines on one bill: a platform fee, ingest by the gigabyte above what the fee includes, and retention if you keep data longer than the included window. Unlimited team members, and nothing per host.

Do we need an agent on every host?

No. One line in the app, or one key in the OpenTelemetry Collector for log files. Kubernetes and cloud metrics through the same Collector and key are coming.

  • Log files through the Collector live
  • One Key for Your Cluster coming
How do security findings become incidents?

Findings from GitHub, GitLab, Snyk and SonarQube post in as security incidents with an owner, in the same queue as operational ones. Wiz and CrowdStrike are coming.

  • Scanner findings as incidents live
  • Wiz and CrowdStrike coming

Three lines, and your first trace is on screen.