Keep

Alerts arrive from a dozen different tools, each with its own console. Keep is an open source AIOps and alert management platform that puts them behind a single pane of glass, where deduplication, enrichment, filtering and correlation happen in one place and integrations sync in both directions instead of only ingesting.

Automation is modeled on GitHub Actions. A workflow is a declarative YAML file with triggers that start it, an alert, an incident, a schedule or a manual run, steps that fetch data for context, and actions that do something, such as opening a Jira ticket, messaging a Slack channel or restarting a server. Conditions and loops steer the path, and results are written back onto the alert as enrichment.

The provider catalog is where most of the surface area sits.

• Observability: Datadog, Grafana, Prometheus, Sentry, New Relic, Dynatrace, Splunk, Zabbix and many more.
• Incident management: PagerDuty, OpsGenie, Grafana OnCall, Incident.io, Squadcast and others.
• Ticketing and chat: Jira, ServiceNow, GitHub, GitLab, Linear, Slack, Teams and Telegram.
• AI backends: Anthropic, OpenAI, Gemini, DeepSeek and local runners such as Ollama and LlamaCPP, used for correlation and summarization.

Deployment runs from Docker Compose locally to Kubernetes, AWS ECS and OpenShift, including air-gapped environments. Authentication covers SSO, SAML, OIDC and LDAP with role and attribute based access control, and the platform is documented as horizontally scalable for enterprise volumes.