Incident Response AI Prompts
133 free, production-ready Incident Response AI prompts — copy-paste ready for ChatGPT, Claude, or Cursor. Every prompt ships with fill-in placeholders, a worked example, and production-safety notes, so you get a usable answer on the first try.
- Incident Response Beginner
Incident Glossary and Terminology Standardization Prompt
Build a shared incident-response glossary so severity labels, roles, and status terms mean the same thing across every team
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Service Dependency and Blast Radius Mapping Prompt
Map a service's upstream and downstream dependencies, identify single points of failure and shared-fate risks, and estimate the blast radius of each failure so the team can prioritize resilience work.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Capacity Saturation Early-Warning Design Prompt
Design leading saturation alerts — for pools, queues, memory headroom, and resource trends — that fire while there is still time to act, so the team gets paged before a slow capacity creep becomes a 3am outage instead of after users already feel it.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Intermediate
Change Freeze Decision Advisor Prompt
Decide whether to call a change/deploy freeze during or around an active incident — scope, duration, exceptions, and exit criteria — so responders stop adding variables to a live outage without needlessly halting unrelated safe work across the org.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Advanced
Circuit Breaker Configuration Advisor Prompt
Design circuit-breaker settings — thresholds, timeouts, half-open probes, and fallbacks — for a specific service dependency so a slow or failing downstream trips fast, sheds load, and recovers automatically instead of cascading into a full outage.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Intermediate
Health Check and Readiness Probe Designer Prompt
Design liveness, readiness, and startup probes for a service so orchestrators restart the genuinely dead, drain the not-yet-ready, and never kill a healthy-but-slow pod — eliminating the probe misconfigurations that turn a blip into a crash-loop outage.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Intermediate
Postmortem Meeting Facilitation Guide Prompt
Turn a raw incident timeline into a tightly-run, blameless postmortem meeting — agenda, timeboxes, facilitation scripts, and psychological-safety guardrails — so the review produces systemic learning instead of blame, drift, or silence.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Intermediate
Postmortem Quality Review Rubric Prompt
Score a finished postmortem against a rigorous rubric — blamelessness, timeline accuracy, depth of contributing factors, and action-item quality — so weak reviews get caught and improved before they are filed as organizational learning that no one can act on.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Advanced
Runbook-to-Automation Script Converter Prompt
Convert a manual incident runbook into a safe, idempotent automation script or ChatOps command — with guardrails, dry-run mode, confirmation gates, and rollback — so proven remediations execute reliably at 3am instead of being fat-fingered under pressure.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Intermediate
SLO Incident Dashboard Spec Generator Prompt
Specify a single incident-response dashboard for a service — the SLIs, burn-rate panels, saturation signals, and dependency health a responder actually needs at 3am — laid out so the first-on-call answers 'is it us, and how bad' in under a minute.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Beginner
Swarm vs Escalate Decision Guide Prompt
Give the first responder a fast rule for the early-incident fork: keep working it solo, pull in a swarm of experts, or escalate to a formal incident with a commander — so pages neither languish under one overwhelmed engineer nor over-mobilize the whole org for a blip.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Advanced
Blameless Postmortem Document Writer Prompt
Turn a messy incident timeline, chat logs, and metrics into a rigorous, blameless postmortem document — with contributing factors, corrective actions, and a narrative leadership actually reads — without assigning blame to individuals.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Advanced
Database Lock Contention Incident Diagnosis Prompt
Diagnose a live production incident where database lock contention, long-running transactions, or deadlocks are stalling queries and cascading into application timeouts — and decide what to safely kill or roll back without corrupting data.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Advanced
Disk Pressure Production Incident Triage Prompt
Rapidly diagnose and mitigate a live disk-full / disk-pressure incident on a production host or node — reclaim space safely, keep the service up, and avoid the classic mistake of deleting the wrong thing under pressure.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Advanced
OOMKilled Memory Exhaustion Live Incident Triage Prompt
Drive a fast, structured triage of a production memory-exhaustion incident — pods getting OOMKilled, hosts thrashing swap, the JVM/Node heap climbing — so the on-call separates a genuine leak from a load spike or a bad limit and picks the right mitigation without guessing.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Advanced
Message Queue Backlog and Consumer Lag Incident Triage Prompt
Triage a growing queue backlog or consumer lag incident — Kafka lag climbing, an SQS/RabbitMQ queue depth exploding, a DLQ filling — so the on-call decides whether to scale consumers, drain, drop, or replay without making data loss or duplicate-processing worse.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Advanced
p99 Tail Latency Spike Live Incident Diagnosis Prompt
Diagnose a live tail-latency incident where p99/p95 has spiked while averages look fine — separating a slow dependency, saturation, GC/lock contention, a hot shard, or a retry storm — so the on-call finds the real source instead of chasing green median dashboards.
- Claude
- ChatGPT
- Cursor
Open prompt - Incident Response Intermediate
Customer-Facing Incident Comms Writer Prompt
Draft honest, empathetic external incident communications — status-page posts and customer notices across the incident lifecycle — that acknowledge impact without over-promising, leaking internals, or admitting unverified fault, for a human and legal/comms to approve before publishing.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Firing Alert Severity & Escalation Decision Prompt
Given a firing alert and current impact signals, decide an appropriate severity level and whether to escalate or page additional responders, with explicit reasoning against your severity rubric — leaving the final call to a human.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
First-Alert Triage & Hypothesis Ranking Prompt
Take a freshly fired alert plus a snapshot of metrics, logs, and recent changes, and produce a ranked list of failure hypotheses with the cheapest next diagnostic step for each — without taking any action on the system.
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Incident Status Update for Stakeholders Prompt
Turn the current state of an active incident into clear, honest internal status updates tailored to leadership, support, and engineering audiences, with a consistent cadence and no over-promising — drafts only, for a human to review and send.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Log-Driven Incident Timeline Builder Prompt
Reconstruct a precise, normalized incident timeline from scattered logs, alert timestamps, deploy events, and chat messages — reconciling time zones and ordering correlated-but-not-causal events without inventing entries.
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
On-Call Shift Handoff Summary Builder Prompt
Compile a complete, skimmable on-call handoff from open incidents, recent alerts, ongoing mitigations, and watch items so the incoming engineer has full context — preserving every open thread and explicit owner without dropping risk.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Post-Incident Follow-Up Action Items Extractor Prompt
Convert a postmortem or RCA into a prioritized, deduplicated set of SMART follow-up action items — each tied to the contributing factor it addresses, with an owner role, effort estimate, and a guardrail against busywork that doesn't reduce recurrence risk.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Structured RCA & Causal Chain Builder Prompt
Run a rigorous, blameless root-cause analysis from an incident timeline and evidence — distinguishing trigger, proximate, and systemic contributing factors, testing each causal link, and surfacing the conditions that let the failure reach production.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Targeted Rollback Plan Generator Prompt
Produce a safe, ordered rollback plan for a suspect change during an incident — with preconditions, verification gates, data/migration risks, and an abort path — as a reviewable runbook a human executes, never auto-applied.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Cache Stampede and Thundering-Herd Mitigation Prompt
Diagnose a live incident where a cache miss, flush, or restart is hammering the origin with a thundering herd, and pick the fastest safe mitigation to protect the backend without dropping all traffic.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Cloud API Quota and Throttling Incident Triage Prompt
Triage a live incident caused by hitting a cloud-provider API rate limit or service quota, and decide whether to back off, request a quota increase, or shed the work driving the throttling.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Database Failover and Replication-Lag Decision Prompt
Decide during a live database incident whether to promote a replica, wait for the primary to recover, or hold — weighing replication lag, data-loss risk, and split-brain before you pull the trigger.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
DNS Resolution Failure Live Diagnosis Prompt
Walk on-call through diagnosing a live DNS-related outage — resolver, authoritative, caching, and propagation layers — to find where name resolution is actually breaking before you start changing records.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Emergency Load-Shedding and Rate-Limit Config Prompt
Design an emergency load-shedding or rate-limit change during an overload incident that protects the core service by dropping the least-valuable traffic first — with a clear rollback.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Expired TLS Certificate Incident Triage Prompt
Triage a live outage caused by an expired or mis-issued TLS certificate — identify every affected endpoint, the renewal path, and a safe emergency reissue plan without breaking pinning or chains.
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Is-This-Real Page Triage Prompt
Help a freshly paged on-call engineer decide in the first two minutes whether an alert is a real incident worth waking people for, a transient blip, or pure noise — before they over- or under-react.
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Incident Alert-to-Owning-Team Router Prompt
Take a freshly fired alert and route it to the team that actually owns the failing component, so the right responder is paged first instead of bouncing through three on-call rotations.
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Internal Tooling Outage Employee Comms Prompt
Draft clear, calm communications for an incident that only affects internal staff — CI/CD, VPN, SSO, deploy pipelines, internal dashboards — where the audience is coworkers, not customers.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Conference Bridge Noise Control Prompt
Restore signal on a chaotic major-incident voice or video bridge where too many people are talking over each other and decisions are being lost
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Incident Data Integrity Verification After Recovery Prompt
Verify that data is actually correct and consistent after a service is restored, before declaring the incident resolved, when an outage may have corrupted or skipped writes
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Incident Degraded-Mode Customer Tradeoff Prompt
Decide which features to intentionally shed to keep core service alive during an incident, and frame that tradeoff for customers and the business
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Deputy Commander Load-Sharing Prompt
Split incident command duties across a deputy, scribe, and comms lead when a single commander is overloaded on a large or fast-moving incident
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Incident Go/No-Go Mitigation Decision Prompt
Run a fast, structured go/no-go check before executing a risky mitigation during a live incident, when the fix itself could make things worse
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Incident Mid-Incident Scope Creep Control Prompt
Stop an active incident from sprawling into parallel investigations and opportunistic fixes that dilute the team and extend the outage
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Incident On-Call Fatigue Handoff During Prolonged Incidents Prompt
Manage responder fatigue and rotate the team safely during a multi-hour or multi-day incident so exhausted people do not make catastrophic mistakes
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Stand-Down and All-Clear Criteria Prompt
Decide whether an incident is genuinely resolved enough to declare all-clear and stand down responders, versus prematurely closing a still-fragile system
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Third-Party Status Triage Prompt
Triage during an active incident whether a third-party or SaaS provider degradation is actually your root cause, or a red herring distracting the team
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Comms Approval and Sign-Off Workflow Prompt
Design an approval workflow for incident communications that prevents unvetted external messaging without slowing the response to a crawl
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Incident First-Responder Quickstart Card Prompt
Generate a one-page quickstart card that walks a freshly paged first responder through the first ten minutes of an incident
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Follow-the-Sun On-Call Overlap Coverage Design Prompt
Design follow-the-sun on-call coverage with deliberate overlap windows so incidents never fall into a handoff gap across time zones
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Severity Misclassification Audit Prompt
Audit closed incidents to find where severity was over- or under-assigned and tighten the classification process
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Vendor SLA Accountability Review Prompt
Review a vendor-caused or vendor-involved incident to determine SLA breach, remedies owed, and corrective commitments to demand
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident War-Room Situation Board Design Prompt
Design a single-screen situation board that gives a war room shared awareness of an active incident at a glance
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
On-Call Compensation and Pay Policy Review Prompt
Review an on-call compensation policy for fairness, legal exposure, and alignment with actual paging load before rolling it out
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Customer Incident Comms Tone and Empathy Review Prompt
Review a customer-facing incident update for tone, empathy, accuracy, and over-promising before it is published
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Decision Log Rationale Capture Prompt
Turn a noisy incident channel into a structured decision log that records what was decided, by whom, and why
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Live Incident Evidence Preservation Checklist Prompt
Generate a checklist for capturing volatile diagnostic evidence during a live incident before it is lost to restarts or rotation
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Open-Loops and Follow-Up Tracker Prompt
Track unresolved questions, deferred tasks, and loose ends during a long-running incident so nothing is dropped at handoff or closure
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Merge and Deduplication Triage Prompt
Decide whether several open incidents or alerts share a root cause and should be merged into one major incident
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Incident Pre-Mortem Failure Mode Brainstorm Prompt
Run a structured pre-mortem before a risky launch or migration to surface failure modes and pre-stage mitigations
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Incident War-Game Injects and Curveball Designer Prompt
Design mid-exercise injects and curveballs that test how a team adapts when an incident scenario evolves under pressure
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Runbook Prerequisite and Access Audit Prompt
Audit a runbook for hidden prerequisites, missing permissions, and access dependencies that would block a responder mid-incident
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Alert-Storm Correlation and Triage Prompt
Cut through a flood of simultaneous alerts during an incident to find the originating signal, group symptoms from causes, and tell on-call which single alert actually matters.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Error-Budget Policy Enforcement Review Prompt
Design and pressure-test an error-budget policy that actually changes behavior—defining what happens when the budget is exhausted, who decides, and how feature work yields to reliability work.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Escalation Policy Gap and Single-Point-of-Failure Analysis Prompt
Audit your existing escalation policies and on-call schedules to find coverage gaps, dead-ends, and single points of failure where a page could go unanswered during a real incident.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Game-Day Hypothesis and Abort-Criteria Design Prompt
Structure a chaos game-day around a falsifiable steady-state hypothesis with explicit blast-radius limits and abort conditions, so you learn from controlled failure without causing a real outage.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Incident Commander Training Simulator Prompt
Run a branching, text-based incident simulation that puts a trainee incident commander through a realistic SEV with injects, forcing real decisions on delegation, comms, and escalation while you grade them.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
On-Call Runbook Authoring Standard Prompt
Define a house style and quality bar for writing operational runbooks so every page links to a clear, copy-pasteable, low-ambiguity procedure an exhausted on-call can follow at 3 a.m.
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
SEV Downgrade and Incident Closure Criteria Prompt
Build objective, signal-based criteria for when an active incident can be downgraded in severity and formally closed, so incidents end on evidence rather than optimism or fatigue.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
War-Room Scribe and Live Timeline Capture Prompt
Act as a dedicated incident scribe that turns the chaotic war-room chat into a clean, timestamped decision-and-action log in real time, freeing the IC to command instead of taking notes.
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Incident Chat-Log Auto-Summarizer Prompt
Turn a raw, messy incident Slack/Teams channel transcript into a structured, timestamped summary — decisions, owners, mitigations, and open questions — ready to paste into a postmortem draft.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Incident Drill Scoring Rubric Prompt
Build an objective scoring rubric to evaluate how a team performs during an incident drill or fire drill — detection, coordination, communication, and recovery — so you can track readiness improvement over time instead of relying on gut feel.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Live Incident Hypothesis Tracker Prompt
Keep a live incident's debugging organized — track every hypothesis, the evidence for and against it, what's been ruled out, and the next highest-value experiment — so the team converges on the cause instead of chasing in circles.
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
On-Call Shadow and Mentorship Program Prompt
Design a structured shadow-and-reverse-shadow program that ramps new engineers onto the on-call rotation safely — with milestones, sign-off criteria, and mentor responsibilities — so nobody carries the pager unprepared.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
PagerDuty Escalation Policy Config Generator Prompt
Translate your team's on-call intent into concrete PagerDuty (or Opsgenie) configuration — services, escalation policies, schedules, urgency rules, and event-rule routing — as ready-to-apply config with the rationale spelled out.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Recovery Smoke-Test Suite Generator Prompt
Generate a fast, scriptable smoke-test suite that proves a service is genuinely healthy after a mitigation or restart — covering critical user journeys, data integrity, and downstream dependencies — before you declare an incident resolved.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Runbook Dry-Run Validation Prompt
Stress-test a runbook before you trust it in a real incident — walk each step for ambiguity, missing preconditions, dangerous commands, and dead ends — so it actually works at 3am under pressure.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
SLA Breach and Service-Credit Calculator Prompt
Compute customer-facing SLA impact after an incident — downtime windows, affected tenants, breached commitments, and owed service credits — and draft a defensible, contract-aligned breakdown.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Acknowledgment SLA Compliance Audit Prompt
Audit how reliably your on-call program meets page-acknowledgment and first-response SLAs, find where the clock is slipping, and design enforceable targets per severity.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Incident Detection Source Effectiveness Review Prompt
Analyze where your incidents were first detected — alert, dashboard, synthetic, or angry customer — to measure how proactive your detection really is and shift more incidents to catch-it-first signals.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Recovery Verification Checklist Prompt
Build a rigorous all-clear checklist so an incident is declared resolved only after recovery is verified end-to-end — not just when the obvious symptom disappears.
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Incident Stakeholder Communication Map Prompt
Build a stakeholder map for major incidents so the right people are informed at the right depth, with clear owners, channels, and triggers — before the incident, not during the scramble.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Incident Tooling Consolidation Audit Prompt
Audit the sprawl of paging, chat, ticketing, status-page, and runbook tools used during incidents, then design a consolidated, integrated toolchain that removes friction and context-switching.
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Incident Update Cadence Planner Prompt
Design a severity-driven update cadence for active incidents so stakeholders get predictable, right-sized updates without the incident commander improvising timing under pressure.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Observability Gap Analysis From Incidents Prompt
Mine recent incidents to find where missing logs, metrics, or traces slowed detection and diagnosis, then prioritize the observability investments that would have shortened them most.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Runbook Freshness and Decay Audit Prompt
Audit your runbook library for stale, broken, and untrusted procedures, then design a freshness program so on-call engineers can rely on runbooks instead of working around them.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Disaster Recovery Gameday and RTO Validation Prompt
Design a disaster-recovery gameday that actually validates your RTO/RPO by restoring from backups and failing over for real — instead of the tabletop fiction that backups 'probably' work.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Feature-Flag Kill-Switch and Fast-Mitigation Design Prompt
Design the feature flags and kill switches that let you mitigate an incident in seconds without a deploy — and audit your existing flags for the ones that will fail you the moment you need them.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
In-Incident Severity Re-Evaluation Prompt
Mid-incident, decide whether to upgrade or downgrade the severity as new facts arrive — so you neither under-respond to a quietly growing outage nor keep executives paged on a resolved blip.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Live Incident Log and Telemetry Correlation Assistant Prompt
Pull a coherent narrative out of scattered logs, metrics, traces, and deploy events during an active incident — surface the likely trigger and the smallest set of signals worth chasing first.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Multi-Region Failover Decision Playbook Prompt
Build a pre-decided playbook for whether and when to fail traffic to another region during an incident — including the cutover steps, the data-consistency traps, and the criteria for failing back.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Near-Miss and Close-Call Capture Program Prompt
Design a lightweight program to capture the incidents that almost happened — the silent saves, the caught-in-staging bugs, the lucky timing — and turn them into reliability signal before they become outages.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
On-Call Schedule Fairness and Coverage Optimizer Prompt
Audit and redesign an on-call rotation so coverage is reliable and the load is distributed fairly — accounting for time zones, page volume, seniority, and the people quietly carrying more than their share.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Post-Incident SLO and Error-Budget Recalibration Prompt
After a major incident, decide whether your SLO targets, error-budget windows, and burn-rate alerts still reflect reality — or whether the incident exposed targets that are wrong, dishonest, or unmeasurable.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Regulatory and Contractual Breach Notification Drafting Prompt
During or after an incident with data-exposure or availability implications, draft the time-bound notifications you owe to regulators and contractual customers — accurately, defensibly, and without over-committing.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
ChatOps Incident Automation Bot Workflow Prompt
Design an incident-management ChatOps bot that spins up the channel, pages the right people, tracks state, posts the timeline, and drives the incident lifecycle from declare to resolve — so responders coordinate in chat instead of fighting tooling.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Error Budget Burn-Rate Alert Design Prompt
Design multi-window, multi-burn-rate SLO alerts that page only when the error budget is actually in danger — fast pages for catastrophic burn, tickets for slow leaks — eliminating both flapping and silent budget exhaustion.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Incident Financial Impact Quantification Prompt
Turn an incident's duration and blast radius into a defensible dollar figure — lost revenue, SLA credits, engineering time, and reputational drag — so leadership can prioritize reliability investment.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Noisy-Neighbor and Resource Contention Diagnosis Prompt
Diagnose incidents where a service degrades not from its own bug but from resource contention — a noisy neighbor, CPU/IO/connection-pool exhaustion, or a shared-tenancy hotspot starving everyone else on the node or cluster.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Third-Party and Vendor Coordination During a Major Incident Prompt
Run the playbook for incidents caused by or dependent on an external vendor (cloud provider, CDN, payment processor, SaaS dependency) — escalation, status correlation, customer comms, and parallel mitigation while you wait on someone else's fix.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Runbook-to-Automation Toil Reduction Prompt
Turn a manual on-call runbook into safe, progressively-automated remediation — identifying which steps to auto-run, which to keep human-gated, and how to ship self-healing without building a system that confidently breaks production.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Post-Incident Customer Trust Recovery Plan Prompt
Plan the days-after-the-incident customer recovery: the public post-incident report, proactive outreach to the most-affected accounts, credit decisions, and the credibility-rebuilding follow-through that turns a bad outage into retained trust.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Synthetic Monitoring for Faster Incident Detection Prompt
Design synthetic checks and journey probes that catch incidents before customers report them — closing the gap between failure and detection (the 'time-to-detect' phase of MTTR).
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Alert Fatigue and Pager Noise Reduction Audit Prompt
Audit your firing alerts to find the noisy, non-actionable, and duplicate pages that erode on-call trust — then cut, tune, or route them so every page that survives demands human action.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Graceful Degradation and Degraded-Mode Playbook Prompt
Design degraded-mode playbooks that keep core functionality alive when a dependency fails — feature flags to shed, fallbacks to serve, and explicit triggers for entering and exiting reduced service.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Commander Handoff for Long-Running Incidents Prompt
Build a clean IC-to-IC handoff for multi-hour or overnight incidents so context, decisions, and open threads transfer without dropping the ball or re-litigating settled calls.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Incident Response Maturity Readiness Audit Prompt
Assess your incident-response program against a maturity model across detection, response, comms, learning, and tooling — then get a prioritized 90-day improvement roadmap.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Response On-Call Onboarding Curriculum Prompt
Design a structured, week-by-week onboarding curriculum that takes a new engineer from zero to confident shadow-to-primary on-call, with shadowing milestones, reading lists, and a sign-off checklist.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Tabletop Exercise Script Builder Prompt
Generate a discussion-based tabletop exercise — injects, facilitator script, decision points, and a hotwash debrief — to stress-test your incident process without touching production.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Live Incident Executive Briefing Generator Prompt
Turn the noisy incident channel into a crisp, recurring executive briefing — current impact, what we know, what we're doing, and the next update time — without leaking raw engineering chatter to leadership.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Similar Past Incidents Finder Prompt
During or after an incident, mine your postmortem archive for prior incidents with the same fingerprint — symptoms, service, root cause family — so you reuse known mitigations instead of rediscovering them.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Alert Triage Decision-Tree Builder Prompt
Turn a noisy alert stream into a deterministic, branching triage decision tree that any on-call engineer can follow to classify, route, and act on alerts in under a minute.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Corrective Action Remediation Prioritization Prompt
Turn a messy list of post-incident action items into a prioritized, sequenced remediation plan that balances risk reduction against engineering cost and prevents the same failure from recurring.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Customer Impact Assessment During an Active Incident Prompt
Rapidly quantify who and what is affected during a live incident — segments, transactions, revenue, and SLA exposure — so severity, comms, and prioritization are grounded in real blast radius rather than gut feel.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Data-Loss and Data-Corruption Incident Runbook Prompt
Produce a careful, step-by-step runbook for handling a live data-loss or data-corruption incident — stopping the bleeding, preserving evidence, validating backups, and recovering without amplifying the damage.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Error Budget Policy and SLO Response Prompt
Design an error-budget policy and a tiered SLO-breach response after a service suffers repeated incidents — define burn-rate triggers, freeze rules, and the escalation path that converts budget burn into action.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Escalation Matrix and On-Call Policy Builder Prompt
Design an escalation matrix and on-call escalation policy that routes incidents to the right responder at the right time, with sane timeouts, fallbacks, and severity-based skip-levels so nothing dies unacknowledged at 3am.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Five Whys and Causal Tree Analysis Prompt
Drive a disciplined contributing-factors analysis using 5 Whys and causal trees that resists single-root-cause oversimplification and exposes the multiple interacting factors behind a failure.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
GameDay Chaos Scenario Design Prompt
Design a safe, hypothesis-driven GameDay or chaos-engineering exercise grounded in your real incident history — with steady-state metrics, fault injections, blast-radius limits, abort criteria, and learning goals.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Action Item Tracking Prompt
Turn postmortem findings into tracked, accountable action items that actually get done — with clear owners, acceptance criteria, prioritization, and a cadence that closes the loop instead of letting them rot.
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Incident Bridge Facilitation Script Prompt
Generate a facilitation script that keeps a live incident bridge (conference call) focused, time-boxed, and productive — controlling cross-talk, driving updates, and capturing decisions in real time.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Metrics Trend Analysis Prompt
Analyze a portfolio of past incidents to surface MTTR, MTTD, and frequency trends, segment by service and cause, and recommend the highest-leverage interventions to bend the curves.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Severity Classification Rubric Prompt
Design a clear, defensible SEV classification rubric that on-call engineers can apply in seconds under pressure — with crisp boundaries, escalation triggers, and downgrade rules.
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
Incident Status Page Communications Prompt
Draft clear, honest, and consistent status-page updates and customer comms across the lifecycle of an incident — from investigating to resolved — without over-promising or leaking internals.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Incident Timeline Reconstruction Prompt
Reconstruct an accurate, evidence-backed incident timeline from scattered logs, deploys, pages, and chat — disambiguating timezones and correlating cause with effect for the postmortem.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Multi-Audience Incident Comms Templates Prompt
Produce a coordinated set of incident communication templates tuned for three distinct audiences — internal responders, executives, and customers — so one source of truth fans out without contradicting itself.
- Claude
- ChatGPT
Open prompt - Incident Response Beginner
On-Call Handoff Workflow Design Prompt
Design a crisp on-call shift handoff that transfers context, open incidents, and watch-items without dropping the ball — plus a sustainable rotation that fights burnout.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
On-Call Health and Burnout Review Prompt
Assess on-call load and burnout risk from incident and paging data, identify the noisiest sources and most-burdened engineers, and recommend concrete changes to make the rotation humane and sustainable.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Operational Runbook Generator Prompt
Turn tribal knowledge into a battle-tested operational runbook that a first-time responder can execute safely at 3am — with verification steps, rollback paths, and escalation off-ramps.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Paging Policy and Escalation Tuning Prompt
Audit and redesign PagerDuty/Opsgenie escalation policies to cut needless 3am pages while guaranteeing real incidents always reach a human fast — balancing reliability against on-call health.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Rollback vs Fix-Forward Decision Framework Prompt
Build a fast, defensible decision framework for the highest-pressure call in an incident — roll back or fix forward — weighing reversibility, blast radius, data implications, and confidence so the IC decides in minutes, not by debate.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Runbook Gap Analysis From Incidents Prompt
Mine past incidents to find where responders lacked a runbook, where existing runbooks failed, and produce a prioritized list of runbooks to write or fix — with the specific steps each one needs.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
Security Breach Incident-Response Runbook Prompt
Generate a security-breach response runbook structured around containment, eradication, and recovery — with evidence preservation, scoped isolation, and legal/notification gates so a breach is handled without destroying forensics or tipping off the attacker.
- Claude
- ChatGPT
Open prompt - Incident Response Advanced
SEV1 Incident-Commander Live Playbook Prompt
Generate a minute-by-minute live playbook the incident commander runs during an active SEV1 — from declaration through stabilization — keeping coordination, comms, and decisions on rails under pressure.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
War-Room Roles and Responsibilities (ICS) Prompt
Define a clear ICS-style role assignment for an incident war room — incident commander, ops lead, comms, scribe, liaison — with explicit responsibilities, handoffs, and span-of-control so nobody freelances during a major incident.
- Claude
- ChatGPT
Open prompt - Incident Response Intermediate
Kubernetes Pod Crash Diagnosis Prompt
Diagnose CrashLoopBackOff, OOMKilled, ImagePullBackOff, and stuck pods from kubectl output.
- Claude
- ChatGPT
- Cursor
Open prompt
About these Incident Response AI prompts
This is a free, curated collection of Incident Response AI prompts for DevOps and platform engineers — prompt templates that turn Claude, ChatGPT, or Cursor into a focused Incident Response assistant. Instead of re-explaining your setup every time, each prompt has fill-in placeholders, a realistic worked example, and explicit safety and back-out notes, so it's safe to use against production Incident Response.
Browse all 133 above, or explore the wider Incident Response prompts and troubleshooting guides, the full DevOps AI prompt library, and run or compare any prompt live in the Prompt Workspace. Hit a production issue instead? Try the free Incident Assistant.