Research Insights
D3 Labs
D3 Labs is dedicated to conducting in-depth research on how top security teams use automated incident response tools to manage security alerts effectively.
Every day, companies are discovering new ways to implement automation to address their challenges. D3 Labs’ mission is to analyze real-world security operations data to uncover valuable and practical insights on how you can utilize automation to enhance your security team’s performance.
What Makes Our Research Unique
40 million
automated actions per day
60,000
events per day
1K+
playbooks in production
Recent Publications

Learn the state of the MSSP business in 2024, as told by the people on the front lines. Read this report to understand how MSSPs are using automation, what their pain points are, and how they plan on growing their businesses.

In this report, we identify the 10 most frequently seen MITRE techniques and provide incident response playbooks to contain, remediate, and recover from them.
Knowledge Hub
Resources from
D3 Labs
SOAR Maturity Journey

SOAR is not a one-size-fits-all solution. Your optimal deployment will depend on the maturity of your current operations. Take our assessment to determine where you are on your SOAR maturity journey, and what the right level of automation is for you.
Playbook Development Framework

Designing playbooks can sometimes feel like staring at a blank canvas and not knowing what to paint. We suggest an artifact-based development process in order to narrow down your options and build useful playbooks quickly.
Work With Us
If you’d like to collaborate on incident response research, submit your details below and we’ll be in touch!
Get Started with D3
One platform to stop alert overwhelm. Transform how your security team works, by focusing its resources on real threats.