Now accepting design partners
Incident Decision Support

A plan in hand
before the first call.

Where Response Begins

LastKnown gives security operators a real-time Immediate Action Plan the moment an incident begins — specific to their organization, their protocols, their people.

Request Access See How It Works
✦ Real-time action plans ✦ Organization-specific protocols ✦ Priority notification guidance ✦ Automatic incident documentation ✦ Similar incident search ✦ AWS encrypted infrastructure ✦ Real-time action plans ✦ Organization-specific protocols ✦ Priority notification guidance ✦ Automatic incident documentation ✦ Similar incident search ✦ AWS encrypted infrastructure
How It Works

Describe what you see. Get a plan in seconds.

No forms. No codes. No binder to search through. Type what's happening in plain language — LastKnown does the rest.

Step 01
Describe the incident
Type what you're seeing in plain language. No incident codes, no severity dropdowns, no structured forms. Just describe it the way you'd say it over the radio.
Step 02
Get your action plan
LastKnown matches your description to your organization's Emergency Response Plan and generates a prioritized Immediate Action Plan in seconds — specific to this incident, this location, your protocols.
Step 03
The report builds itself
Every action you confirm, every contact you notify, every update you log — timestamped automatically. When the incident closes, the report is already written. Court-ready. Audit-ready.
Who It's For

Built for every organization with a security function.

LastKnown works across verticals because the problem is the same everywhere — operators need a plan, fast, specific to their protocols.

🏢
Enterprise GSOC
Corporate security operations centers managing complex multi-site incidents with high-value assets and executive protection requirements.
🏥
Healthcare Security
Hospital security teams navigating Code Gray, infant abduction, combative patient, and active threat protocols with regulatory documentation requirements.
🎓
Education
K–12 and university security teams managing active threat, social media threat, and campus incidents. Built-in Clery Act documentation support for higher education.
🚔
Law Enforcement
Security operations supporting law enforcement agencies. CJIS compliance pathway with dedicated infrastructure per agency.
⛪
Faith Communities
Houses of worship, religious organizations, and faith-based institutions managing safety and security for congregants and staff.
+
Your Organization
If your team responds to incidents and needs to document them, LastKnown works for you. Request access to learn more.
Why LastKnown

The gap between the incident and the response is where things go wrong.

Every existing tool assumes the decision has already been made. LastKnown operates before that — at the moment the decision needs to happen.

📋
Your protocols, not generic advice
LastKnown matches every incident to your organization's own Emergency Response Plan. The actions it recommends come from your playbooks, not a generic template.
🕐
Seconds, not minutes
A plan is streaming to your operator before they finish reading the first action. No login delays, no form sequences, no manual lookup. Plain language in, action plan out.
📁
The report writes itself
Operators focus on the incident. The documentation builds in the background from every action they take. No reconstruction after the fact. No missing timestamps.
📈
Gets smarter with every incident
LastKnown surfaces similar incidents your organization has handled before — what worked, what didn't. Over time your playbooks improve from real response patterns.
📱
Web and mobile
Full operator workflow on desktop and iOS. Operators managing an incident on foot have the same capability as those at a fixed console.
🔒
Your data stays yours
Completely isolated environment per organization. Your incidents, contacts, and playbooks are never accessible to or shared with any other organization on the platform.
Infrastructure
100% AWS — US East region. No third-party services touching your data.
Encryption
AES-256 at rest with AWS KMS. TLS 1.3 in transit. No unencrypted connections.
Isolation
Dedicated database schema per organization. Row-level security enforced at the database layer.
Audit
Immutable audit log. Every action timestamped. AWS CloudTrail active. Available on request.

Request access to LastKnown.

LastKnown is currently available by invitation to design partners. Tell us about your organization and we'll be in touch.

Or email us directly at info@lastknown.ai