IncidentWatch reviews the previous 15 minutes of support tickets every five minutes, looking for spikes in reports about the same issue. It alerts the on-call support engineer with the apparent issue, matching-ticket count, and examples. The engineer decides whether the reports indicate an incident; IncidentWatch holds tickets that clearly match it.
After an incident is resolved, IncidentSweep identifies related tickets, sets aside cases it cannot confidently connect to the incident, and presents the proposed batch and exact message to an engineer for review and approval. xAI says that on September 18, 2026, an engineer reviewed and approved a batch in which IncidentSweep cleared 204 tickets in about 10 minutes. The system sends in small batches, records actions, does not add tickets after approval, and stops and reports if something fails.