# Alarm Flood Triage

*/Opportunities/Alarm_Flood_Triage*

## Opportunity Overview

**Wedge**: Target mid-sized chemical refineries plagued by frequent nuisance alarms and subsequent unit trips. This niche provides acute financial motivation and standardized historian architectures for rapid proof of value. Expand from post-incident root cause analysis into real-time operator advisory, eventually capturing predictive maintenance budgets across broader heavy industry verticals.
**Timing**: Foundational models now possess the context windows and reasoning speeds required to parse massive volumes of industrial event logs and time-series metadata in seconds. Additionally, a generational retirement wave leaves control rooms staffed by junior operators who lack the decades of tribal knowledge previously relied upon to diagnose complex alarm cascades.
**Why This I C P**: Continuous process facilities like chemical plants and refineries incur massive financial penalties from unplanned downtime and safety incidents. They already centralize their operational data in plant historians, providing immediate and high-fidelity data feeds for integration.
**Size Of Prize**: Approximately 15,000 continuous process manufacturing and power generation plants operate globally. At an estimated annual spend of $50,000 per plant for advanced alarm management and operator advisory tools, the addressable market totals $750M.
**Gap Narrative**: Control room operators face overwhelming alarm floods during process upsets, often receiving hundreds of alerts per minute that obscure the root cause of the failure. Traditional alarm management software relies on static suppression rules and fails to dynamically identify the originating fault. Operators require a system that instantly collapses cascading operational alarms into a single actionable incident context.
**Defensibility**: Defensibility scales through deep workflow lock-in and the accumulation of plant-specific causal graphs. As the system processes historical and live alarm floods, it maps the unique physical interactions of the facility's equipment. This localized intelligence creates extremely high switching costs, as a new generic model cannot replicate the learned equipment relationships without access to the same proprietary operational history.
**Why This Thesis**: An agentic approach directly mitigates the acute cognitive overload operators experience during emergencies. Rather than presenting another software dashboard to interpret, an active agent parses the flood, suppresses downstream symptom alerts, and surfaces the specific malfunctioning asset requiring immediate intervention.

## Opportunity Linked Thesis

**Thesis**: [Service-as-Software](/Theses/Service-as-Software)

## Opportunity Linked I C P

**Icp**: [Petrochemical Refinery](/CompanyTypes/Petrochemical_Refinery)

## Opportunity Market Sizing

_Illustrative — target and order-of-magnitude estimate figures, not an achieved track record (this Thing is concept-stage)._

**S A M**: ~$100-150M US and European Tier-1 petrochemical facilities with modern distributed control systems
**S O M**: ~$10-25M
**T A M**: ~4000 global petrochemical and refining facilities x ~$75k/yr = ~$300M
**Growth Rate**: ~8-12%/yr, driven by retiring senior operators, increasing sensor density, and strict process safety management compliance mandates
**Paid Comparable Spend**: ~$50k-150k/yr per facility on periodic alarm rationalization consulting, static alarm management software licenses, and post-incident investigation labor

## Opportunity Incumbents

- [PagerDuty Event Intelligence](/Products/PagerDuty_Event_Intelligence) — Tool
- [Splunk Service Intelligence](/Products/Splunk_Service_Intelligence) — Tool
- [BigPanda Alert Correlation](/Products/BigPanda_Alert_Correlation) — Tool
- [IBM Tivoli Netcool](/Products/IBM_Tivoli_Netcool) — Tool
- [Prometheus Alertmanager](/Products/Prometheus_Alertmanager) — Open-Source
- [Custom Python Scripts](/Products/Custom_Python_Scripts) — DIY
- [Excel Incident Logs](/Products/Excel_Incident_Logs) — Spreadsheet

## Opportunity Win Conditions

**Kill Thresholds**:
- DCS integration requires > 14 days of custom engineering
- Operator acceptance rate of triage recommendations < 40%
- Pilot conversion rate < 25% after 60 days
- Sales cycle exceeds 120 days for Tier-1 facilities
**Leading Metrics**:
- Time-to-first-value via read-only DCS integration
- Percentage of secondary alarms automatically clustered during an upset
- Operator acceptance rate of triage recommendations
- Weekly active process engineers reviewing historical flood logs
**What Proves Right**: Shift operators rely on the product to suppress secondary alarms within 60 seconds of a plant upset. Facilities sign $50k annual contracts from safety management budgets after a 30-day read-only pilot. Process engineers log in weekly to review the clustered root-cause alarm reports.
**What Proves Wrong**: Plant managers refuse to connect the system to the live Distributed Control System due to read-only compliance rules. Operators ignore the triage interface and continue acknowledging alarms manually in the legacy console. The pilot phase stalls indefinitely waiting for safety committee approval.

## Opportunity Build Profile

**Hardest Part**: The single hardest part is deterministic causality extraction from noisy, unstructured log streams in real-time during an active flood, ensuring the root cause is never suppressed alongside symptomatic noise.
**Min Viable Scope**: Build ingestion for a single primary alerting tool and output a consolidated incident timeline with top-three probable root causes. Deliberately leave out automated remediation, complex multi-system correlation, and custom suppression rule builders.
**Cold Start Problem**: Models lack domain-specific topology and historical incident context for a new environment. Break this by ingesting historical ticketing and alert data during a read-only shadow period to train baseline groupings before enabling active suppression.
**Time To First Value**: 2-4 weeks of passive data ingestion
**Data Moat Available**: true
**Technical Difficulty**: High

## Neighborhood

### Where the gap lives

- [Instrumentation and control technicians](/Occupations/Instrumentation_and_control_technicians) — latent gap · Occupations

### Incumbent in

- [PagerDuty AIOps](/Products/PagerDuty_AIOps) — incumbent in · Products
- [Excel Incident Log](/Products/Excel_Incident_Log) — incumbent in · Products
- [Bespoke Python Scripts](/Products/Bespoke_Python_Scripts) — incumbent in · Products
- [Splunk Service Intelligence](/Products/Splunk_Service_Intelligence) — incumbent in · Products
- [BigPanda Alert Correlation](/Products/BigPanda_Alert_Correlation) — incumbent in · Products
- [IBM Tivoli Netcool](/Products/IBM_Tivoli_Netcool) — incumbent in · Products
- [Prometheus Alertmanager](/Products/Prometheus_Alertmanager) — incumbent in · Products

### Applies thesis

- [Petrochemical Refinery](/CompanyTypes/Petrochemical_Refinery) — applies thesis · CompanyTypes

### Embodies

- [Service-as-Software](/Theses/Service-as-Software) — embodies · Theses

### Similar Opportunities

- [SCADA Alert Triage Automation](/Opportunities/SCADA_Alert_Triage_Automation) — similar · Opportunities
- [SCADA Alert Engine](/Opportunities/SCADA_Alert_Engine) — similar · Opportunities
- [Tacit Knowledge Extraction for Chemical Plants](/Opportunities/Tacit_Knowledge_Extraction_for_Chemical_Plants) — similar · Opportunities
- [Cracking Unit Diagnostics](/Opportunities/Cracking_Unit_Diagnostics) — similar · Opportunities
- [SCADA Fault Diagnostics](/Opportunities/SCADA_Fault_Diagnostics) — similar · Opportunities
- [Refiner Tuning Agent](/Opportunities/Refiner_Tuning_Agent) — similar · Opportunities
- [Generative Shift Handovers for Refineries](/Opportunities/Generative_Shift_Handovers_for_Refineries) — similar · Opportunities
- [Autonomous Loop Tuning](/Opportunities/Autonomous_Loop_Tuning) — similar · Opportunities
- [Maintenance Diagnostics](/CompanyTypes/Industrial_Facility_Operator/Opportunities/Maintenance_Diagnostics) — similar · Opportunities
- [Data Center BMS Alarm Tuning](/Opportunities/Data_Center_BMS_Alarm_Tuning) — similar · Opportunities
- [Incident Triage Agent](/Opportunities/Incident_Triage_Agent) — similar · Opportunities
- [Predictive Audit Scoring for Refineries](/Opportunities/Predictive_Audit_Scoring_for_Refineries) — similar · Opportunities
- [Substation Alarm Hysteresis Optimization](/Opportunities/Substation_Alarm_Hysteresis_Optimization) — similar · Opportunities
- [Automated Incident Dispatch](/Opportunities/Automated_Incident_Dispatch) — similar · Opportunities
- [AI Incident Triage](/Opportunities/AI_Incident_Triage) — similar · Opportunities
- [AI Alert Aggregation](/Opportunities/AI_Alert_Aggregation) — similar · Opportunities
- [Autonomous SRE Responder](/Opportunities/Autonomous_SRE_Responder) — similar · Opportunities
- [Refinery Dynamic Deadband Adjustment](/Opportunities/Refinery_Dynamic_Deadband_Adjustment) — similar · Opportunities
- [Predictive Turnaround Scheduling](/Opportunities/Predictive_Turnaround_Scheduling) — similar · Opportunities
- [Turnaround Logistics Coordinator](/Opportunities/Turnaround_Logistics_Coordinator) — similar · Opportunities