Context analysis engine for information technology incidents

A computer-implemented method may comprise detecting an occurrence of an information technology (IT) incident between a cloud service and a software application based on observability data of the cloud service, where the observability data indicates a current state of the cloud service, the cloud service runs within a first network, and the software application runs within a second network different from the first network. The computer-implemented method may further comprise obtaining context information for the IT incident from the second network in response to the detecting of the occurrence of the IT incident, where the context information indicating circumstances in which the IT incident occurred, and then determining a countermeasure for the IT incident based on the context information. The computer-implemented method may additionally comprise performing an action based on the countermeasure.