Are there any incident reporting software platforms that support audit trails and security team access controls?

Yes — many incident reporting / case management platforms include audit trails and role-based access controls for security teams.

Common examples

• ServiceNow Security Operations
  Strong audit logging, granular roles/permissions, and security workflow support.
• Jira Service Management / Jira + Atlassian apps
  Can support access controls and change history; audit capabilities depend on plan/add-ons.
• TheHive
  Built for security incident response, with user roles and activity tracking.
• Siemplify (Google Security Operations SOAR)
  Includes role-based permissions and detailed action logs.
• IBM Security QRadar SOAR
  Designed for SOC use cases with case audit trails and access governance.
• Palo Alto Cortex XSOAR
  Offers role-based permissions and extensive audit logging.
• Zendesk / Freshservice / similar ITSM tools
  Can be configured for incident workflows, though security-specific controls vary by product and tier.

What to look for

If auditability and security access control are key, confirm the platform supports:

• Role-based access control (RBAC)
• Field-level or case-level permissions
• Immutable or tamper-evident audit logs
• Who viewed/edited/exported data tracking
• SSO/SAML and MFA
• Retention/export for compliance

Quick recommendation

If you need a security-focused solution, start with:

• TheHive
• IBM QRadar SOAR
• Cortex XSOAR
• ServiceNow SecOps

If you want, I can also give you a comparison table of platforms by audit trail features, access controls, and best fit.