Tech riderRev. 5 Oct 2026
DFIR-IRIS
- 1Runs onAPI, Linux, Mac, self-hosted, Web, Windows
- 2CostsFree plan
2 lines stated Written from the maker's own pages: dfir-iris.org
Overview
DFIR-IRIS is ranked #11 of 177 in case management software on Specifiction, made by DFIR-IRIS. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is a free plan.
DFIR-IRIS plans and pricing
All plansCompared on case management software
- Free plan
- Yesdfir-iris.org
Facts
- Purpose
- DFIR-IRIS is an open-source incident response platform for running investigations collaboratively in one workspace.dfir-iris.org · 5 Oct 2026
- Case management
- Cases organize assets, indicators of compromise, tasks, evidence and notes under one record with an audit trail.dfir-iris.org · 5 Oct 2026
- Alert triage
- Alerts from SIEM, EDR, MISP, IntelOwl or REST endpoints can be collected, triaged and promoted into cases.dfir-iris.org · 5 Oct 2026
- Evidence
- Evidence can be verified with SHA-256, MD5 or SHA-1, with access restrictions and logged downloads, views and changes.dfir-iris.org · 5 Oct 2026
- Collaboration
- War rooms provide real-time chat, threads, per-room teams and slash commands that record decisions and case actions.dfir-iris.org · 5 Oct 2026
- Reports
- Configurable Jinja templates can produce PDF or DOCX executive summaries, technical reports or court-ready documents.dfir-iris.org · 5 Oct 2026
- Integrations
- The site names IrisVT, IrisMISP, IrisCheck and IrisWebHooks modules, and describes a REST API and 162 hook binding points.dfir-iris.org · 5 Oct 2026
- Access control
- IRIS documents role-based permissions and case access controls with deny-all, read-only and full-access levels.docs.dfir-iris.org · 5 Oct 2026
- Deployment
- The documentation recommends Docker and Docker Compose; it says Linux and macOS are officially supported and Windows may need Dockerfile changes for file storage paths.docs.dfir-iris.org · 5 Oct 2026
- Release status
- The documentation identifies v3.0.0-beta.1 as the current v3 release and says beta versions are not production-ready.docs.dfir-iris.org · 5 Oct 2026
- Support
- The project lists getting-started help, support and implementation, and training, with details available by contacting [email protected].docs.dfir-iris.org · 5 Oct 2026
- Security guidance
- The project advises that IRIS should only be accessible in a restricted environment and says not to expose it on the Internet.docs.dfir-iris.org · 5 Oct 2026
- Organization history
- The project says the idea originated within Airbus Cybersecurity’s commercial CSIRT in France in 2019 and was released as open source in December 2021 with Airbus CyberSecurity’s agreement and support.blog.dfir-iris.org · 5 Oct 2026
Company
- Founded
- 2019dfir-iris.org · 23 Sept 2026
Best DFIR-IRIS alternatives
See all 20 All accessCh 01 Casebook AndroidAPI from $29/mo8.3 All accessCh 02 UiPath Maestro Case Management Free trialself-hosted 8.2 All accessCh 03 Socianote Free planAndroidiOS from $99/mo8.1 All accessCh 04 Collaborate AndroidAPI 8.0 All accessCh 05 IntegrityLog WebiOS 7.9 All accessCh 06 Appian Case Management WebiOS 7.9
Where it ranks on Specifiction
Is DFIR-IRIS yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- dfir-iris.org· checked 5 Oct 2026
- dfir-iris.org/features· checked 5 Oct 2026
- docs.dfir-iris.org/latest/operations/access_control/· checked 5 Oct 2026
- docs.dfir-iris.org/latest/getting_started/· checked 5 Oct 2026
- docs.dfir-iris.org/latest/support/· checked 5 Oct 2026
- docs.dfir-iris.org/latest/zqa/· checked 5 Oct 2026
- blog.dfir-iris.org/blog/iris_mid_year_summary/· checked 5 Oct 2026