Skip to content
SPECIFICTION
Get listed

FIM

achiefs.com

Free plan WindowsmacOSLinux

What it is

FIM is free, open-source software for monitoring file systems on premises. It watches files in the background, keeps historical information, emits events when changes occur, creates hashes, and analyzes content, attributes, ownership, and permissions. On Linux, the Audit daemon can identify who caused an event and which command produced it. Events may be written locally, sent over a network, or sent to both destinations. Documentation lists Elasticsearch 8.x or OpenSearch 2.x and Splunk indexer 9.x integrations, with only one integration active at a time. FIM runs on Linux, Windows, and macOS. Installation guidance lists Ubuntu Xenial or later, CentOS 7 or later, Windows 7 or Server 2016 or later, and macOS Big Sur or later. Minimum requirements are one CPU core, 128 MB memory, and 1 GB storage, with storage use increasing over time. The maker says support is free and provides an email contact.

Spec sheet

Purpose
FIM monitors file system changes in the background and keeps historical data about files.Read 4 Oct 2026 · documentation.achiefs.com
Integrations
The documentation lists Elasticsearch 8.x or OpenSearch 2.x and Splunk indexer 9.x, and says only one integration can be active at a time.Read 4 Oct 2026 · documentation.achiefs.com
Support
Achiefs invites users to contact [email protected] and says help is free.Read 4 Oct 2026 · achiefs.com
Change types
FIM can identify changes to file content, attributes, ownership, and permissions.Read 4 Oct 2026 · documentation.achiefs.com
Event destinations
Events can be written to a local file, sent over the network, or sent to both destinations.Read 4 Oct 2026 · documentation.achiefs.com
Event details
Using the Linux Audit daemon, FIM can identify who caused an event and which command produced it.Read 4 Oct 2026 · documentation.achiefs.com
Integrity checks
FIM automatically generates file hashes and analyzes file changes.Read 4 Oct 2026 · achiefs.com
Open source
The maker describes FIM as completely free open-source software.Read 4 Oct 2026 · achiefs.com
Real-time alerts
FIM emits events when monitored files change.Read 4 Oct 2026 · achiefs.com
Requirements
Minimum requirements are 1 CPU core, 128 MB memory, and 1 GB storage, with storage use increasing over time.Read 4 Oct 2026 · documentation.achiefs.com
Security configuration
The indexer endpoint's HTTPS certificate trust setting defaults to false for the insecure option.Read 4 Oct 2026 · documentation.achiefs.com
Supported systems
The installation guide lists Ubuntu Xenial or later, CentOS 7 or later, Windows 7 or Windows Server 2016 or later, and macOS Big Sur or later.Read 4 Oct 2026 · documentation.achiefs.com
Who it is for
The maker says it aims to provide file monitoring to secure endpoints around the world.Read 4 Oct 2026 · achiefs.com

Plans and prices

FIM Free Free open-source software; no usage limits stated Read 4 Oct 2026 · achiefs.com

Every FIM plan and price →

Strong points and limits

Strong points

  • Free open-source software
  • Tracks content, ownership, permissions, and attributes
  • Linux events can identify user and command
  • Local and network event destinations
  • Runs on Linux, Windows, and macOS

Limits

  • Only one integration can be active at a time
  • Storage use increases over time
  • Agentless monitoring is not available
  • On-premises deployment

Who it suits

FIM suits teams securing endpoints with on-premises monitoring across Linux, Windows, or macOS. It is also relevant when file-change events must feed a listed search or logging system.

Verdict

FIM offers broad file-change visibility without a listed usage charge. Confirm its single-integration constraint and growing storage requirement fit your deployment.

Where Specifiction places it

Alternatives to FIMAll alternatives →