Skip to content
SPECIFICTION
Get listed

Forendi

forendi.com

From $199/mo Free trial WebWindowsmacOSLinuxAPI
Visit forendi.com
Spec score 8.3 #5 of 21 in Incident Response Software

What it is

Forendi is a digital forensics and incident response platform for incident handling, forensic analysis and security operations. Its incident workflows cover the process from detection through resolution, with automation and real-time collaboration. Case management tracks evidence and investigations with audit trails, while lightweight agents collect evidence with integrity checks and chain-of-custody records. Hyperledger Fabric integration supports tamper-proof evidence storage and cryptographic verification.

Forendi connects with SIEM systems for threat detection and data pipelines. Its threat intelligence service offers more than one million curated indicators, each with confidence scores and expiry dates. Feed delivery supports TAXII 2.1 with STIX 2.1, a native MISP directory and cursor-paginated REST/JSON. The Forendi Agent supports Windows, macOS and Linux and communicates over secure WebSockets; the cloud deployment is listed for web, API, Linux, macOS and Windows. Plans include Threat Intelligence Feed at $199 a month, Threat Intelligence Platform at $399 a month and DFIR Platform at $499 per month. Each product has a seven-day trial intended for evaluation and integration sampling, not production replacement.

Spec sheet

Compliance
Forendi states that its audit trails and reporting support GDPR, ISO 27001 and industry regulations.Read 1 Oct 2026 · forendi.com
Headquarters
Gölbaşı, Ankara, TürkiyeRead 28 Sep 2026 · forendi.com
Agent platforms
The Forendi Agent supports Windows, macOS and Linux and communicates over secure WebSockets.Read 1 Oct 2026 · forendi.com
Blockchain security
Hyperledger Fabric integration provides tamper-proof evidence storage and cryptographic verification.Read 1 Oct 2026 · forendi.com
Case management
Case management tracks evidence and investigations with full audit trails and compliance support.Read 1 Oct 2026 · forendi.com
Feed integrations
Supported delivery methods are TAXII 2.1 with STIX 2.1, a native MISP feed directory and cursor-paginated REST/JSON.Read 1 Oct 2026 · forendi.com
Forensic collection
Lightweight agents collect evidence securely with integrity verification and chain of custody.Read 1 Oct 2026 · forendi.com
Incident management
The platform provides lifecycle management from detection to resolution with automated workflows and real-time collaboration.Read 1 Oct 2026 · forendi.com
Product scope
Forendi is a comprehensive digital forensics and incident response platform for incident management, forensic analysis and security operations.Read 1 Oct 2026 · forendi.com
Report extraction limit
Users can submit a URL, paste text or upload a PDF up to 25 MB for indicator extraction.Read 1 Oct 2026 · forendi.com
SIEM integration
The Forendi Platform integrates with SIEM systems for real-time threat detection and optimized data pipelines.Read 1 Oct 2026 · forendi.com
Support and contact
Forendi invites users to schedule a demo and lists email and phone contact details in Gölbaşı, Ankara.Read 1 Oct 2026 · forendi.com
Threat intelligence
The threat intelligence service provides over one million curated indicators with confidence scores and expiry dates.Read 1 Oct 2026 · forendi.com
Trial limitation
The trial allowance is intended for evaluation and integration sampling rather than production replacement.Read 1 Oct 2026 · forendi.com
Trial terms
Each product starts with a seven-day full-platform trial without requiring a credit card.Read 1 Oct 2026 · forendi.com

Plans and prices

Threat Intelligence Feed $199 a month $199/ month Every indicator scored and sourced · Popular sites filtered · TAXII, MISP and REST Read 1 Oct 2026 · forendi.com
Threat Intelligence Platform $399 a month $399/ month Threat hunting across full pool · Vulnerabilities matched to your software · AI-drafted detection rules · Weekly intelligence bulletins Read 1 Oct 2026 · forendi.com
DFIR Platform $499 a month $499/ analyst / month Everything in Threat Intelligence · Incident and case management · Endpoint collection and forensics · Blockchain chain of custody Read 1 Oct 2026 · forendi.com

Every Forendi plan and price →

Strong points and limits

Strong points

  • Incident workflows support real-time collaboration
  • Evidence collection includes integrity checks and chain of custody
  • Threat intelligence includes over one million indicators
  • Feed delivery supports TAXII, MISP, and REST/JSON
  • Agent supports Windows, macOS, and Linux

Limits

  • No free plan
  • Trial is intended for evaluation, not production replacement
  • Indicator extraction accepts PDFs up to 25 MB

Who it suits

Forendi suits security teams handling investigations, evidence collection and incident response. Its threat-intelligence feeds may also suit teams integrating indicator data into security workflows.

Verdict

Forendi combines incident and case management with evidence collection and threat intelligence. The seven-day trial can support evaluation and integration sampling, but is not intended to replace a production deployment.

Where Specifiction places it

Alternatives to ForendiAll alternatives →