Casebook vs DFIRe
Casebook
casebook.netDFIRe
dfire.fiSide by side
| Figure | Casebook | DFIRe |
|---|---|---|
| Price from | $29/mo | €825/mo |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | — | Yes |
| iOS | Yes | — |
| Android | Yes | — |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 4 | 3 |
| Spec score · Case Management Software | 8.8 (#7) | 8.9 (#4) |
| Compliance | Casebook describes the platform as HIPAA compliant and SOC 2 audited, and says it operates under a CJIS shared-responsibility framework for criminal-justice information. | Users can define compliance timers and reminders for breach notifications, statutory reporting, and other deadlines such as SLAs. |
| Deployment | cloud | Installation uses a release-pinned Docker Compose bundle and supports manual or air-gapped deployment. |
| Free plan | No | Yes |
| Headquarters | New York, NY, United States | Vantaa, Finland |
| Integrations | Casebook documents low-code incoming integrations with Zapier, custom incoming integrations through its API, and custom outgoing integrations through webhooks. | Native integrations include Slack case workflows, two-way Jira Cloud synchronization, outgoing webhooks and SIEM/SOAR forwarding. |
| Product | Casebook is a configurable, cloud-based case-management platform for human-service providers. | DFIRe is self-hosted case management software for digital forensics and incident response. |
| Security controls | Casebook uses role-based access, single sign-on, OAuth 2.0, OpenID Connect, JWT-based service communication, and encryption in transit and at rest. | The security documentation describes OIDC single sign-on, two-tier role-based access control, AES-256-GCM attachment encryption, and an immutable fail-closed audit trail. |
| Support | Software support is included in the subscription, and the help desk is listed as open Monday through Friday from 8am to 8pm ET. | Documentation covers deployment, configuration, cases, evidence, SSO, backups, integrations, security and changelog topics; additional help is offered by email. |
Plans
Casebook
- Starter$29 a month
- Growth$69 a month
- Team$99 a month
- EnterprisePriced on request
In their own words
Casebook
Casebook is a cloud-based case-management platform for human-service providers. It brings client, case, program, and provider details together, with client profiles that can connect across programs. Teams can configure programs, workflows, and reporting, and use forms, service planning, scheduling, notifications, messaging, case notes, referrals, and outcome dashboards. Staff can record intake, notes, and encounters on a phone or tablet while offline; the records synchronize after reconnecting. Referrals can be sent to providers in a service directory and tracked to completion, with stalled or unconfirmed referrals flagged. Casebook offers built-in and custom reports and lists integrations including SMS/MMS, calendar and email, Zapier, webhooks, and an API. It supports Android, iOS, macOS, web, Windows, and API access. Plans are per user and billed annually: Starter is $29 a month for up to three users, Growth is $69 a month, and Team is $99 a month with a five-user minimum.
DFIRe
DFIRe is self-hosted case management software for digital forensics and incident response. Teams can configure case types, severity, assignments, and escalation from triage to incident response while keeping case history. Evidence records can be organized hierarchically with configurable attributes, custody verification, printable receipts, and transfer records. The software includes default playbooks for fifteen common case types, which users can adapt or replace, plus timers and reminders for breach notifications, statutory reporting, and other deadlines. Its IOC registry supports STIX 2.1 types, enrichment from named threat intelligence providers, and sharing through MISP and TAXII. Documented integrations include Slack, bidirectional Jira synchronization, webhooks, and SIEM or log forwarding. Reports support structured sections, QA, evidence inventories, and optional LLM drafting through a customer-selected provider. Security documentation describes OIDC sign-on, role-based access, encrypted attachments, and an immutable audit trail. DFIRe supports air-gapped use and offline licensing. The annual licence is €9,900 a year for unlimited users and cases in one production deployment; a 90-day trial is available.