DFIRe vs Hyland OnBase
DFIRe
dfire.fiHyland OnBase
hyland.comSide by side
| Figure | DFIRe | Hyland OnBase |
|---|---|---|
| Price from | €825/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | Yes | — |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 2 |
| Spec score · Case Management Software | 8.9 (#4) | 8.5 (#14) |
| API | DFIRe provides a REST API with per-user API keys, service accounts, interactive ReDoc documentation and a downloadable OpenAPI 3 schema. | The Foundation 26.1 documentation includes a dedicated API Server component with authentication, database, operating-system, browser and hosting requirements. |
| Deployment | Installation uses a release-pinned Docker Compose bundle and supports manual or air-gapped deployment. | OnBase is offered as Hyland Cloud-hosted content services and as an on-premises installation. |
| Headquarters | Vantaa, Finland | Westlake, Ohio, USA |
| Integrations | Native integrations include Slack case workflows, two-way Jira Cloud synchronization, outgoing webhooks and SIEM/SOAR forwarding. | Hyland lists prebuilt connectors for Salesforce, SAP, Workday, Microsoft Office, Outlook and Infor, plus screen-level and data-level integration methods. |
| Security encryption | Attachments use AES-256-GCM with tenant, case or item and per-file key layers, while credentials use separate Fernet encryption. | Hyland states that stored data and keyword values can use AES-128 or AES-256 encryption, while TLS protects data in transit. |
| Support | Documentation covers deployment, configuration, cases, evidence, SSO, backups, integrations, security and changelog topics; additional help is offered by email. | Hyland Premier Care Standard is included as part of a subscription or software maintenance agreement; listed Standard phone support is for S1 issues only. |
| System requirements | Evaluation planning guidance is 2 vCPU, 4 GB RAM and 20 GB SSD; production guidance is 8 vCPU, 16 GB RAM and 100 GB SSD plus evidence and backup storage. | Foundation 26.1 documentation covers Microsoft SQL Server, Oracle and SAP SQL Anywhere databases, Windows operating systems, IIS, .NET, browsers, hardware and virtualization. |
Plans
In their own words
DFIRe
DFIRe is self-hosted case management software for digital forensics and incident response. Teams can configure case types, severity, assignments, and escalation from triage to incident response while keeping case history. Evidence records can be organized hierarchically with configurable attributes, custody verification, printable receipts, and transfer records. The software includes default playbooks for fifteen common case types, which users can adapt or replace, plus timers and reminders for breach notifications, statutory reporting, and other deadlines. Its IOC registry supports STIX 2.1 types, enrichment from named threat intelligence providers, and sharing through MISP and TAXII. Documented integrations include Slack, bidirectional Jira synchronization, webhooks, and SIEM or log forwarding. Reports support structured sections, QA, evidence inventories, and optional LLM drafting through a customer-selected provider. Security documentation describes OIDC sign-on, role-based access, encrypted attachments, and an immutable audit trail. DFIRe supports air-gapped use and offline licensing. The annual licence is €9,900 a year for unlimited users and cases in one production deployment; a 90-day trial is available.
Hyland OnBase
Hyland OnBase is an operational content management product for capturing and governing enterprise documents, automating content-centered workflows, and feeding data to business systems. Automated capture classifies and verifies business data from multiple sources. Configurable workflows, forms, and rules route documents and manage exceptions, while case management can cover documents, emails, tasks, approvals, compliance, and verifications. OnBase also supports secure document retention and destruction through the records lifecycle. Listed controls include OCR, version history, granular access control, audit logs, rule-based classification, legal holds, and disposition workflows. Reporting includes interactive dashboards and audit trails. Hyland says its solutions connect with more than 500 unique applications. Deployment options include on-premises and hosted configurations, and OnBase Mobile is accessed through the Hyland Mobile app for iOS and Android. Pricing is on request; the Base subscription is listed for 100 named users, without a price. A free plan is also listed. Hyland is headquartered in Westlake, Ohio, and was founded in 1991.