
Forendi
Forendi is a digital forensics and incident response platform for incident handling, investigations, forensic analysis and security operations.
What Forendi is
Forendi is a digital forensics and incident response platform for incident handling, investigations, forensic analysis and security operations. Its workflows cover incidents from detection through resolution, with automation and real-time collaboration. Case management tracks evidence and investigations with audit trails, while lightweight agents collect evidence with integrity verification and chain-of-custody records. Hyperledger Fabric integration supports tamper-proof evidence storage and cryptographic verification. The platform also connects with SIEM systems for threat detection and data pipelines. Its threat intelligence service offers over one million curated indicators with confidence scores and expiry dates; feeds are available through TAXII 2.1 with STIX 2.1, a native MISP feed directory or cursor-paginated REST/JSON. Agents support Windows, macOS and Linux and communicate over secure WebSockets. The cloud deployment is listed for web, API, Linux, macOS and Windows. Plans include a Threat Intelligence Feed at $199 a month, a Threat Intelligence Platform at $399 a month and a DFIR Platform at $499 per analyst per month. Each product has a seven-day trial for evaluation and integration sampling, not production replacement.
Good
- Incident workflows span detection through resolution.
- Evidence collection includes integrity and custody records.
- Supports TAXII/STIX, MISP and REST/JSON feeds.
- Agents support Windows, macOS and Linux.
Watch out
- Seven-day trial is not for production replacement.
- DFIR Platform is priced per analyst per month.
Who it suits
Forendi suits security teams handling incident response, forensic collection and evidence tracking. Its threat intelligence feeds may also suit teams integrating indicators with SIEM or other supported feed consumers.
Verdict
Forendi combines incident and case workflows with evidence collection and threat intelligence. Its trial is limited to evaluation and integration sampling, and listed plans carry monthly charges.
Plans and prices
From Forendi's own pricing page, checked 1 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Threat Intelligence Feed | $199 a month | Every indicator scored and sourced · Popular sites filtered · TAXII, MISP and REST · $199/ month |
| Threat Intelligence Platform | $399 a month | Threat hunting across full pool · Vulnerabilities matched to your software · AI-drafted detection rules · Weekly intelligence bulletins · $399/ month |
| DFIR Platform | $499 a month | Everything in Threat Intelligence · Incident and case management · Endpoint collection and forensics · Blockchain chain of custody · $499/ analyst / month |
The facts
Each one read from Forendi's own pages, with the date it was checked.
Where it runs
- Agent platforms
- The Forendi Agent supports Windows, macOS and Linux and communicates over secure WebSockets.checked 1 Oct 2026
What it does
- Blockchain security
- Hyperledger Fabric integration provides tamper-proof evidence storage and cryptographic verification.checked 1 Oct 2026
- Case management
- Case management tracks evidence and investigations with full audit trails and compliance support.checked 1 Oct 2026
- Compliance
- Forendi states that its audit trails and reporting support GDPR, ISO 27001 and industry regulations.checked 1 Oct 2026
- Feed integrations
- Supported delivery methods are TAXII 2.1 with STIX 2.1, a native MISP feed directory and cursor-paginated REST/JSON.checked 1 Oct 2026
- Forensic collection
- Lightweight agents collect evidence securely with integrity verification and chain of custody.checked 1 Oct 2026
- Incident management
- The platform provides lifecycle management from detection to resolution with automated workflows and real-time collaboration.checked 1 Oct 2026
- Product scope
- Forendi is a comprehensive digital forensics and incident response platform for incident management, forensic analysis and security operations.checked 1 Oct 2026
- Report extraction limit
- Users can submit a URL, paste text or upload a PDF up to 25 MB for indicator extraction.checked 1 Oct 2026
- SIEM integration
- The Forendi Platform integrates with SIEM systems for real-time threat detection and optimized data pipelines.checked 1 Oct 2026
- Support and contact
- Forendi invites users to schedule a demo and lists email and phone contact details in Gölbaşı, Ankara.checked 1 Oct 2026
- Threat intelligence
- The threat intelligence service provides over one million curated indicators with confidence scores and expiry dates.checked 1 Oct 2026
The company
- Headquarters
- Gölbaşı, Ankara, Türkiyechecked 28 Sep 2026
Money
- Trial limitation
- The trial allowance is intended for evaluation and integration sampling rather than production replacement.checked 1 Oct 2026
- Trial terms
- Each product starts with a seven-day full-platform trial without requiring a credit card.checked 1 Oct 2026
Alternatives to Forendi
- 1

DFIR-IRIS
Free planOpen sourceWebAPILinuxmacOS7.7Free plan - 2

DFIRe
Free planWebAPILinuxSelf-hosted7.5From €9,900 a year - 3
Forensicator
Free planOpen sourceWebAPILinuxmacOS7.5Free plan - 4

LimaCharlie
Free planWebAPILinuxmacOS7.2$3 usage-based - 5
Belkasoft X Forensic
AndroidiOSLinuxmacOS6.5 - 6

Binalyze AIR
WebAPILinuxmacOS6.4
