Case Closed Software
7.0#32 in case management softwareAndroidiOSWebAPI
VisitCase Closed Software vs DFIR-IRIS
What both publish
| Fact | Case Closed Software | DFIR-IRIS |
|---|---|---|
| Deployment | The product is available through U.S.-based cloud hosting and on-premises deployment; the site says most customers use Microsoft Azure cloud hosting. | The documentation recommends Docker and Docker Compose; it says Linux and macOS are officially supported and Windows may need Dockerfile changes for file storage paths. |
| Founded | 2016 | 2019 |
| Integrations | The platform supports secure API integrations with RMS, CAD, analytics, and reporting tools, plus custom NCIC and local database integrations when authorized. | First-party modules include IrisVT for VirusTotal, IrisMISP for MISP, IrisCheck for validations and IrisWebHooks for URL destinations. |
| Maker location | The company says it operates remotely with a distributed team throughout the United States. | The verified GitHub organisation lists France as its location and describes the project as initiated by Airbus Cybersecurity in 2019. |
| Purpose | Case Closed is a case management and intelligence platform for law enforcement and investigative agencies. | DFIR-IRIS is an open-source incident response platform for running investigations collaboratively in one workspace. |
Case Closed Software plans
- Case Closed SoftwarePriced on request
DFIR-IRIS plans
- Free and open-sourceFree
- Open-source self-hostedFree
Pick Case Closed Software if…
Case Closed Software is aimed at law enforcement and investigative agencies managing cases, evidence, intelligence, or confidential informants. It may suit agencies seeking integrations and a hybrid deployment.
Pick DFIR-IRIS if…
DFIR-IRIS suits incident response teams that need shared case records, alert triage, evidence controls, and investigation reporting. Organizations should be able to deploy it in a restricted environment.