Casebook
8.0#7 in case management softwareFrom $29 a monthAndroidiOSWebAPI
VisitCasebook vs DFIR-IRIS
What both publish
| Fact | Casebook | DFIR-IRIS |
|---|---|---|
| Deployment | cloud | The documentation recommends Docker and Docker Compose; it says Linux and macOS are officially supported and Windows may need Dockerfile changes for file storage paths. |
| Founded | 2009 | 2019 |
| Free plan | No | Yes |
| Integrations | Casebook documents low-code incoming integrations with Zapier, custom incoming integrations through its API, and custom outgoing integrations through webhooks. | First-party modules include IrisVT for VirusTotal, IrisMISP for MISP, IrisCheck for validations and IrisWebHooks for URL destinations. |
| Product | Casebook is a configurable, cloud-based case-management platform for human-service providers. | DFIR-IRIS is a collaborative incident-response platform for cases, timelines, evidence and war rooms. |
Casebook plans
- Starter$29 a month
- Growth$69 a month
- Team$99 a month
- EnterprisePriced on request
DFIR-IRIS plans
- Free and open-sourceFree
- Open-source self-hostedFree
Pick Casebook if…
You want what its maker publishes above — check its page for the details.
Pick DFIR-IRIS if…
DFIR-IRIS suits incident response teams that need shared case records, alert triage, evidence controls, and investigation reporting. Organizations should be able to deploy it in a restricted environment.