CaseBuilder
6.5#83 in case management softwareAndroidiOSWeb
VisitCaseBuilder vs DFIR-IRIS
What both publish
| Fact | CaseBuilder | DFIR-IRIS |
|---|---|---|
| Deployment | SoundThinking says the system can be configured and ready for end users to begin casework the same day. | The documentation recommends Docker and Docker Compose; it says Linux and macOS are officially supported and Windows may need Dockerfile changes for file storage paths. |
| Founded | 1996 | 2019 |
| Integrations | CaseBuilder integrates with ShotSpotter, supports NIBIN lead management, and imports CrimeTracer leads with one click. | First-party modules include IrisVT for VirusTotal, IrisMISP for MISP, IrisCheck for validations and IrisWebHooks for URL destinations. |
| Purpose | CaseBuilder is cloud-based case management software for law enforcement agencies to capture, track, analyze, and collaborate on investigations. | DFIR-IRIS is an open-source incident response platform for running investigations collaboratively in one workspace. |
| Reporting | Reporting includes interactive dashboards, operational reports, report widgets, and scheduled reports. | Jinja templates can generate configurable executive, technical or court reports in PDF or DOCX. |
CaseBuilder plans
- Agency subscription—
- Setup fee—
DFIR-IRIS plans
- Free and open-sourceFree
- Open-source self-hostedFree
Pick CaseBuilder if…
You want what its maker publishes above — check its page for the details.
Pick DFIR-IRIS if…
DFIR-IRIS suits incident response teams that need shared case records, alert triage, evidence controls, and investigation reporting. Organizations should be able to deploy it in a restricted environment.