DFIR-IRIS
8.2#3 in case management softwareFree planFree planWebAPILinuxmacOS
VisitDFIR-IRIS vs inFormed
What both publish
| Fact | DFIR-IRIS | inFormed |
|---|---|---|
| Case management | Cases contain assets, IOCs, tasks, evidence and notes with severity, ownership, status and audit history. | It provides a centralized dashboard for caseloads, metrics, alerts, and priorities. |
| Deployment | The documentation recommends Docker and Docker Compose; it says Linux and macOS are officially supported and Windows may need Dockerfile changes for file storage paths. | cloud |
| Integrations | First-party modules include IrisVT for VirusTotal, IrisMISP for MISP, IrisCheck for validations and IrisWebHooks for URL destinations. | Libera describes its platform as API-first and says it supports third-party system integrations, but the inFormed page does not name specific connected products. |
| Purpose | DFIR-IRIS is an open-source incident response platform for running investigations collaboratively in one workspace. | inFormed is case management software built for state vocational rehabilitation agencies. |
| Reporting | Jinja templates can generate configurable executive, technical or court reports in PDF or DOCX. | The product automates data validation and supports audit-ready RSA-911 and other federal reporting. |
DFIR-IRIS plans
- Free and open-sourceFree
- Open-source self-hostedFree
inFormed plans
No prices published.
Pick DFIR-IRIS if…
DFIR-IRIS suits incident response teams that need shared case records, alert triage, evidence controls, and investigation reporting. Organizations should be able to deploy it in a restricted environment.
Pick inFormed if…
You want what its maker publishes above — check its page for the details.