DFIR-IRIS
8.2#3 in case management softwareFree planFree planWebAPILinuxmacOS
VisitDFIR-IRIS vs OPserver
What both publish
| Fact | DFIR-IRIS | OPserver |
|---|---|---|
| Deployment | The documentation recommends Docker and Docker Compose; it says Linux and macOS are officially supported and Windows may need Dockerfile changes for file storage paths. | OPserver is a desktop app for macOS, Windows and Linux, and licence keys are validated against an organisation's account in Firestore. |
| Free plan | Yes | No |
| Product | DFIR-IRIS is a collaborative incident-response platform for cases, timelines, evidence and war rooms. | OPserver is an operational intelligence and case-management platform for organisations coordinating investigations, evidence, field activity and monitored operations across distributed teams. |
DFIR-IRIS plans
- Free and open-sourceFree
- Open-source self-hostedFree
OPserver plans
- Pilot Licence£2,400 a year
- Operations Licence£9,500 a year
- Enterprise / Public SectorPriced on request
- EvaluationPriced on request
Pick DFIR-IRIS if…
DFIR-IRIS suits incident response teams that need shared case records, alert triage, evidence controls, and investigation reporting. Organizations should be able to deploy it in a restricted environment.
Pick OPserver if…
You want what its maker publishes above — check its page for the details.