DFIR-IRIS
8.2#3 in case management softwareFree planFree planWebAPILinuxmacOS
VisitDFIR-IRIS vs PI Core
What both publish
| Fact | DFIR-IRIS | PI Core |
|---|---|---|
| Case management | Cases contain assets, IOCs, tasks, evidence and notes with severity, ownership, status and audit history. | Case records connect client instructions, subjects, locations, assignments, deadlines, notes, documents, invoices, and reporting status. |
| Free plan | Yes | No |
| Purpose | DFIR-IRIS is an open-source incident response platform for running investigations collaboratively in one workspace. | PI Core is investigation software for private investigation firms, with case management, evidence handling, surveillance documentation, attorney portals, skip-tracing context, and court-ready reporting. |
DFIR-IRIS plans
- Free and open-sourceFree
- Open-source self-hostedFree
PI Core plans
- Starter$99 a month
- Small Team$149 a month
- Firm$199 a month
- Large FirmPriced on request
Pick DFIR-IRIS if…
DFIR-IRIS suits incident response teams that need shared case records, alert triage, evidence controls, and investigation reporting. Organizations should be able to deploy it in a restricted environment.
Pick PI Core if…
You want what its maker publishes above — check its page for the details.