DFIR-IRIS
8.2#3 in case management softwareFree planFree planWebAPILinuxmacOS
VisitDFIR-IRIS vs VisualVault Case Management
VisualVault Case Management
6.2#112 in case management softwareWebAPI
VisitWhat both publish
| Fact | DFIR-IRIS | VisualVault Case Management |
|---|---|---|
| Deployment | The documentation recommends Docker and Docker Compose; it says Linux and macOS are officially supported and Windows may need Dockerfile changes for file storage paths. | cloud |
| Founded | 2019 | 2009 |
| Free plan | Yes | No |
| Integrations | First-party modules include IrisVT for VirusTotal, IrisMISP for MISP, IrisCheck for validations and IrisWebHooks for URL destinations. | The page names Esri ArcGIS, Kofax, SMS messaging, and SAML 2.0 and OAuth 2.0 single sign-on, and describes REST API access for custom integrations. |
| Purpose | DFIR-IRIS is an open-source incident response platform for running investigations collaboratively in one workspace. | VisualVault Case Management centralizes case data, documents, communications, and workflows for state and local agencies. |
| Reporting | Jinja templates can generate configurable executive, technical or court reports in PDF or DOCX. | Built-in reporting and analytics provide visibility into case volume, processing times, operational performance, trends, risks, and exceptions. |
DFIR-IRIS plans
- Free and open-sourceFree
- Open-source self-hostedFree
VisualVault Case Management plans
- Program-based licensingPriced on request
Pick DFIR-IRIS if…
DFIR-IRIS suits incident response teams that need shared case records, alert triage, evidence controls, and investigation reporting. Organizations should be able to deploy it in a restricted environment.
Pick VisualVault Case Management if…
You want what its maker publishes above — check its page for the details.