DFIRe
7.9#8 in case management softwareFrom €9,900 a yearFree planWebAPILinuxSelf-hosted
VisitDFIRe vs Forensicator
Forensicator
7.5#3 in incident response softwareFree planFree planWebAPILinuxmacOS
VisitWhat both publish
| Fact | DFIRe | Forensicator |
|---|---|---|
| API | DFIRe provides a REST API with per-user API keys, service accounts, interactive ReDoc documentation and a downloadable OpenAPI 3 schema. | Core provides REST API keys for integrations and automation. |
| Deployment | Installation uses a release-pinned Docker Compose bundle and supports manual or air-gapped deployment. | Core is self-hosted through Docker Compose or a Debian/Ubuntu host and supports offline update packages for air-gapped use. |
DFIRe plans
- Annual licence€9,900 a year
- Non-commercialFree
- Small teamsPriced on request
Forensicator plans
- ForensicatorFree
- Forensicator CoreFree
- Forensicator EnterprisePriced on request
Pick DFIRe if…
DFIRe suits digital forensics and incident response teams that need structured case and evidence workflows, including teams operating air-gapped networks. Customers must manage their own infrastructure security, storage, and backups.
Pick Forensicator if…
The free collector suits incident responders and digital forensics teams that need to gather and review system artifacts. Enterprise is presented for security operations centers, response and forensics teams, and MSSPs managing reports across teams.