Forendi
Forendi: A focused DFIR platform combining casework, forensics, intelligence, and evidence integrity. Ranked #8 of 21 in Incident Response Software by our editors (8.4/10); pricing: 7-day trial; best for DFIR teams needing threat intelligence.
At a glance
- Editor score8.4 / 10
- Pricing7-day trial
- Best forDFIR teams needing threat intelligence
- Free planNo
- Paid from$199/mo
- Case managementYes
- Facts checked20 Sep 2026
Where it wins
- Combines incident, case, evidence, and audit-trail management
- Supports endpoint collection across Windows, macOS, and Linux
- Connects threat intelligence through TAXII 2.1, MISP, and REST
Where it doesn't
- No perpetual free plan
- DFIR Platform pricing is $499 per analyst per month
- Cloud deployment may not suit teams seeking another deployment model
Our verdict on Forendi
Forendi is a cloud-based digital forensics and incident response platform for security operations, incident response, and DFIR teams. It brings incident lifecycle management, case management, evidence tracking, forensic collection, threat intelligence, responder collaboration, and evidence integrity into one environment. The platform supports Windows, macOS, Linux, and API access, with lightweight endpoint agents for collection. Teams handling investigations that require audit trails, chain of custody, and intelligence-led response are the clearest fit.
Pricing is organized around three paid plans. Threat Intelligence Feed costs $199 per month and includes curated indicators, indicator scoring and sourcing, plus TAXII, MISP, and REST delivery. Threat Intelligence Platform costs $399 per month and adds threat hunting, software vulnerability matching, AI-drafted detection rules, and weekly intelligence bulletins. DFIR Platform costs $499 per analyst per month and includes incident and case management, ready response plans, endpoint collection and forensics, and blockchain chain of custody. A seven-day full-platform trial is available without a card, while the published plans do not include a perpetual free tier.
For teams where evidence integrity is central, Forendi’s combination of blockchain-backed chain of custody, evidence tracking, audit trails, and Hyperledger Fabric integration is a notable focus. Its broader ecosystem includes SIEM, MITRE ATT&CK, TAXII 2.1, MISP, and REST/JSON, while report-based indicator extraction can process URLs, text, and PDFs. Choose Forendi when structured investigations and threat intelligence need to work alongside response workflows. Teams wanting a non-cloud deployment model or a free ongoing plan should consider alternatives.
Your product? Our editors can test Forendi in depth and publish a review, labelled as paid · from $149/mo →
Forendi pricing
All 3 Forendi plans and prices →
Forendi fact sheet
| Free plan | No |
|---|---|
| Paid from | $199/mo |
| Case management | Yes |
| Evidence tracking | Yes |
| Responder collaboration | Yes |
| On-call scheduling | Not verified |
| Audit log | Yes |
| API access | Yes |
| Deployment options | Cloud |
| Free trial | 7 days · no card needed |
| Deployment | Cloud |
| Platforms | Windows, macOS, Linux |
| Compliance & security | GDPR, ISO 27001 |
| Support | Email, Phone |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 6 integrations: SIEM, Hyperledger Fabric, MITRE ATT&CK, TAXII 2.1, MISP, REST/JSON See all → |
| Pricing | 7-day trial (source) |
| Website | forendi.com |
| Facts checked | 20 Sep 2026 |
Forendi integrations
Forendi lists 6 integrations on its own site.
- SIEM
- Hyperledger Fabric
- MITRE ATT&CK
- TAXII 2.1
- MISP
- REST/JSON
See all Forendi integrations →
Alternatives to Forendi
- TheHiveA broad incident response workspace covering triage, investigation, evidence, and reporting.9.4
- DFIR-IRISA focused case-management platform for open-source incident response teams.9.2
- LimaCharlieAffordable endpoint-centric response with telemetry, cases, containment, and automation.9.0
See all Forendi alternatives →
Forendi vs the competition
- Forendi vs TheHive
- Forendi vs DFIR-IRIS
- Forendi vs LimaCharlie
- Forendi vs ORNA
- Forendi vs Cydarm
- Forendi vs ServiceNow Security Incident Response
Compare Forendi with any tool side by side →
Used Forendi? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Forendi for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Forendi is listed in our Incident Response Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/forendi/"><img src="https://www.itechguides.com/best/badge/forendi.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update