Forendi review
A focused DFIR platform combining casework, forensics, intelligence, and evidence integrity.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Forendi is a cloud-based digital forensics and incident response platform for security operations, incident response, and DFIR teams. It brings incident lifecycle management, case management, evidence tracking, forensic collection, threat intelligence, responder collaboration, and evidence integrity into one environment. The platform supports Windows, macOS, Linux, and API access, with lightweight endpoint agents for collection. Teams handling investigations that require audit trails, chain of custody, and intelligence-led response are the clearest fit.
Pricing is organized around three paid plans. Threat Intelligence Feed costs $199 per month and includes curated indicators, indicator scoring and sourcing, plus TAXII, MISP, and REST delivery. Threat Intelligence Platform costs $399 per month and adds threat hunting, software vulnerability matching, AI-drafted detection rules, and weekly intelligence bulletins. DFIR Platform costs $499 per analyst per month and includes incident and case management, ready response plans, endpoint collection and forensics, and blockchain chain of custody. A seven-day full-platform trial is available without a card, while the published plans do not include a perpetual free tier.
For teams where evidence integrity is central, Forendi’s combination of blockchain-backed chain of custody, evidence tracking, audit trails, and Hyperledger Fabric integration is a notable focus. Its broader ecosystem includes SIEM, MITRE ATT&CK, TAXII 2.1, MISP, and REST/JSON, while report-based indicator extraction can process URLs, text, and PDFs. Choose Forendi when structured investigations and threat intelligence need to work alongside response workflows. Teams wanting a non-cloud deployment model or a free ongoing plan should consider alternatives.
Forendi pros and cons
- Where it wins
- Combines incident, case, evidence, and audit-trail management
- Supports endpoint collection across Windows, macOS, and Linux
- Connects threat intelligence through TAXII 2.1, MISP, and REST
- Where it doesn't
- No perpetual free plan
- DFIR Platform pricing is $499 per analyst per month
- Cloud deployment may not suit teams seeking another deployment model
Forendi fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update