KANVAS
KANVAS: A focused, open-source workspace for spreadsheet-based incident investigations. Ranked #157 of 175 in Case Management Software by our editors (3.0/10); pricing: Free plan; best for security analysts tracking incidents on shared files.
At a glance
- Editor score3.0 / 10
- PricingFree plan
- Best forSecurity analysts tracking incidents on shared files
- Free planYes
- Paid fromFree
- Facts checked22 Sep 2026
Where it wins
- Builds incident timelines and attack-chain visualizations from case data
- Maps MITRE ATT&CK and D3FEND techniques and exports STIX 2.1 JSON
- Runs on Windows, macOS, and Linux without a web server
Where it doesn't
- Uses spreadsheet and Markdown files rather than a full case-management system
- Shared-file collaboration depends on local or shared-drive file locking
- Desktop deployment does not provide web-based access
Our verdict on KANVAS
KANVAS is an open-source desktop tool for digital forensics and incident-response investigations, aimed at analysts who organize cases in the Spreadsheet of Doom or similar spreadsheets. It provides a workspace for investigation data, notes, bookmarks, and security references, while keeping case materials in portable spreadsheet and Markdown formats. Its Windows, macOS, and Linux support makes it usable across desktop environments, and it runs without a web server or additional infrastructure. That focused approach suits teams that already work with shared files and want incident-response views around them, rather than a broad case-management system.
The distinctive value is its analysis and documentation layer. KANVAS can generate automatic incident timelines with PNG and CSV export, visualize lateral movement and attack chains, and map activity to MITRE ATT&CK and D3FEND. A MITRE Flow Builder supports adversary-action sequences, while self-contained HTML reports provide a shareable case output. Threat-intelligence lookups cover IPs, domains, URLs, hashes, email, and CVEs, with VirusTotal and Shodan listed as integrations. Indicators of compromise can be exported as STIX 2.1 JSON. These features make it relevant when an investigation needs structured visualization and reporting without moving case data into a server-based system.
KANVAS is free and open source, with no paid tiers described. Its desktop and file-based model is also its main boundary: teams collaborate through local or shared-drive files with file locking, rather than through a web application. That makes it a stronger fit for analysts comfortable with spreadsheet-centered workflows than for organizations seeking a full case-management platform or browser-based access. Choose it when portable investigation files, incident timelines, visualizations, and exports are priorities; consider a broader system when centralized case management is central to the workflow.
Your product? Our editors can test KANVAS in depth and publish a review, labelled as paid · from $149/mo →
KANVAS pricing
KANVAS fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Case intake forms | Not verified |
| Workflow automation | Not verified |
| Custom case fields | Not verified |
| Audit trail | Not verified |
| Reporting dashboards | Not verified |
| Mobile apps | Not verified |
| Deployment | Not verified |
| Deployment | Desktop |
| Platforms | Windows, macOS, Linux |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 2 integrations: VirusTotal, Shodan |
| Pricing | Free plan |
| Website | kanvas-ir.org |
| Facts checked | 22 Sep 2026 |
KANVAS integrations
KANVAS lists 2 integrations on its own site.
- VirusTotal
- Shodan
Alternatives to KANVAS
- UiPath Maestro Case ManagementAI-assisted case orchestration for complex, document-heavy enterprise processes.9.4
- ServiceNow HR Service DeliveryA broad HR service suite for enterprises that need cases, workflows, portals, and AI.9.3
- Pega Investigative Case ManagementA broad investigation framework for agencies managing complex cases from intake through resolution.9.2
Used KANVAS? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used KANVAS for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
KANVAS is listed in our Case Management Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/kanvas/"><img src="https://www.itechguides.com/best/badge/kanvas.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update