# Incident Response Investigation System (IRIS)

Incident Response Investigation System (IRIS) is an Incident Response product. It runs on-premises. Pricing is free.

A web collaborative platform for incident responders to share technical details during investigations, shipped in Docker containers for easy installation and upgrades.

Checked October 2026.

## What is Incident Response Investigation System (IRIS)?

IRIS is a web collaborative platform designed to assist incident responders in sharing technical details during investigations. It consists of two main parts: IrisWeb, the core web application for managing the interface and database, and IrisModules, extensions that allow third parties to process data (e.g., enrich IOCs with MISP and VT, upload EVTX into Splunk). IRIS can function without modules, but default ones are preinstalled, and additional modules can be configured in the UI under Manage > Modules. The system is shipped in Docker containers for easy installation and upgrades using Docker compose.

Tags: Evidence Collection, Memory Forensics

## Where it fits in your security program (NIST CSF 2.0)

- [Respond](https://cybersectools.com/guides/building-respond-program-small-team): helps you contain and handle incidents.

## Quick facts

- Category: [Security Operations](https://cybersectools.com/categories/security-operations) · [Incident Response](https://cybersectools.com/categories/dfir)
- Deployment: On-Premises
- Company size fit: SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 1,444
- Website: github.com

## Where it ranks

No shortlist covers this product's category yet. The closest is [Best MDR Solutions for Business](https://cybersectools.com/shortlists/best-mdr-solutions).

## Incident Response Investigation System (IRIS) FAQ

### What is Incident Response Investigation System (IRIS)?

Incident Response Investigation System (IRIS) is a product in the Incident Response category. It covers Evidence Collection and Memory Forensics.

### What is the pricing for Incident Response Investigation System (IRIS)?

Incident Response Investigation System (IRIS) is free. Download and setup instructions are at https://github.com/dfir-iris/iris-web/.

### What are alternatives to Incident Response Investigation System (IRIS)?

Alternatives to Incident Response Investigation System (IRIS) listed on CybersecTools:

1. [Binalyze](https://cybersectools.com/tools/binalyze) - DFIR platform automating investigation, evidence collection, and IR. (Commercial)
2. [Spacewalk AI](https://cybersectools.com/tools/spacewalk-ai) - AI platform for incident response: timeline automation, reporting & team sync. (Commercial)
3. [StrangeBee TheHive IaaS Images](https://cybersectools.com/tools/thehive-strangebee) - Collaborative case management platform for incident response and investigation (Commercial)
4. [Cydarm Platform](https://cybersectools.com/tools/cydarm-platform) - SOC management platform for incident response and cyber response management (Commercial)
5. [ORNA Digital Incident Response Plan](https://cybersectools.com/tools/orna-digital-incident-response-plan) - Digital incident response plan built on SANS 504-B framework (Commercial)

Compare all Incident Response Investigation System (IRIS) alternatives at [https://cybersectools.com/alternatives/incident-response-investigation-system-iris](https://cybersectools.com/alternatives/incident-response-investigation-system-iris)

### What deployment and organization size does Incident Response Investigation System (IRIS) fit?

Incident Response Investigation System (IRIS) is available as on-premises software. It is listed for small businesses, mid-market companies and enterprises. It is free.

## Compare Incident Response Investigation System (IRIS) with similar solutions

- [Incident Response Investigation System (IRIS) vs Binalyze](https://cybersectools.com/compare/binalyze-vs-incident-response-investigation-system-iris)
- [Incident Response Investigation System (IRIS) vs Spacewalk AI](https://cybersectools.com/compare/incident-response-investigation-system-iris-vs-spacewalk-ai)
- [Incident Response Investigation System (IRIS) vs StrangeBee TheHive IaaS Images](https://cybersectools.com/compare/incident-response-investigation-system-iris-vs-thehive-strangebee)

All alternatives to Incident Response Investigation System (IRIS): [/alternatives/incident-response-investigation-system-iris](https://cybersectools.com/alternatives/incident-response-investigation-system-iris)

---

Source: https://cybersectools.com/tools/incident-response-investigation-system-iris

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Incident Response Investigation System (IRIS): funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md