The Geeks Club
Vendor dashboard
Search
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements

Best Incident Response Software in 2026

17 incident response software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.

17ranked
7free plans on this page
$3/molowest paid tier
3 Oct 2026last checked
#1 LimaCharlie Top pick · 9.3 Free plan · $3/mo #2 ORNA Runner-up · 8.4 Free plan · Free #3 DFIRe Also great · 8.4 Free plan · €825/mo
  1. 1

    LimaCharlie

    9.3
    Free planFree trial apiLinuxmacOSself-hostedWebWindows
    Free plan
    Yes
    Case management
    Yes
    Evidence tracking
    Yes
    Responder collaboration
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    $3/mofirst paid tier About LimaCharlieVisit site
  2. 2

    ORNA

    8.4
    Free plan apiself-hostedWeb
    Free plan
    Yes
    Case management
    Yes
    Evidence tracking
    Yes
    Responder collaboration
    Yes
    On-call scheduling
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About ORNAVisit site
  3. 3

    DFIRe

    8.4
    Free planFree trial WebLinux
    Free plan
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    €825/mofirst paid tier About DFIReVisit site
  4. 4

    Binalyze AIR

    8.2
    Free trial apiLinuxmacOSself-hostedWebWindows
    Case management
    Yes
    Evidence tracking
    Yes
    Responder collaboration
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About Binalyze AIRVisit site
  5. 5

    Forendi

    8.0
    Free trial apiLinuxmacOSWebWindows
    Free plan
    No
    Case management
    Yes
    Evidence tracking
    Yes
    Responder collaboration
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    $199/mofirst paid tier About ForendiVisit site
  6. 6

    DFIR-IRIS

    7.8
    Free plan Web
    Free plan
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About DFIR-IRISVisit site
  7. 7

    Cydarm

    7.8
    Free trial apiself-hostedWeb
    Free plan
    No
    Case management
    Yes
    Evidence tracking
    Yes
    Responder collaboration
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About CydarmVisit site
  8. 8

    Forensicator

    7.7
    Free plan apiLinuxmacOSself-hostedWebWindows
    Free plan
    Yes
    Case management
    Yes
    Evidence tracking
    Yes
    Responder collaboration
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About ForensicatorVisit site
  9. 9

    SandsBytes

    7.4
    apiLinuxself-hostedWeb
    Case management
    Yes
    Evidence tracking
    Yes
    Responder collaboration
    Yes
    On-call scheduling
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About SandsBytesVisit site
  10. 10

    Grail

    6.3
    Case management
    Yes
    Evidence tracking
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About GrailVisit site
  11. 11

    Dagobert

    6.3
    Web
    Case management
    Yes
    Evidence tracking
    Yes
    Responder collaboration
    Yes
    On-call scheduling
    No
    RecognisedDocumentedFree planFree trialPlatforms
    About DagobertVisit site
  12. 12

    TraceLock CRM

    6.1
    Free plan
    Free plan
    Yes
    Case management
    Yes
    Responder collaboration
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About TraceLock CRMVisit site
  13. 13

    SIFT Workstation

    6.1
    Free plan WindowsLinux
    Free plan
    Yes
    Evidence tracking
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About SIFT WorkstationVisit site
  14. 14

    Cyber Triage

    6.0
    Windows
    Free plan
    No
    Case management
    Yes
    Evidence tracking
    Yes
    Responder collaboration
    Yes
    On-call scheduling
    No
    RecognisedDocumentedFree planFree trialPlatforms
    About Cyber TriageVisit site
  15. 15

    Colander

    6.0
    Web
    Case management
    Yes
    Evidence tracking
    Yes
    Responder collaboration
    Yes
    On-call scheduling
    No
    RecognisedDocumentedFree planFree trialPlatforms
    About ColanderVisit site
  16. 16

    GRR Rapid Response

    5.9
    WebWindowsmacOSLinux
    Evidence tracking
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About GRR Rapid ResponseVisit site
  17. 17

    Belkasoft X Forensic

    5.5
    Windows
    Free plan
    No
    Evidence tracking
    Yes
    On-call scheduling
    No
    RecognisedDocumentedFree planFree trialPlatforms
    About Belkasoft X ForensicVisit site

Is your platform on this list?

Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.

#1 open#2 open#3 open#4 open#5 openClaim your listing — free

Questions about this list

Which incident response software is ranked first on The Geeks Club?

LimaCharlie is ranked #1 of 17 with a score of 9.3. ORNA is second and DFIRe third.

How many of these have a free plan?

7 of the 17 on this page publish a free plan on their own pricing pages.

Which is the cheapest paid option?

On this page, LimaCharlie has the lowest first paid tier we found: $3/mo.

How is this list ranked?

Ranked on how quickly a newcomer can get going: documentation depth, a free tier or trial, and the platforms it runs on. Paid placements never change a rank.

More in IT & Infrastructure

All it & infrastructure lists
IT Asset Management Software 108Website Monitoring Software 54IT Automation Software 50IT Knowledge Base Software 44Competitor Price Monitoring Software 39Application Deployment Software 34DNS Monitoring Software 34IT Vendor Management Software 34Patch Management Software 34CMDB Software 33Identity and Access Management Software 30IT Problem Management Software 30