Collaborative Incident Response Platform
Free and Open-Source. Streamline investigations, share technical details, and collaborate in real-time.

Built for faster Incident Response
Empower your team with the tools they need to respond, focus on the investigation, and collaborate effectively.

Your Mission Control for Incident Response
Real-time collaboration • Automated workflows • Complete visibility
Give your Incident Response Team a breath
Simple yet powerful, start collaborating with your team in minutes. From minor incidents to major breaches, handle them all with ease.

Receive alerts effortlessly from your SIEM and all your trusted sources. Quickly triage, annotate, and correlate alerts to uncover critical insights and link related incidents. Once validated, escalate them into comprehensive cases to accelerate your investigation and resolution process.

IRIS streamlines every element of your investigations, organizing information so analysts can work together effortlessly. Our flexible approach adapts to your team’s unique workflow—no rigid constraints, just smooth, intuitive collaboration that drives faster, smarter incident resolution.

IRIS is fully extensible with custom modules tailored to your needs, including built-in integrations for VirusTotal, MISP, WebHooks, and IntelOwl. Its API lets you manage investigations just like using the interface, enabling seamless automation and integration.
Supporting Us
As a free and open source project, we rely on the support of our community to continue development and improve our platform. If you find the platform useful and would like to help us sustain and grow, please consider supporting us financially through OpenCollective.