Comparisons anchored on TheHive, StrangeBee's incident case management platform, commercial since version 5 with a free Community plan: against open-source DFIR-IRIS, between its plans, and TheHive 4 against TheHive 5.
The two self-hosted incident response case management platforms: TheHive 5 with Cortex, MISP integration and per-user paid plans beyond 2 users against LGPL-3.0 DFIR-IRIS with alerts, timelines and MISP and VirusTotal modules. Licensing, stack and integrations compared.
TheHive 5 on-premises plans side by side: users, organizations, Cortex and MISP server limits, support response times and the read-only behavior after the trial. Which team sizes outgrow Community and what to ask StrangeBee for, since paid prices are not published.
For teams still on TheHive 4: the archived AGPL-3.0 release line with no updates since 2022 against licensed TheHive 5 and its plans. What staying, upgrading or moving to an open-source platform such as DFIR-IRIS each involves.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.