Freedom251 › Incident Response Software
Forendi

What Forendi is
Forendi is a cloud digital forensics and incident response platform for managing incidents, investigations, evidence and security operations. Its incident workflows cover the path from detection to resolution, with automation and real-time responder collaboration. Case records include full audit trails, while lightweight agents collect evidence with integrity checks and chain-of-custody tracking. Hyperledger Fabric integration adds tamper-proof evidence storage and cryptographic verification. For threat detection, Forendi connects with SIEM systems and offers a threat intelligence service with more than one million curated indicators, each with confidence scores and expiry dates. Feeds are available through TAXII 2.1 with STIX 2.1, a native MISP directory and cursor-paginated REST/JSON. The agent supports Windows, macOS and Linux. Plans include Threat Intelligence Feed at $199 a month, Threat Intelligence Platform at $399 a month and DFIR Platform at $499 per analyst per month. Each product has a seven-day trial without a credit card; the trial is intended for evaluation and integration sampling, not production replacement.
Who it suits
Forendi suits security teams handling incident response, forensic investigations and evidence tracking. Its threat intelligence feeds may also suit teams integrating indicators with SIEM systems or using TAXII, MISP or REST/JSON.
What it does well
- Incident workflows include automation and live collaboration.
- Evidence collection includes integrity checks and chain of custody.
- Threat intelligence includes over one million curated indicators.
- Agents support Windows, macOS and Linux.
- Seven-day trials do not require a credit card.
What to know first
- No free plan is listed.
- Threat Intelligence Feed starts at $199 a month.
- Trial use is intended for evaluation, not production replacement.
Limits
The trial lasts seven days and is intended for evaluation and integration sampling rather than production replacement. Indicator extraction accepts a URL, pasted text or a PDF up to 25 MB.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Threat Intelligence Feed | $199/ month · Every indicator scored and sourced · Popular sites filtered · TAXII, MISP and REST | $199 a month |
| Threat Intelligence Platform | $399/ month · Threat hunting across full pool · Vulnerabilities matched to your software · AI-drafted detection rules · Weekly intelligence bulletins | $399 a month |
| DFIR Platform | $499/ analyst / month · Everything in Threat Intelligence · Incident and case management · Endpoint collection and forensics · Blockchain chain of custody | $499 a month |
As forendi.com lists them, read 1 Oct 2026. The maker's own page has the final word.
Getting started
- Visit forendi.com and schedule a demo or contact Forendi.
- Choose a product plan: Threat Intelligence Feed, Threat Intelligence Platform or DFIR Platform.
- Start the seven-day full-platform trial without a credit card.
- Use the cloud platform through web or API, or supported desktop and Linux platforms.
- Deploy Forendi Agent on Windows, macOS or Linux for evidence collection.
Verdict
Forendi combines incident and case management with forensic collection, evidence controls and threat intelligence. The listed plans start at $199 a month, and the trial is limited to evaluation and integration sampling.
Questions
How much does Forendi cost?
Threat Intelligence Feed costs $199 a month. Threat Intelligence Platform costs $399 a month, and DFIR Platform costs $499 per analyst per month.
Is there a free plan or trial?
There is no free plan. Each product starts with a seven-day full-platform trial without requiring a credit card.
Which platforms does Forendi support?
The platform is listed for API, Linux, macOS, web and Windows. The Forendi Agent supports Windows, macOS and Linux.
What threat intelligence feed methods are supported?
Delivery methods include TAXII 2.1 with STIX 2.1, a native MISP feed directory and cursor-paginated REST/JSON.
Does Forendi support evidence tracking and collaboration?
Yes. It offers evidence tracking, responder collaboration and audit logs.
Where is Forendi based?
Forendi lists its headquarters in Gölbaşı, Ankara, Türkiye.
Facts from Forendi's own pages
- Agent platforms
- The Forendi Agent supports Windows, macOS and Linux and communicates over secure WebSockets. · forendi.com, 1 Oct 2026
- Blockchain security
- Hyperledger Fabric integration provides tamper-proof evidence storage and cryptographic verification. · forendi.com, 1 Oct 2026
- Case management
- Case management tracks evidence and investigations with full audit trails and compliance support. · forendi.com, 1 Oct 2026
- Compliance
- Forendi states that its audit trails and reporting support GDPR, ISO 27001 and industry regulations. · forendi.com, 1 Oct 2026
- Feed integrations
- Supported delivery methods are TAXII 2.1 with STIX 2.1, a native MISP feed directory and cursor-paginated REST/JSON. · forendi.com, 1 Oct 2026
- Forensic collection
- Lightweight agents collect evidence securely with integrity verification and chain of custody. · forendi.com, 1 Oct 2026
- Headquarters
- Gölbaşı, Ankara, Türkiye · forendi.com, 28 Sept 2026
- Incident management
- The platform provides lifecycle management from detection to resolution with automated workflows and real-time collaboration. · forendi.com, 1 Oct 2026
- Product scope
- Forendi is a comprehensive digital forensics and incident response platform for incident management, forensic analysis and security operations. · forendi.com, 1 Oct 2026
- Report extraction limit
- Users can submit a URL, paste text or upload a PDF up to 25 MB for indicator extraction. · forendi.com, 1 Oct 2026
- SIEM integration
- The Forendi Platform integrates with SIEM systems for real-time threat detection and optimized data pipelines. · forendi.com, 1 Oct 2026
- Support and contact
- Forendi invites users to schedule a demo and lists email and phone contact details in Gölbaşı, Ankara. · forendi.com, 1 Oct 2026
- Threat intelligence
- The threat intelligence service provides over one million curated indicators with confidence scores and expiry dates. · forendi.com, 1 Oct 2026
- Trial limitation
- The trial allowance is intended for evaluation and integration sampling rather than production replacement. · forendi.com, 1 Oct 2026
- Trial terms
- Each product starts with a seven-day full-platform trial without requiring a credit card. · forendi.com, 1 Oct 2026
Where Forendi stands on Freedom251
- Incident Response Software#15 of 21
