- Home
- Incident Management Software
- FIR (Fast Incident Response)
On the recordRead 4 Oct 202613 facts
FIR (Fast Incident Response)
Plans and prices
FIR
Free
GPL-3.0 · self-hosted
Read 4 Oct 2026 · github.com
On the record
- Artifacts
- FIR extracts artifacts such as IP addresses, hostnames, URLs, email addresses, and hashes, and displays correlated artifacts from other incidents.github.com · read 4 Oct 2026
- Custom attributes
- Teams can define numeric incident attributes such as financial loss, stolen credential counts, or downtime and use them for statistics.github.com · read 4 Oct 2026
- Deployment
- FIR can be run with Docker for testing or occasional use, or installed in a production environment for daily use.github.com · read 4 Oct 2026
- Deployment requirements
- The README says FIR can run smoothly on an Ubuntu virtual machine with 1 core, 40 GB disk, and 1 GB RAM.github.com · read 4 Oct 2026
- Incident fields
- Incidents can include category, status, detection method, severity from 1 to 4, date and time, description, and TLP confidentiality.github.com · read 4 Oct 2026
- Incident workflow
- Users can add comments, files, attributes, todos, or nuggets and change an event's status to open, blocked, or closed.github.com · read 4 Oct 2026
- Integrations
- The repository includes optional plugins for MISP, LDAP, OIDC, two-factor authentication, and an API.github.com · read 4 Oct 2026
- Intended users
- The project says FIR is for teams that track cybersecurity incidents, including CSIRTs, CERTs, and SOCs.github.com · read 4 Oct 2026
- License
- The public repository identifies its license as GPL-3.0.github.com · read 4 Oct 2026
- Purpose
- FIR is a cybersecurity incident management platform for creating, tracking, and reporting incidents.github.com · read 4 Oct 2026
- Reporting
- The incident follow-up action opens a one-page report intended to be printed as a PDF for business lines.github.com · read 4 Oct 2026
- Technical stack
- FIR is written in Python with Django and Bootstrap, and the README describes MySQL while allowing other Django-compatible database adapters.github.com · read 4 Oct 2026
- Templates
- Incident templates can prefill incident creation fields, and the project documentation says none are defined by default.github.com · read 4 Oct 2026
