Turn incidents into audit-ready evidence packs — fast.
CasePack helps MSPs run consistent incident reporting across customers, collect artifacts, and export a client/auditor-ready pack in minutes. Built for NIS2-style deadlines. Self-host-first.
The MSP problem
Why incident documentation is broken
Incidents live in tickets... evidence lives everywhere.
Scattered screenshots, logs in email, IOCs in chat. Good luck finding it all when you need it.
Deadlines and documentation are hard to standardize across customers.
Every customer has different requirements. Every incident becomes a fire drill.
Clients, insurers, and auditors want a clear story + proof.
They don't want your ticket history. They want a timeline, evidence, and a professional report.
Outcomes
What you get out of CasePack
Consistent incident workflow per customer
Same process, every time. No more ad-hoc scrambles.
One-click Evidence Pack export (PDF/ZIP)
Timeline, artifacts, and audit log in a professional bundle.
Timeline + tasks + roles
Track who did what, when. Clear accountability.
Less email chaos
Share links, send requests, get approvals — all in one place.
How it works
From incident to evidence pack in 4 steps
Intake from PSA ticket / webhook
Automatically create a case from your existing PSA workflow. No double-entry.
Guided timeline + milestones
Early warning, notification, final report — track NIS2-style deadlines automatically.
Upload artifacts
Logs, screenshots, IOCs, emails — all in one place with version history.
Export the Evidence Pack
PDF, ZIP, manifest, and audit log. Client and auditor ready.
Product
Two products, one mission
Start with the Reporting Kit. Add the Client Portal when you need it.
Incident Reporting Kit
Everything you need to document incidents professionally and consistently.
- Deadline milestones (NIS2-style)
- Report templates
- Task tracking
- Evidence pack export
Client Evidence Portal
A secure portal for clients to upload documents and sign off on reports.
- Secure client upload links
- Document requests
- Sign-off workflows
- Fewer email threads
Integrations
Connects to your stack
PSA-first by design. SIEM ingestion can come later.
PSA
Storage
Identity
Pricing
Simple, MSP-friendly pricing
Start small, scale as you grow. Early access cohorts are open.
Month-to-month. Cancel anytime.
Starter
Single team / internal incidents
Early access pricing
Pilot pricing may vary by MSP size
- Up to 3 team members
- Unlimited incidents
- Community support
MSP Pro
Multi-customer workflows + advanced exports
Founding cohort pricing (limited seats)
- Unlimited team members
- Multi-customer workspaces
- Full evidence pack exports
- PSA integrations
- Priority support
- Self-host option
Partner / Enterprise
Custom + onboarding
Contact for pricing
- Everything in MSP Pro
- Dedicated onboarding
- Custom integrations
- SLA guarantees
- White-label option
Pricing is indicative and may change before general availability.
FAQ
Common questions
Ship incident documentation clients can trust.
Book a demo or join early access.