
GITNUXSOFTWARE ADVICE
Cybersecurity Information SecurityTop 10 Best Fraud Case Management Software of 2026
Top 10 ranking of fraud case management software with key features and tradeoffs for fraud teams and compliance leaders reviewing vendors.
How we ranked these tools
Vendors set the topic, but our editors set the inclusion criteria and the evaluation framework before research starts.
Agents extract product evidence with provenance, then collect written reviews and transcribe video reviews and podcasts.
Framework: Features 40% · Ease 30% · Value 30%
Gitnux may earn a commission through links on this page — this does not influence rankings. Editorial policy
FICO Platform is the best fit if fraud operations need configurable case workflows tied to entity and decision data, whereas SEON works better when you want SMB-ready, case-centered handling with strong entity context and integration-driven automation.
Editor’s top 3 picks
Three quick recommendations before you dive into the full comparison below — each one leads on a different dimension.
FICO Platform
Configurable investigation workflow and evidence packaging that remains consistent across disposition, audit trail, and downstream review needs.
Best for: Fits when fraud operations needs configurable case workflows tied to entity and decision data.
ComplyAdvantage
Editor pickCase workbench centered on entity intelligence and relationships from screening and ongoing monitoring.
Best for: Fits when fraud teams need entity screening context inside investigations and SAR-ready documentation.
Feedzai
Editor pickInvestigation case context is linked to the fraud detection signals that generated each alert, reducing re-interpretation during triage.
Best for: Fits when fraud operations need case workflows connected to detection signals and rich evidence packages for investigators.
Comparison Table
FICO Platform
enterpriseFICO fraud solutions support decisioning, detection, alert investigation, and fraud operations management.
Configurable investigation workflow and evidence packaging that remains consistent across disposition, audit trail, and downstream review needs.
FICO Platform is designed for fraud case management where investigators need more than ticketing, because it couples case triage and investigation workflow tracking with evidence packaging that can be presented consistently for downstream regulatory reporting and internal review. The integration story tends to matter most when core banking integration or customer profile services must populate entity context and transaction history inside the same operational workflow. Configuration of disposition codes and investigation steps enables consistent alert disposition and case prioritization across teams.
A key tradeoff is that case behavior and automation logic require deliberate configuration so investigators see the right prompts, evidence fields, and disposition paths. The best fit shows up when a fraud operations team needs high-throughput case intake that must stay aligned with enterprise entity resolution and decision outputs, not just manual investigation notes.
- +Evidence packaging and investigative narratives stay structured across cases
- +Automation and API connectivity support queue updates from external detection
- +Disposition codes drive consistent alert disposition and closure tracking
- +Audit trail visibility supports internal governance and review workflows
- –Workflow configuration needs strong governance discipline across investigators
- –Deep integrations can raise implementation effort for core system connectivity
- –Role setup and policy tuning can be time-consuming for distributed teams
- –Field customization flexibility can overwhelm when requirements are underdefined
Fraud operations analysts
Investigate alerts in investigator queue
Faster, consistent case closure
Fraud compliance teams
Support SAR filing readiness
Cleaner regulatory review packages
Show 2 more scenarios
Risk engineering teams
Connect case actions to decisioning
Lower friction between systems
Automation and API integrations synchronize case state with detection and entity context services.
Enterprise fraud program admins
Govern cross-team workflows
Uniform handling across teams
Role-based access and configurable policies enforce consistent investigation steps across business units.
Best for: Fits when fraud operations needs configurable case workflows tied to entity and decision data.
ComplyAdvantage
enterpriseFinancial crime software provides monitoring, alert review, investigation, and case management capabilities.
Case workbench centered on entity intelligence and relationships from screening and ongoing monitoring.
ComplyAdvantage is strongest when fraud teams already rely on entity resolution outputs and need investigation context tied to screening signals. Entity relationships, account and transaction context, and investigator-facing case views reduce time spent manually stitching investigative narrative details. Audit trail support and configurable disposition handling help teams document alert disposition decisions for internal review and SAR filing workflows. This fit is clearest for organizations that treat cases as an operational outcome of screening and monitoring rather than a standalone ticketing tool.
A tradeoff appears when teams need highly customized investigation workflow steps that mirror internal typology and evidence-package structures without relying on ComplyAdvantage data objects. Setup choices and governance discipline matter for role-based access control and for keeping investigators aligned on disposition codes. ComplyAdvantage works best when integrations can provide consistent entity identifiers and when investigators use the case view as the system of record for evidence pointers and narrative fields.
- +Watchlist-driven screening data gives investigators actionable entity context
- +Case records retain audit trail detail for investigation and SAR workflows
- +Entity relationship context reduces manual research during triage
- +API support supports alert intake and case workflow integration
- –Deep workflow customization can require careful configuration planning
- –Evidence-package modeling may not match every internal chain-of-custody process
Fraud operations teams
Alert triage with entity context
Faster case prioritization
Compliance and AML teams
SAR support from case records
Cleaner regulatory submissions
Show 1 more scenario
Risk and fraud engineering
Integrate screening into case intake
Higher investigation throughput
Engineers send entity and alert data through API so case workflows start from consistent identifiers.
Best for: Fits when fraud teams need entity screening context inside investigations and SAR-ready documentation.
Feedzai
enterpriseFinancial crime technology supports fraud detection, alert investigation, case management, and risk operations.
Investigation case context is linked to the fraud detection signals that generated each alert, reducing re-interpretation during triage.
Feedzai connects alert management to investigation workflow, which helps fraud teams keep allegations, dispositions, and investigative narrative aligned with the decisions that generated the alert. It supports evidence package assembly across customer, account, and transaction artifacts, which is useful for payments investigations and account takeover cases. The case handling flow is designed for investigator queue throughput, including case triage steps that route work to the right owners.
A key tradeoff is that case handling depth depends on how well the organization integrates Feedzai with its transaction and identity sources, since evidence completeness is constrained by upstream data availability. Feedzai fits best when an existing fraud decision stack already outputs hypotheses and features, and investigators need cases that reflect those signals with consistent context. For teams without mature data integration, investigation workflows may work, but evidence packages can be thinner and require more manual enrichment.
- +Investigation workflow stays tied to the detection context behind each alert
- +Evidence packages can include customer and transaction artifacts in one place
- +Investigator queue supports consistent disposition and handoff steps
- +Extensibility via integrations helps map internal case fields and identifiers
- –Evidence package quality depends heavily on upstream data integration
- –Workflow configuration can be time-consuming for teams without admin support
- –Case operations need discipline to keep narratives consistent across investigators
- –Queue and routing behavior requires careful alignment to internal processes
Fraud operations analysts
Handle alert disposition for payment anomalies
Faster, more consistent disposition decisions
Investigation leads
Coordinate investigator queue handoffs
Lower rework across investigators
Show 2 more scenarios
Risk engineering teams
Align case fields with detection outputs
More traceable investigative reasoning
Engineering connects decision and identity outputs to investigation context so cases reflect the same hypotheses.
Compliance and reporting teams
Prepare evidence for regulatory review
More complete regulatory-ready records
Teams assemble evidence packages tied to allegation records to support downstream regulatory documentation needs.
Best for: Fits when fraud operations need case workflows connected to detection signals and rich evidence packages for investigators.
NICE Actimize
enterpriseEnterprise financial crime software supports fraud detection, investigations, case management, and compliance operations.
Actimize case management ties investigation work to connected-entity views, then keeps evidence packages aligned to SAR-ready regulatory reporting steps.
NICE Actimize pairs fraud case management with end-to-end financial crime operations tooling for intake, investigations, and investigative narrative building around connected entities. Case teams work from configurable workflows that support alert disposition, investigator queues, and evidence package assembly for SAR filing and regulatory reporting.
- +Configurable investigation workflows align disposition, routing, and case status
- +Strong investigator queue handling supports prioritization across alert volumes
- +Entity resolution improves linkage from customer, account, and transaction evidence
- +Evidence package structuring supports regulatory reporting workflows
- –Workflow configuration requires governance discipline across case types
- –Integration effort can be heavy when core banking data mappings are complex
- –Investigation UX depends on tailoring to match local operating procedures
- –Automation choices may require tuning to avoid over-triage of alerts
Best for: Fits when fraud operations teams need enterprise-grade case routing, evidence packaging, and entity-linked investigations.
SEON
SMBFraud prevention software combines digital intelligence, risk scoring, review queues, and fraud case handling.
Entity-centric case context that merges identity, device, and behavioral signals to keep investigations coherent across investigator handoffs.
SEON manages fraud investigations by centralizing fraud intake into investigator-facing cases and supporting investigation workflow from triage to disposition. It differentiates itself through entity-centric enrichment that ties signals from identity, device, and behavioral sources into a single case context.
- +Entity-first enrichment keeps identity, device, and behavior signals together
- +Case workflow supports investigator queues and structured disposition codes
- +Evidence packaging lets teams assemble an audit-ready investigation trail
- +API support enables case and alert updates from external risk systems
- –Admin configuration for workflow rules can become complex at scale
- –Deep customer profile tuning depends on careful data mapping across sources
Best for: Fits when fraud teams need case-centered workflows with strong entity context and integration-driven automation.
Unit21
enterpriseFraud and financial crime teams manage alerts, investigations, cases, and regulatory reporting in one platform.
Evidence package organization stays attached to the investigative narrative across the full case lifecycle.
Unit21 centers fraud case management for teams that handle alert disposition and investigative narrative with consistent investigator workflows. The tool focuses on turning intake events into structured cases that track evidence packages, digital artifacts, and investigative updates in one working queue.
- +Case workflows map cleanly to investigator queues and disposition steps
- +Evidence packaging keeps digital artifacts tied to investigative narrative
- +Configurable automation reduces manual triage and routing work
- +API support supports linking case work with external fraud signals
- –Governance around roles and workflow configuration takes deliberate setup
- –Deep investigation customization can require ongoing admin tuning
- –Integration requires careful alignment of case identifiers across systems
Best for: Fits when fraud ops teams need structured case handling with evidence-linked narratives and configurable routing.
Fraud.net
SMBCloud fraud prevention software provides risk scoring, alert review, investigations, and case management.
Investigation timeline that links evidence, decisions, and disposition outcomes in a single investigator-facing case record.
Fraud.net differentiates itself by centering investigation workflow around an investigator-led case view that ties alerts to a structured investigative narrative. The core capabilities cover fraud intake, case triage, evidence collection, and task assignment so investigators can keep SAR filing and regulatory reporting-ready context in one place.
- +Investigator workflow links alerts to a controlled investigative narrative
- +Configurable queues and disposition codes support consistent case handling
- +Evidence package structure reduces context switching during investigation
- +Documented API supports case event integration into operational tooling
- –Complex investigations require careful configuration of workflow stages
- –Entity resolution and enrichment coverage depends on connected systems
- –Advanced reporting needs extra admin work to match audit expectations
- –Large evidence volumes can slow navigation across long case histories
Best for: Fits when fraud operations teams need an investigator-first case workflow tied to evidence and audit trails.
Sardine
API-firstFraud prevention software combines risk decisions, transaction monitoring, investigations, and case management.
Investigation narrative templates that bind disposition decisions to evidence and reviewer handoffs within one case record.
Sardine is fraud case management software that focuses on investigator workflow and review routing for allegations tied to transaction and entity details. It supports structured case intake, assignment into investigator queues, and investigation narratives that can carry forward evidence and outcomes toward regulatory reporting.
- +Investigator queues speed case prioritization and reassignment
- +Investigation narratives keep decisions tied to supporting context
- +Audit trail records case activity for regulatory reporting readiness
- +Case intake forms reduce manual re-keying across teams
- –API and integration depth can require developer work for core banking ecosystems
- –Complex evidence package workflows can need careful configuration
- –Entity resolution and typology coverage is less comprehensive than specialists
- –Governance controls for large RBAC matrices are limited for some orgs
Best for: Fits when fraud ops teams need structured case handling and audit trails tied to alert context.
SAS Fraud Management
enterpriseFraud management software combines analytics, detection, alert handling, and investigation processes.
Case lifecycle governance with audit trail-linked activity records across triage, assignment, and evidence capture.
SAS Fraud Management routes fraud intake items into investigator queue workflows with structured triage, assignment, and case status tracking. It pairs case handling with rule-based and analytics-driven decisioning for alert disposition and investigation workflow progression.
- +Strong investigator workflow with configurable triage and assignment logic
- +Evidence package structure keeps notes and attachments organized per case
- +Integration focus supports entity resolution and customer profile enrichment
- +Audit trail coverage ties user actions to case lifecycle steps
- –Configuration depth can slow onboarding for lean operations teams
- –Out-of-the-box interfaces for digital evidence vary by integration scope
- –Investigation customization can require developer-level support
- –Case operations depend heavily on accurate upstream feed quality
Best for: Fits when regulated fraud teams need controlled case workflows plus evidence traceability across multiple data sources.
Flagright
API-firstAML and fraud operations software connects transaction monitoring, investigations, case management, and reporting.
Configurable investigator workflow steps that enforce consistent disposition and prioritization across case queues.
Flagright is a fraud case management tool built for investigators who need structured handling from first intake to investigation closure. It organizes investigations around case records and investigative narratives, with fields for evidence links and internal notes.
- +Case record structure keeps investigations consistent across investigators
- +Configurable workflow steps support standardized fraud handling
- +Audit trail visibility ties actions to case work for reviews
- +Evidence links and notes support investigation narratives in one place
- –Automation depth can require careful workflow configuration discipline
- –Integrations and data mapping for core banking style feeds can be limited
- –Entity resolution support is not as center-stage as workflow tools
- –Reporting granularity for SAR-style fields can lag case teams’ needs
Best for: Fits when fraud ops teams need structured case handling and audit trail context for investigation workflows.
Conclusion
After evaluating 10 fraud case management software, FICO Platform stands out as our overall top pick — it scored highest across our combined criteria of features, ease of use, and value, which is why it sits at #1 in the rankings above.
Use the comparison table and detailed reviews above to validate the fit against your own requirements before committing to a tool.
How to Choose the Right Fraud Case Management Software
Fraud case management software organizes fraud intake through investigation workflow and disposition steps, then keeps audit trail detail tied to each decision and evidence package. The tools covered here include FICO Platform, ComplyAdvantage, Feedzai, NICE Actimize, SEON, Unit21, Fraud.net, Sardine, SAS Fraud Management, and Flagright.
The decision turns on how case workbench records connect to entity intelligence, detection signals, and evidence packaging formats. It also turns on whether workflow configuration and queue routing can be governed across investigators without slowing onboarding.
Fraud Case Management Software for investigations, evidence packaging, and regulated dispositions
Fraud case management software provides investigator-facing case records that bind fraud allegation intake, investigation workflow stages, and disposition codes to structured evidence packaging and audit trail activity. FICO Platform uses configurable investigation workflows and evidence packaging that stay consistent across disposition and downstream review needs, which helps fraud operations maintain structured narratives across cases.
ComplyAdvantage centers case work around entity intelligence and relationships, then retains audit trail detail for investigation and SAR workflows inside the case record. Feedzai links case context to the fraud detection signals behind each alert, which reduces re-interpretation during triage when teams must move quickly from alert disposition to investigative narrative.
Fraud case workbench capabilities that control investigation throughput and evidence quality
Fraud case management software earns time in investigations when each case record keeps the investigative narrative consistent with the evidence package and the disposition outcome. That consistency matters because investigators reuse case context across alert disposition, escalation, reviewer handoffs, and downstream regulatory reporting.
The category also hinges on how well the case workbench links to entity context and detection signals. FICO Platform keeps configurable investigation workflow and evidence packaging aligned across disposition and downstream review needs. Feedzai ties case context to the detection signals behind each alert, which reduces re-interpretation during case triage.
Configurable investigation workflows tied to evidence packaging
FICO Platform keeps configurable investigation workflow and evidence packaging consistent across disposition, audit trail, and downstream review needs. NICE Actimize aligns disposition, routing, and case status so evidence packages stay SAR-ready for regulatory workflows.
Entity intelligence and relationship context inside the case record
ComplyAdvantage centers its case workbench on entity intelligence and relationships, then retains audit trail detail for investigation and SAR workflows. SEON merges identity, device, and behavioral signals so investigator handoffs stay coherent on entity-centric case context.
Detection-signal traceability from alert to investigative narrative
Feedzai links investigation case context to the fraud detection signals that generated each alert, which reduces re-interpretation during triage. Sardine binds disposition decisions to evidence and reviewer handoffs inside the same case record when alert context must remain attached.
Case lifecycle governance with audit trail-linked activity records
SAS Fraud Management emphasizes controlled case lifecycle governance with audit trail-linked activity records across triage, assignment, and evidence capture. NICE Actimize ties investigation work to connected-entity views and keeps evidence packages aligned to SAR-ready regulatory reporting steps.
Investigator queue operations with standardized disposition codes
SEON supports investigator queues and structured disposition codes in entity-centered workflows. Flagright enforces consistent disposition and prioritization across case queues using configurable investigator workflow steps.
Choose the case model and integration surface that match case governance and evidence handling
Case management fit depends on whether the workflow engine is meant to stay stable across many investigators or adapt quickly to new case types and evidence patterns. FICO Platform and NICE Actimize both emphasize configurable workflows, but FICO Platform focuses on keeping evidence packaging and investigative narratives consistent across disposition and downstream review needs.
Integration depth determines whether case context remains connected to upstream signals and data artifacts. Feedzai connects case workflows to the detection context behind each alert, while Sardine’s investigation narrative templates require API and integration depth work when core banking ecosystems must be supported.
Match governance depth to workflow change control
Choose FICO Platform or NICE Actimize when fraud operations needs configurable workflows that stay aligned to disposition, routing, and case status without losing audit trail structure. Choose SAS Fraud Management when regulated teams need controlled case lifecycle governance where audit trail-linked activity records cover triage, assignment, and evidence capture.
Pick a case context philosophy that keeps investigators from reconstructing meaning
Choose ComplyAdvantage when case records must include entity intelligence and relationship context for investigation and SAR workflows. Choose Feedzai when case triage must stay tied to the detection signals behind each alert so investigators do not re-interpret alert meaning during workflow transitions.
Stress-test evidence-package structure against chain-of-custody expectations
Choose tools that explicitly keep evidence packaging structured across disposition and downstream review steps such as FICO Platform and NICE Actimize. Choose Unit21 or Fraud.net when evidence package organization must remain attached to the investigative narrative across the full case lifecycle or when the investigator timeline must link evidence, decisions, and disposition outcomes.
Assess integration workload based on core system mapping requirements
Choose ComplyAdvantage when entity screening and ongoing monitoring data must appear inside the investigation workbench without forcing investigators to chase context across systems. Choose Sardine, Flagright, or Feedzai with clear expectations on integration and mapping effort when core banking ecosystems demand deeper developer work.
Confirm queue and handoff speed against your investigator operating model
Choose SEON or Flagright when investigator queues and standardized disposition codes must drive consistent case handling across large alert volumes. Choose Sardine when narrative templates must bind disposition decisions to evidence and reviewer handoffs inside a single case record to reduce handoff drift.
Who benefits from fraud case management designs built around evidence, entity context, and routing
Fraud case management software fits teams that must move from fraud intake to investigation workflow stages while keeping audit trail detail tied to each decision and evidence package. The strongest fit usually appears when investigators need structured case narratives and reviewers need predictable evidence packaging formats.
Tool fit also depends on how case work should relate to upstream context. Feedzai serves teams that need alert-context traceability, while ComplyAdvantage serves teams that need entity intelligence inside the case workbench.
Fraud operations teams managing high alert volumes with strict investigator queue routing
Tools such as NICE Actimize and Flagright support investigator queue handling and configurable workflow steps that enforce consistent disposition and prioritization across case queues.
Regulated fraud teams that must keep audit trail-linked evidence structured across triage and assignment
SAS Fraud Management emphasizes audit trail-linked activity records across triage, assignment, and evidence capture, while FICO Platform keeps evidence packaging consistent across disposition and downstream review needs.
Case investigation teams that rely on entity intelligence and relationship context for SAR-ready narratives
ComplyAdvantage retains audit trail detail for investigation and SAR workflows while keeping watchlist-driven entity context inside case records. SEON keeps identity, device, and behavioral signals together so investigations stay coherent across handoffs.
Detection-led fraud teams that require alert-signal traceability inside investigations
Feedzai links each alert’s detection signals to investigation case context, which keeps triage meaning attached as investigators move through workflow stages.
Operations teams building evidence-to-decision narratives that must survive reviewer handoffs
Sardine uses investigation narrative templates that bind disposition decisions to evidence and reviewer handoffs, while Unit21 and Fraud.net keep evidence package organization attached to the investigative narrative or timeline.
Common mistakes when selecting Fraud Case Management Software for real investigations
Teams often assume case management fit comes from case screens alone, but the decisive differences show up in workflow configuration discipline and evidence-package modeling. When the selected tool’s workflow rules are not governed across investigators, even a strong case workbench can produce inconsistent handling and messy evidence packages.
Integration assumptions also cause failures because evidence package quality and case context traceability depend on upstream data connectivity. Feedzai evidence-package quality depends heavily on upstream data integration, while Sardine and Flagright can require developer work and deeper mapping for core banking style feeds.
Choosing workflow configuration flexibility without governance discipline for investigators and case types
FICO Platform and NICE Actimize both require strong governance discipline when workflow configuration must stay consistent across investigators and case types. A setup plan should define who owns workflow rule changes and how investigators adopt new disposition steps.
Underestimating how evidence-package modeling must match internal chain-of-custody expectations
ComplyAdvantage can model evidence packages in ways that may not match every internal chain-of-custody process. Unit21 and Fraud.net keep evidence packages attached to narratives, but teams still need clear evidence formatting and attachment expectations.
Expecting detection-to-case traceability without validating upstream signal integration
Feedzai’s evidence package quality depends heavily on upstream data integration, which directly affects investigation context quality. Teams should validate alert-to-signal mapping so investigation workflows can rely on the detection context behind each alert.
Assuming core banking ecosystem support will be configuration-only
NICE Actimize and SAS Fraud Management can require heavier integration effort when core system mappings are complex. Sardine and Flagright can require developer work for API and integration depth when data mapping for core banking style feeds is needed.
Selecting entity-centric or alert-centric case designs without matching the investigator operating model
ComplyAdvantage and SEON optimize for entity intelligence and relationship context, while Feedzai optimizes for detection-signal linked triage context. Teams that depend on one operating model should align tool selection to that model to avoid extra reconstruction during investigations.
How analysts built this Fraud Case Management Software shortlist
Analysts collected evidence from published vendor documentation and product materials for each fraud case management software entry. Analysts cross-checked the operational claims against official documentation and the vendor changelog, then compared the coverage with independent review commentary when such commentary was cited.
The shortlist kept a tool such as FICO Platform when its documented configurable investigation workflow and evidence packaging consistency matched the stated capability and aligned with how queue updates and downstream review needs are described. This category list prioritizes tools whose case workbench designs stay grounded in evidence packaging and investigation narrative structure rather than only generic case screens.
Frequently Asked Questions About Fraud Case Management Software
How do FICO Platform and Feedzai connect fraud alerts to case work using APIs?
Which tools provide entity intelligence inside the investigator workflow for case triage?
When does chain-of-custody and evidence organization matter during an investigation?
How do NICE Actimize and Sardine differ in aligning evidence packaging with regulatory reporting steps?
What breaks if a fraud team needs disposition codes and audit trail visibility across handoffs?
Which platform fits investigations that require strong data enrichment across identity, device, and behavioral sources?
How do governance controls show up differently in FICO Platform versus SAS Fraud Management?
What should administrators validate during data migration into case management records?
Which tool is better when the operation team needs investigator queues tightly coupled to upstream detection signals?
Tools reviewed
Primary sources checked during evaluation.
Referenced in the comparison table and product reviews above.
Funding and competing interests
This study was co-funded by several of the vendors assessed in it. No single vendor funded it. Funders could propose the market studied.
They had no role in selecting vendors, setting or weighting criteria, analysing data or drawing conclusions, and they received the same factual-accuracy check as every other vendor assessed.
Market definition, inclusion rules and criteria weights were fixed by an editor before research began and did not change afterwards. Editorial process →
- Cybersecurity Information SecurityTop 10 Best Fraud Audit Software of 2026
- SecurityTop 10 Best Incident Response Case Management Software of 2026
- Cybersecurity Information SecurityTop 10 Best Credit Card Fraud Prevention Software of 2026
- Cybersecurity Information SecurityTop 10 Best Anti Fraud Services of 2026
- Cybersecurity Information SecurityTop 10 Best Agentic Fraud Detection Fintech Services of 2026
Keep exploring
Comparing two specific tools?
Software Alternatives
See head-to-head software comparisons with feature breakdowns, pricing, and our recommendation for each use case.
Explore software alternatives→In this category
Cybersecurity Information Security alternatives
See side-by-side comparisons of cybersecurity information security tools and pick the right one for your stack.
Compare cybersecurity information security tools→