The Geeks Club
Vendor dashboard
Search
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements

Best Digital Forensics Software in 2026

27 digital forensics software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.

27ranked
11free plans on this page
$41.58/molowest paid tier
3 Oct 2026last checked
#1 Paraben E3 Forensic Platform Top pick · 9.7 Free plan · $58.25/mo #2 Cellebrite Inseyets Runner-up · 8.0 #3 SUMURI PALADIN Also great · 7.6 Free plan · Free
  1. 1

    Paraben E3 Forensic Platform

    9.7
    Free planFree trial AndroidiOSLinuxmacOSWindows
    Free plan
    No
    Paid from
    699 /yr
    Evidence sources
    Smartphones, computers, disk images, memory dumps, email, chat databases, cloud services, social media, IoT devices, game consoles, archives, and OSINT data
    Mobile forensics
    Yes
    Disk imaging
    Yes
    Memory forensics
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    $58.25/mofirst paid tier About Paraben E3 Forensic PlatformVisit site
  2. 2

    Cellebrite Inseyets

    8.0
    Free trial WebWindows
    Evidence sources
    iOS devices; Android devices; mobile applications; cloud data; encrypted and containerized files; SIM cards; portable media; UAV evidence
    Mobile forensics
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About Cellebrite InseyetsVisit site
  3. 3

    SUMURI PALADIN

    7.6
    Free plan Linux
    Free plan
    Yes
    Evidence sources
    Disk images, local disks, logical files, unallocated-space images, Autopsy Logical Imager results, XRY text exports, mobile and vehicle data
    Mobile forensics
    Yes
    Disk imaging
    Yes
    Memory forensics
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About SUMURI PALADINVisit site
  4. 4

    CAINE

    7.5
    Free plan LinuxWindows
    Free plan
    Yes
    Evidence sources
    raw/dd disk images; EnCase files; databases; internet histories; Windows registries; deleted files; EXIF data; volatile memory dumps; Android and iPod devices
    Mobile forensics
    Yes
    Disk imaging
    Yes
    Memory forensics
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About CAINEVisit site
  5. 5

    Oxygen Forensic Detective

    7.3
    Windows
    Evidence sources
    Mobile devices; computers and external media; cloud services and app data; drones; vehicle systems; IoT sources; warrant returns; account data; third-party forensic extractions
    Mobile forensics
    Yes
    Disk imaging
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About Oxygen Forensic DetectiveVisit site
  6. 6

    Magnet AXIOM Cyber

    7.2
    Free trial LinuxmacOSself-hostedWindows
    Free plan
    No
    Evidence sources
    Mobile devices; computer drives and forensic images; Windows, macOS, Linux, and Chromebook files and folders; Windows memory dumps; cloud services; remote endpoints
    Mobile forensics
    Yes
    Disk imaging
    Yes
    Memory forensics
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About Magnet AXIOM CyberVisit site
  7. 7

    Tsurugi Linux

    7.2
    Free plan Linux
    Free plan
    Yes
    Evidence sources
    disk images; volatile memory; mobile devices; file systems; OS artifacts; cloud environments; virtual machines; network data
    Mobile forensics
    Yes
    Disk imaging
    Yes
    Memory forensics
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About Tsurugi LinuxVisit site
  8. 8

    Exterro FTK Imager

    7.1
    Free plan WebWindows
    Free plan
    Yes
    Evidence sources
    Live enterprise endpoints; Windows, macOS, and selected Linux artifacts; Microsoft 365; Exchange; SharePoint; OneDrive; Google Workspace; Gmail; Google Drive; Slack; Microsoft Teams; Confluence; AFF4; E01; AD1; RAW/DD
    Mobile forensics
    No
    Disk imaging
    Yes
    Memory forensics
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    $41.58/mofirst paid tier About Exterro FTK ImagerVisit site
  9. 9

    NetworkMiner

    7.1
    Free plan LinuxmacOSWindows
    Free plan
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About NetworkMinerVisit site
  10. 10

    X-Ways Forensics

    7.0
    Windows
    Free plan
    No
    Evidence sources
    Raw DD images, ISO, VHD, VHDX, VDI, VMDK, physical disks, RAIDs, filesystems, Android/iOS data imported through third-party tools, iTunes backups
    Mobile forensics
    Yes
    Disk imaging
    Yes
    Memory forensics
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About X-Ways ForensicsVisit site
  11. 11

    OSForensics

    7.0
    WindowsAndroid
    Free plan
    No
    Evidence sources
    Windows, Mac, Linux, Android, iOS/macOS file systems, disk images, memory dumps, emails, browser data, registry hives, SQLite and ESE databases
    Mobile forensics
    Yes
    Disk imaging
    Yes
    Memory forensics
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About OSForensicsVisit site
  12. 12

    SIFT Workstation

    7.0
    Free plan WindowsLinux
    Free plan
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About SIFT WorkstationVisit site
  13. 13

    Plaso

    7.0
    Free plan WindowsmacOSLinux
    Free plan
    Yes
    Evidence sources
    Storage-media images, files, directories, devices, logs, databases, Windows Registry data, Android and iOS artifacts
    Mobile forensics
    Yes
    Disk imaging
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About PlasoVisit site
  14. 14

    SUMURI RECON LAB

    6.8
    macOSWindows
    Free plan
    No
    Evidence sources
    macOS, Windows, Linux, iOS, Android, Google Takeout, AFF4 images, Cellebrite extractions, GrayKey backups, ADB Android backups
    Mobile forensics
    Yes
    Disk imaging
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About SUMURI RECON LABVisit site
  15. 15

    Arkime

    6.8
    Free plan apiLinuxself-hostedWeb
    Free plan
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About ArkimeVisit site
  16. 16

    ADF Triage-G2

    6.7
    Windows
    Free plan
    No
    Evidence sources
    iOS devices, Android devices, computers, USB devices, storage media, documents, emails, text communications, and digital images
    Mobile forensics
    Yes
    Disk imaging
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About ADF Triage-G2Visit site
  17. 17

    MSAB XRY

    6.7
    Windows
    Free plan
    No
    Evidence sources
    iOS devices; Android devices; smartphone apps; SIM cards; SD/memory cards; cloud storage; social-media services; iCloud backups; GPS devices; device RAM; full device dumps and binary files
    Mobile forensics
    Yes
    Disk imaging
    Yes
    Memory forensics
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About MSAB XRYVisit site
  18. 18

    Volatility 3

    6.6
    Free plan LinuxmacOSself-hostedWindows
    Free plan
    Yes
    Evidence sources
    volatile memory (RAM) samples and memory images from Windows, Linux, and macOS
    Mobile forensics
    No
    Disk imaging
    No
    Memory forensics
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About Volatility 3Visit site
  19. 19

    Belkasoft X Forensic

    6.5
    Windows
    Free plan
    No
    RecognisedDocumentedFree planFree trialPlatforms
    About Belkasoft X ForensicVisit site
  20. 20

    MOBILedit Forensic

    6.4
    Windows
    Free plan
    No
    Evidence sources
    Mobile phones, smartwatches, cloud services, applications, backups, physical images, filesystems, messages, calls, media, passwords, and deleted data
    Mobile forensics
    Yes
    Disk imaging
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About MOBILedit ForensicVisit site
  21. 21

    The Sleuth Kit

    6.3
    WindowsmacOSLinux
    Evidence sources
    Raw/dd, E01/EnCase, VHD, VMDK, AFF images; NTFS, FAT, ExFAT, APFS, UFS 1/2, EXT2/3/4, HFS, ISO 9660, and YAFFS2 file systems
    Mobile forensics
    Yes
    Disk imaging
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About The Sleuth KitVisit site
  22. 22

    Timesketch

    6.1
    WebLinux
    Evidence sources
    Plaso storage files, CSV, JSON, JSONL, Pandas DataFrame, Python dict, XLS/XLSX
    RecognisedDocumentedFree planFree trialPlatforms
    About TimesketchVisit site
  23. 23

    Guymager

    6.0
    Free plan Linux
    Free plan
    Yes
    Evidence sources
    storage devices and removable media
    Disk imaging
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    Free About GuymagerVisit site
  24. 24

    Elcomsoft Mobile Forensic Bundle

    5.9
    WindowsmacOSLinux
    Free plan
    No
    Evidence sources
    iOS devices, iOS backups, iCloud, Microsoft accounts, Google accounts, Windows devices, file-system images
    Mobile forensics
    Yes
    Disk imaging
    Yes
    RecognisedDocumentedFree planFree trialPlatforms
    About Elcomsoft Mobile Forensic BundleVisit site
  25. 25

    Hayabusa

    5.9
    WindowsmacOSLinux
    Evidence sources
    Windows event logs (EVTX)
    Mobile forensics
    No
    Disk imaging
    No
    Memory forensics
    No
    RecognisedDocumentedFree planFree trialPlatforms
    About HayabusaVisit site

Is your platform on this list?

Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.

#1 open#2 open#3 open#4 open#5 openClaim your listing — free

Questions about this list

Which digital forensics software is ranked first on The Geeks Club?

Paraben E3 Forensic Platform is ranked #1 of 27 with a score of 9.7. Cellebrite Inseyets is second and SUMURI PALADIN third.

How many of these have a free plan?

11 of the 25 on this page publish a free plan on their own pricing pages.

Which is the cheapest paid option?

On this page, Exterro FTK Imager has the lowest first paid tier we found: $41.58/mo.

How is this list ranked?

Ranked on how quickly a newcomer can get going: documentation depth, a free tier or trial, and the platforms it runs on. Paid placements never change a rank.

More in IT & Infrastructure

All it & infrastructure lists
IT Asset Management Software 108Website Monitoring Software 54IT Automation Software 50IT Knowledge Base Software 44Competitor Price Monitoring Software 39Application Deployment Software 34DNS Monitoring Software 34IT Vendor Management Software 34Patch Management Software 34CMDB Software 33Identity and Access Management Software 30IT Problem Management Software 30