Collector
Collect and upload endpoint and mobile artifacts with collection credentials.
AI-Powered Digital Forensics
Upload the evidence,
see the case timeline.
Turn PC and mobile data into a timeline, then review privacy exposure and suspicious activity with links back to the original evidence.
Collect data, understand the sequence of events, ask questions, and prepare a report in one place.
No credit card required
Retention-based deletion
Fast Profiling · AI Auto Analysis
Self-hosted AI analysis
0+Policy targets
< 0minAvg. Analysis Time
0Languages
0Platforms
New to forensic analysis?
Follow one clear path from collection to review
Prepare a case, connect the collector, and begin evidence-grounded analysis by following only the steps you need.
Step 1
Prepare a case
Create a separate workspace for the material you will review.
Step 2
Connect the collector
Follow the guide to connect a device or forensic image to the case.
Step 3
Ask and verify
Review AI analysis alongside evidence numbers and source records.
Evidence intake
Bring encrypted messenger and browser records into the case
Connect device evidence, messenger data, and browser records to the same case. Supported stores are decrypted when the required key or backup material is available.
Messenger & browser decryption
Decrypt supported stores to analyze chats, accounts, attachments, visits, and searches. Coverage depends on the available key or backup material.
Disk images
Attach acquired images and volumes as case analysis sources.
Tool results
Normalize verified forensic tool outputs into analyzable evidence records.
Common flow after upload
ParsingEmbeddingAI analysisManual reviewTimelineCorrelation
Core Platform Features
Professional-grade digital intelligence without the complexity
One-Click Evidence Collection
Connect the material you need through the collector or evidence upload, then scope collection by operating system, device, and artifact. Supported formats and verified import paths are listed separately in the evidence-intake guide.
AI Autonomous Analysis
AI assists with threat-candidate triage and pattern analysis. MITRE ATT&CK tactic/technique mapping and timeline anomaly review are available in one workflow. After collection or upload, parsing, embeddings, AI analysis, manual review, timelines, and relationship analysis cite the same evidence records.
Digital Profiling
AI automatically profiles a user's occupation, interests, and behavioral patterns from device data alone. No investigation experience needed.
Data Protection by Design
Analysis data is encrypted in transit and at rest, then processed for deletion after the selected retention period. Service access is controlled by authentication, case ownership, and audit logs.
Professional Reports
Save hours on report writing. Automatically generate reports with Chain of Custody, hash verification, and timestamp proofs. (Admissibility as legal evidence depends on the jurisdiction.)
Transparent Pay-As-You-Go
Start at $9.90. Credit costs are shown before use, with no expensive licenses required.
CPO · Privacy Candidate Review
Review personal-data and exposure candidates from forensic evidence
Help privacy officers and CPOs organize candidate personal-data scope, exposure indicators, affected data categories, and draft review notes from forensic evidence.
Personal data scope
Summarize candidate emails, phone numbers, identifiers, and financial data as counts and evidence references without exposing raw values.
Exposure candidate timeline
Review USB, browser downloads, cloud uploads, archives, and malware indicators in chronological order.
Notification readiness
Track missing facts and next steps to review before notification decisions.
CPO review note draft
Prepare structured output for executive reporting, data subject notices, and legal review.
See It In Action
Experience AI-powered data analysis
ForensicsAI Analysis Demo
USB Exfiltration
Who Is This For?
From concerned individuals to professional investigators
Individuals
Suspicious activity? Second-hand laptop? Check it first before calling anyone.
"I found suspicious files on my teen's computer. What are they?"
Investigators
Dramatically reduce your triage time. Focus on what matters, let AI handle the rest.
"Analyze USB connection and file copy patterns from the last 30 days."
Small Business
Check departing employees' laptops before wiping. Protect your IP.
"Check if any confidential files were copied to external devices."
Transparent Credit-Based Pricing
Pay only for what you use. No monthly subscriptions, recharge when needed
Artifact Parsing: 1–20 credits/itemAI Analysis: 3 credits/1K tokensMalware Analysis: 300 credits/sample
100 Credits
$9.90
$0.099 per credit
For simple analysis tests
- Up to 10GB parsing equivalent
- Up to 33K AI-token equivalent
- Report generation: 10cr each
- Shared account credits across services
- Email support
Popular
500 Credits
$44.90
$0.090 per credit (9% off)
Most popular choice
- Up to 50GB parsing equivalent
- Up to 166K AI-token equivalent
- Report generation: 10cr each
- Shared account credits across services
- Email support
1,000 Credits
$79.90
$0.080 per credit (19% off)
For professional investigation teams
- Up to 100GB parsing equivalent
- Up to 333K AI-token equivalent
- Report generation: 10cr each
- Shared account credits across services
- Email support
5,000 Credits
$349.90
$0.070 per credit (29% off)
For large investigation projects
- Up to 500GB parsing equivalent
- Up to 1.66M AI-token equivalent
- Report generation: 10cr each
- Shared account credits across services
- Email support
All packages include: AES-256 encryption, privacy-control design, email support
Monthly Cost Calculator
Estimate credits from monthly cases, upload size, and AI questions
5/month
150
5GB
050
10/case
050
Credits per Case
Parsing (Upload)(10cr/GB)50
AI Analysis(6cr)60
Estimated Monthly Cost
550credits
$54.80
Average per Case
$10.96
Recommended Package
100 credits + 500 credits$54.80
Estimate based on data processing at 10cr/GB and an average 2K tokens per AI question (6cr/question).
Enterprise-Grade Security
We apply encryption, permission checks, and audit records to reduce unnecessary exposure of customer data
Case-Level Encryption and Access Control
Evidence data is encrypted with user- and case-separated keys, and service access requires authentication and case ownership checks.
Self-Hosted AI Model
Under the current operating configuration, AI analysis runs on our own infrastructure and evidence, queries, and analysis results are not sent to external AI provider APIs such as OpenAI, Google, or Anthropic.
Retention-Based Deletion
Uploaded originals are temporary processing inputs, not long-term retained case data. After parsing, configured retention applies to parsed records, embeddings, analysis outputs, reports, and related service copies under deletion procedures.
Transparent Operations
Our security architecture and encryption methods are publicly documented. Trust starts with transparency.
ISO 27037 Reference Design
GDPR-Ready Controls
AES-256 Encryption
SOC 2 Controls Reference
Self-Hosted AI
What We Do NOT Do
- We do NOT sell your data
- We do NOT send analysis data to external AI APIs
- We do NOT keep original data as long-term storage after the retention period
- We do NOT share analysis results with third parties
- We do NOT train AI on your data
FAQ
Frequently Asked Questions
Have questions? Here are answers to the most common ones.
It works like a conversation — just like ChatGPT or Gemini. For example, type "Show me USB connection history" or "Find deleted files" and the AI searches collected evidence for relevant data and provides analysis results in a conversational format. No complex commands or query syntax to learn.
Traditional tools require investigators to manually find and analyze evidence, while AI Forensic Lab assists with threat-candidate triage, MITRE ATT&CK tactic/technique mapping, and timeline anomaly review. Plus, it's cloud-based — start free with 500 credits on signup, no expensive hardware or licenses.
Analysis data is encrypted with AES-256-GCM and uses user-separated keys and case permission checks. Temporary processing data and uploaded data are handled according to the retention and deletion settings you select, and analysis results can be downloaded from your case.
Supported operating systems are Windows, Linux, macOS, Android, and iOS. AI Activity is provided as a supported artifact category, not as an operating system. The server collection policy covers 578 targets including registry, file systems, system logs, browsers, messengers (KakaoTalk, WhatsApp, Telegram, and 10+ more), and AI tool activity; the UI exposes 258 representative category items for scoping collection. Pre-extracted source evidence can also be connected through E01/RAW/container images, virtual disks, filesystem/volume and ISO/DMG images, mobile FFS bundles, AXIOM result DB, Cellebrite UFDR/XML, Autopsy DB, and supported third-party forensic exports.
No. AI assists with triage, analysis, and report drafting after evidence is collected. Ask questions in the conversational interface to review relevant evidence and reference analysis in an easier format.
Under the current operating configuration, evidence, queries, and analysis results are not sent to external AI provider APIs such as OpenAI, Google, or Anthropic for AI analysis. We use a language model running on our own GPU infrastructure, and customer data is not used to train AI models.