SUMURI RECON LAB
SUMURI RECON LAB is a forensic analysis suite that runs natively on macOS and examines evidence from macOS, Windows, Linux, iOS, Android, Google Takeout, AFF…
What SUMURI RECON LAB is
SUMURI RECON LAB is a forensic analysis suite that runs natively on macOS and examines evidence from macOS, Windows, Linux, iOS, Android, Google Takeout, AFF4 images, Cellebrite extractions, GrayKey backups, ADB Android backups, and Griffeye Project VIC 2.0 hashsets. It parses Apple Extended Metadata, with plugins for Time Machine, Spotlight, and Screen Time artifacts. Investigators can search keywords and phrases by column, filter email, and inspect raw information through SQL and PLIST viewers that translate data to ASCII or Unicode. RECON LAB imports Griffeye hashsets while retaining custom tags and exports cases in Project VIC 2.0 format. Cases can be prepared for Windows review in RECON CASE READER with selected artifacts, paths, tags, and bookmarks. Wi-Fi Location artifacts can be exported as KML reports, alongside HTML, PDF, CSV, XML, ODT, ZIP, folder, DMG, and Project VIC formats. The plan costs $2,499, paid once, with first-year updates included.
Good
- Analyzes evidence across many listed sources
- Parses Apple forensic artifacts
- Includes SQL and PLIST viewers
- Exports numerous report formats
- Supports Project VIC 2.0 workflows
Watch out
- Costs $2,499, paid once
- Requires a compatible Mac
- Cellebrite support is limited to unencrypted .tar iOS extractions
- Windows use is through Case Reader
Who it suits
It suits law-enforcement, government, and corporate investigation teams analyzing digital evidence. Users need a compatible Mac; Windows access is provided through RECON CASE READER.
Verdict
RECON LAB offers broad evidence-source support, artifact parsing, search, case exchange, and reporting for forensic investigations. Its Mac requirements, one-time price, and limited Cellebrite format support are key considerations.
Plans and prices
From SUMURI RECON LAB's own pricing page, checked 5 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| RECON LAB | $2,499, paid once | Requires a Mac with Apple Silicon or an Intel Mac with at least a quad-core i7 · 16 GB RAM · macOS 12.7.6 or later · First year of updates included |
The facts
Each one read from SUMURI RECON LAB's own pages, with the date it was checked.
Where it runs
- Apple artifacts
- It identifies and parses Apple Extended Metadata, and its plugins cover artifacts including Time Machine, Spotlight, and Screen Time.checked 5 Oct 2026
What it does
- Case review
- Cases can be exported for review in RECON CASE READER on Windows, with preset or custom artifacts and paths, tags, and bookmarks.checked 5 Oct 2026
- Evidence formats
- Supported sources include Mac images, AFF4 images, unencrypted Cellebrite .tar iOS extractions, and Griffeye Project VIC 2.0 hashsets.checked 5 Oct 2026
- Griffeye integration
- It imports Project VIC 2.0 hashsets from Griffeye Analyze DI while preserving custom tags, and exports cases in Project VIC 2.0 format.checked 5 Oct 2026
- Intended users
- SUMURI describes its software and services as serving law enforcement, government, and corporate investigations worldwide.checked 5 Oct 2026
- Notable limit
- Cellebrite support is for unencrypted .tar iOS extractions.checked 5 Oct 2026
- Purpose
- RECON LAB is a forensic analysis suite that runs natively on macOS and analyzes Windows, macOS, and iOS evidence.checked 5 Oct 2026
- Reporting
- RECON LAB exports Wi-Fi Location artifacts as KML reports and can export cases to RECON CASE READER and Project VIC 2.0.checked 5 Oct 2026
- Search and analysis
- Features include column keyword and phrase search, advanced email filtering, and built-in SQL and PLIST viewers that translate raw data to ASCII or Unicode.checked 5 Oct 2026
- Security
- SUMURI's website privacy policy says it uses HTTPS with TLS 1.2/1.3 in transit, AES-256 at rest via AWS Key Management Service, role-based access controls, and multi-factor authentication.checked 5 Oct 2026
- Support
- SUMURI offers product help by email or phone at +1 302.570.0015.checked 5 Oct 2026
The company
- Company background
- SUMURI says it is a Delaware-based U.S. technology manufacturer and solutions company founded by Steve and Ailyn Whalen; the page does not state a founding year.checked 5 Oct 2026
- Founded
- 2010checked 28 Sep 2026
- Headquarters
- Magnolia, Delaware, USAchecked 28 Sep 2026
Alternatives to SUMURI RECON LAB
- 1
Paraben E3 Forensic Platform
AndroidiOSLinuxmacOS7.1From $699 a year - 2
OSForensics
Free planAndroidSelf-hostedWindows7.0From $945 a year - 3
Belkasoft X Forensic
AndroidiOSLinuxmacOS6.5 - 4
MOBILedit Forensic
Windows6.4€99 one-time - 5
Cellebrite Inseyets
WebWindows6.2 - 6
SIFT Workstation
Free planLinuxSelf-hostedWindows6.2Free plan