X-Ways Forensics
X-Ways Forensics is a Windows work environment for computer forensic examiners, with tools for imaging, evidence analysis, and case management.
What X-Ways Forensics is
X-Ways Forensics is a Windows work environment for computer forensic examiners, with tools for imaging, evidence analysis, and case management. It can clone and image disks and read or write .e01 evidence files. Analysis features include recovery, file carving, searches, and examination of existing or deleted files. Supported evidence sources include disk images, virtual disk formats, physical disks, RAIDs, filesystems, and mobile data imported through third-party tools. Case tools include tagging, comments, and support for multiple examiners using separate or shared results. Automated activity logging and write protection are intended to help maintain data authenticity. The software is portable and can run from a USB stick without installation on a Windows system. A documented programming interface can extend or automate functions. Remote device and memory access is possible with F-Response over a read-only connection. It is available in 32-bit and 64-bit versions for listed Windows desktop and Server releases. The non-perpetual license is 1550.00 USD once; the perpetual license is 4010.00 USD once. Trial licenses are available only on request to specified organizations.
Good
- Can run portably from a USB stick without installation.
- Supports disk imaging and .e01 evidence files.
- Includes logging and write protection.
- Multiple examiners can work with shared or separate results.
Watch out
- Runs on Windows systems only.
- Trial licenses are not publicly available.
- Perpetual licensing costs 4010.00 USD once.
Who it suits
It is aimed at computer forensic examiners who need imaging, evidence analysis, and case collaboration on Windows. Organizations seeking a trial should note that access is limited to law enforcement, government agencies, and certain corporations on request.
Verdict
X-Ways Forensics combines evidence acquisition, analysis, and case tools in a portable Windows application. Its trial access is restricted, and the listed licenses require a substantial one-time payment.
Plans and prices
From X-Ways Forensics's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| X-Ways Forensics non-perpetual license | $1,550, paid once | Immediately usable with BYOD or BYOD+ · 2+: $1,425 · 5+: $1,315 · Non-perpetual license; page does not state the license duration. |
| X-Ways Forensics perpetual license | $4,010, paid once | Dongle-based or with BYOD · 2+: $3,690 · 5+: $3,410 · Perpetual license for indefinite use. |
The facts
Each one read from X-Ways Forensics's own pages, with the date it was checked.
What it does
- Audit and integrity
- The maker lists automated activity logging and write protection to help ensure data authenticity.checked 4 Oct 2026
- Case management
- It provides case management, file tagging and comments, and supports multiple examiners working with separate or shared results.checked 4 Oct 2026
- Evidence analysis
- The product supports recovery techniques, file carving, physical and logical searches, and analysis of existing and deleted files.checked 4 Oct 2026
- Imaging
- Features include disk cloning and imaging, with support for reading and writing .e01 evidence files.checked 4 Oct 2026
- Integration
- The X-Tensions programming interface can extend or automate functionality, and the maker describes it as a documented API.checked 4 Oct 2026
- Operating system
- X-Ways Forensics runs under listed Windows desktop and Windows Server versions; the maker says it is available in 32-bit and 64-bit versions.checked 4 Oct 2026
- Portability
- The software is fully portable and can run from a USB stick on a Windows system without installation.checked 4 Oct 2026
- Purpose
- X-Ways Forensics is an advanced work environment for computer forensic examiners and the maker’s flagship product.checked 4 Oct 2026
- Remote analysis
- In conjunction with F-Response, X-Ways Forensics can access remote devices and memory over a network; the connection is read-only.checked 4 Oct 2026
- Support and training
- The maker links to training, certification, a user manual, installation videos, function videos, and a user forum.checked 4 Oct 2026
- Third-party add-on caution
- The maker says listed third-party X-Tensions are not checked or endorsed and run with the same rights as the host application.checked 4 Oct 2026
The company
- Company and location
- X-Ways Software Technology AG states that its legal headquarters are in Bünde, Germany.checked 4 Oct 2026
- Founded
- 2002checked 28 Sep 2026
- Headquarters
- Bünde, Germanychecked 28 Sep 2026
Money
- Trial access
- Trial licenses are not publicly available and are offered only on request to law enforcement, government agencies, and certain corporations.checked 4 Oct 2026
Alternatives to X-Ways Forensics
- 1
Paraben E3 Forensic Platform
AndroidiOSLinuxmacOS7.1From $699 a year - 2
OSForensics
Free planAndroidSelf-hostedWindows7.0From $945 a year - 3
Belkasoft X Forensic
AndroidiOSLinuxmacOS6.5 - 4
MOBILedit Forensic
Windows6.4€99 one-time - 5
Cellebrite Inseyets
WebWindows6.2 - 6
SIFT Workstation
Free planLinuxSelf-hostedWindows6.2Free plan