Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

Head-to-head · Computer Forensics Software

Exterro FTK Central vs The Sleuth Kit

  • Updated Nov 2026
  • Both researched from official sources
  • 3 checks side by side
Higher score Exterro FTK Central #3 in Computer Forensics Software 8.8/10 Pricing on request ✓ 1 of 5 features Visit Exterro
The Sleuth Kit #5 in Computer Forensics Software 8.4/10 Open source ✓ 2 of 5 features Visit The Sleuth Kit

Exterro FTK Central leads on 0 checks, The Sleuth Kit on 0, and 3 are even. Who comes out ahead on the 3 yes/no, price and count checks where we have data for both products. The editor score weighs everything else too.

Our verdict

  • Highest scoreExterro FTK Central · 8.8/10
  • Most featuresThe Sleuth Kit · 2 of 5

Exterro FTK Central scores higher on our rubric for computer forensics software: 8.8 against 8.4 out of 10; our editors rank them #3 and #5.

Exterro FTK Central is the better fit for enterprise teams investigating endpoints and SaaS. The Sleuth Kit is the better fit for technical examiners who want open-source disk analysis.

  • Exterro FTK Central fits best

    Enterprise teams investigating endpoints and SaaS

  • The Sleuth Kit fits best

    Technical examiners who want open-source disk analysis

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature Exterro FTK Central 8.8/10 Visit ↗ The Sleuth Kit 8.4/10 Visit ↗
At a glance
Editor score 8.8 8.4
Ranking #3 in Computer Forensics Software #5 in Computer Forensics Software
Best for Enterprise teams investigating endpoints and SaaS Technical examiners who want open-source disk analysis
Pricing model Paid Free
Starting price Pricing on request Open source
Free plan Not checked yet Not checked yet
Free trial — —
Deployment Cloud, Self-hosted Self-hosted
Platforms Web, Windows Windows, macOS, Linux
Support Docs · 24/7 Community, Docs
Integrations 190+ integrations 1 integrations
Built for Mid-market, Enterprise Small business, Mid-market, Enterprise
Features Exterro FTK Central 1/5 · The Sleuth Kit 2/5
Disk imaging Not checked yet ✓ (best)
Mobile forensics Not checked yet ✓ (best)
Memory forensics ✓ (best) Not checked yet
Cloud forensics Not checked yet Not checked yet
Timeline analysis Not checked yet Not checked yet
Specs
Supported platforms Not checked yet Not checked yet
Concurrent examiner licenses Not checked yet Not checked yet
Our review
Pros
  • Collects endpoint evidence remotely, including memory acquisition.
  • Correlates evidence across systems, artifacts, users, and timelines.
  • Supports shared cases, audit records, and workflow automation.
  • Analyzes raw/dd, E01, VHD, VMDK, and AFF images
  • Examines deleted content, metadata, hashes, and file activity timelines
  • C and C++ APIs support integration into larger forensic applications
Cons
  • Pricing requires a sales conversation.
  • Its enterprise investigation scope may exceed smaller teams' needs.
  • Mobile forensics and disk imaging are separate Exterro products.
  • Command-line toolkit, not a full case-management application
  • Self-hosted deployment requires a technical workflow
  • Mobile support is limited to documented YAFFS2 file-system support
Our verdict

Exterro FTK Central brings endpoint investigation, evidence processing, analysis, collaboration, and case management into a centralized platform. It is aimed at enterprise investigation teams, forensic laboratories, government agencies,…

Read the review →

The Sleuth Kit is an open-source C library and collection of command-line tools for examining disk and file-system images. It is aimed at technical examiners and developers who want to inspect partitions, metadata, deleted or hidden…

Read the review →
  1. Exterro FTK CentralComputer Forensics Software 8.8Pricing on request
  2. The Sleuth KitComputer Forensics Software 8.4Open source

Strengths and trade-offs

  • Exterro FTK Central — where it wins

    • Collects endpoint evidence remotely, including memory acquisition.
    • Correlates evidence across systems, artifacts, users, and timelines.
    • Supports shared cases, audit records, and workflow automation.

    Where it doesn't

    • Pricing requires a sales conversation.
    • Its enterprise investigation scope may exceed smaller teams' needs.
    • Mobile forensics and disk imaging are separate Exterro products.

  • The Sleuth Kit — where it wins

    • Analyzes raw/dd, E01, VHD, VMDK, and AFF images
    • Examines deleted content, metadata, hashes, and file activity timelines
    • C and C++ APIs support integration into larger forensic applications

    Where it doesn't

    • Command-line toolkit, not a full case-management application
    • Self-hosted deployment requires a technical workflow
    • Mobile support is limited to documented YAFFS2 file-system support

More comparisons

All computer forensics software comparisons → · Full ranking →

Reviewed by iTechGuides Editors · Editorial team · Updated Nov 2026

Last updated · How we research and update