Exterro FTK Central

Paid#4 of 30 in Digital Forensics SoftwareComputer Forensics Software

Exterro FTK Central: A governed platform for coordinated endpoint, cloud, and evidence investigations. Ranked #4 of 30 in Digital Forensics Software by our editors (9.1/10); pricing: Pricing on request; best for large teams with governed forensic workflows.

9.1/10★★★★★Editor score

Visit Exterro

Exterro FTK Central9.1 Visit Exterro

At a glance

• Editor score
  9.1 / 10
• Pricing
  Pricing on request
• Best for
  Large teams with governed forensic workflows
• Facts checked
  20 Sep 2026

• Where it wins

  • Centralizes collection, processing, analysis, review, and case management
  • Supports shared cases with permissions, approvals, and audit records
  • Connects with SIEM, SOAR, endpoint, collaboration, and Microsoft tools

• Where it doesn't

  • Pricing requires a sales conversation rather than a published plan
  • Its broad workflow may exceed the needs of small investigation teams
  • Mobile forensics and disk imaging are handled by separate Exterro products

Our verdict on Exterro FTK Central

Exterro FTK Central is a centralized digital forensics platform for enterprise investigation teams, forensic laboratories, government agencies, and corporate security groups. It brings live endpoint investigation, remote inspection, targeted collection, memory acquisition, evidence processing, analysis, review, collaboration, workflow automation, and case management into one environment. The platform is available through web and Windows interfaces, with support for Windows, macOS, and Linux investigations across live endpoints and selected artifacts. It is aimed at organizations managing shared cases, large evidence volumes, and governed investigative workflows.

Pricing follows a contact-sales model, with Exterro directing prospective customers to a demo or sales process. A SaaS deployment is also available, providing a managed investigation environment without requiring customers to provision or maintain the underlying infrastructure. FTK Central supports distributed processing for large evidence volumes and workflow automation through APIs and webhooks. Its integration set includes Splunk, IBM QRadar, Google Chronicle, Microsoft Sentinel, Palo Alto Cortex XSOAR, Splunk SOAR, ServiceNow SOAR, CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, Jira, Microsoft 365, Exchange, SharePoint, and OneDrive. These connections fit teams that need forensic work to interact with security operations and enterprise collaboration systems.

The strongest fit is a large investigation function that needs multi-investigator review, permissions, approvals, audit records, evidence correlation, and collection across endpoints, cloud services, SaaS sources, and common forensic image formats. AI-assisted investigation planning and forensic review add another layer to the workflow. FTK Central is less suitable for narrowly scoped teams seeking a simple standalone imaging or mobile-forensics tool. Exterro identifies FTK Imager, FTK Enterprise, and Remote Mobile Discovery as separate products, so those capabilities should be evaluated independently rather than assumed to be part of FTK Central.

Questions about Exterro FTK Central

What does Exterro FTK Central run on? Web and Windows. It runs in the cloud and self-hosted.

What does Exterro FTK Central integrate with? 190+ integrations, including Splunk, IBM QRadar, Google Chronicle, Microsoft Sentinel and Palo Alto Cortex XSOAR.

Who is Exterro FTK Central built for? Mid-market companies and enterprises (our editorial estimate).

Your product? Our editors can test Exterro FTK Central in depth and publish a review, labelled as paid · from $149/mo →

Exterro FTK Central pricing

Exterro FTK Central fact sheet

Exterro FTK Central integrations

Exterro FTK Central lists 190+ integrations on its own site — the 20 named here are the ones its pages call out.

• Splunk
• IBM QRadar
• Google Chronicle
• Microsoft Sentinel
• Palo Alto Cortex XSOAR
• Splunk SOAR
• ServiceNow SOAR
• CrowdStrike
• Microsoft Defender for Endpoint
• SentinelOne
• Jira
• Microsoft 365
• Exchange
• SharePoint
• OneDrive
• Google Workspace
• Gmail
• Google Drive
• Slack
• Microsoft Teams

Alternatives to Exterro FTK Central

• AutopsyA free, cross-platform platform for broad, case-based digital investigations.9.4
• Paraben E3 Forensic PlatformA broad evidence-processing platform for teams handling varied digital investigations.9.3
• Magnet AXIOM CyberA broad investigation platform for collecting and analyzing endpoint, mobile, cloud, and memory evidence.9.2

See all Exterro FTK Central alternatives →

Exterro FTK Central vs the competition

• Exterro FTK Central vs Autopsy
• Exterro FTK Central vs Paraben E3 Forensic Platform
• Exterro FTK Central vs Magnet AXIOM Cyber
• OFExterro FTK Central vs OpenText Forensic
• OFExterro FTK Central vs Oxygen Forensic Detective
• Exterro FTK Central vs X-Ways Forensics

Compare Exterro FTK Central with any tool side by side →

Featured on iTechGuides

Exterro FTK Central is listed in our Digital Forensics Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/exterro-ftk-central/"><img src="https://www.itechguides.com/best/badge/exterro-ftk-central.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Nov 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 14 Nov 2026 · How we research and update