OSForensics review
A broad Windows forensics suite covering imaging, recovery, memory, Android, cases, and reports.
Reviewed by iTechGuides Editors · Editorial team · Updated Nov 2026
OSForensics is a Windows desktop application for investigators examining computers, storage devices, forensic images, memory dumps, and Android phones. Its scope covers file searching and indexing, deleted-file recovery, user-activity analysis, password recovery, hash matching, drive-signature comparison, disk imaging, memory analysis, case management, audit logging, and forensic reports. Evidence support spans Windows, Mac, Linux, Android, and Apple-related file systems, along with emails, browser data, registry hives, SQLite and ESE databases. It is suited to teams that need one application for collection and analysis rather than a narrowly focused recovery utility.
Pricing is available through several licensing paths. The monthly Subscription costs $89 per month, while the annual Subscription costs $899 per year; both include latest-version access, major and minor updates, priority support, and customer service. The Standard Perpetual License costs $1,599 one time and includes a non-expiring license with 12 months of support. A Site License costs $18,995 per year. A 30-day trial is available, but there is no time-unlimited free plan. These options give individual investigators and larger deployments different purchasing structures, with the perpetual license separating software ownership from recurring access.
The strongest fit is a Windows team that needs broad evidence handling, including bit-for-bit disk-image creation and restoration, live and static memory analysis, Android logical acquisition, hash matching, and export to HTML, PDF, CSV, or MHT. Volatility Workbench and external HTML reports extend its workflow options. Teams centered on non-Windows operation may find the desktop requirement restrictive, even though the software analyzes evidence from several operating systems. Choose OSForensics for an end-to-end Windows investigation workflow; choose an alternative if a time-unlimited free edition or a non-Windows primary environment is essential.
Questions about OSForensics
Does OSForensics have a free plan? No free plan is listed; paid plans start at $89/mo (Subscription).
How much does OSForensics cost? OSForensics lists 3 paid plans; the lowest is Subscription at $89/mo.
Is there a free trial of OSForensics? Yes: a 30-day free trial.
What does OSForensics run on? Windows and Android. It runs as a desktop app.
What does OSForensics integrate with? 2 integrations: Volatility Workbench and External HTML reports.
Who is OSForensics built for? Small businesses, mid-market companies and enterprises (our editorial estimate).
OSForensics pros and cons
- Where it wins
- Combines imaging, recovery, memory analysis, Android acquisition, and reporting
- Supports forensic evidence from Windows, Mac, Linux, Android, and Apple file systems
- Includes case management, secure audit logging, and HTML/PDF report generation
- Where it doesn't
- No time-unlimited free plan
- Primary application runs on Windows
- Perpetual and site-license options require substantial upfront spending
OSForensics fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update