Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

SUMURI RECON LAB review

#11 of 30 in Digital Forensics SoftwareComputer Forensics Software

A broad forensic evidence suite for Mac-led labs handling computer and mobile investigations.

8.2/10Editor score
SUMURI RECON LAB8.2 Visit SUMURI

Reviewed by iTechGuides Editors · Editorial team · Updated Nov 2026

SUMURI RECON LAB is a macOS-native digital forensics suite for examiners working with computer, mobile, and cloud-derived evidence. It processes artifacts from Windows, macOS, Linux, iOS, Android, and Google Takeout, while also supporting forensic images, containers, mobile extractions, and backups. Its audience includes law enforcement, government, and corporate investigation teams that need analysis, evidence organization, and reporting in one application.

The published plan is straightforward: RECON LAB costs $2,499 as a one-time license, with the first year of updates included. There is no free plan or lower-priced tier. The plan combines automated artifact processing with Apple Extended Metadata parsing, iOS device acquisition and backup analysis, AFF4, DMG, and ZIP container analysis, timeline generation and export, keyword, phrase, email, and column searches, plus evidence tagging and bookmarking. This makes the product a substantial purchase for teams that need a broad evidence workflow rather than a narrow utility.

RECON LAB’s standout strength is its coverage across evidence types and its path from analysis to review and reporting. Examiners can create reports with the built-in Story Board editor and export results to HTML, PDF, CSV, XML, KML, ODT, ZIP, Folder, DMG, and Project VIC formats. Portable cases can be exported for review in RECON CASE READER on Windows, and integrations include Griffeye Analyze DI and RECON CASE READER. Labs centered on macOS and Windows should consider it when they need computer and mobile artifact coverage together. Teams seeking a free option, a lower entry price, or a Windows-native primary environment should look elsewhere.

Questions about SUMURI RECON LAB

What does SUMURI RECON LAB run on? macOS and Windows. It runs as a desktop app.

What does SUMURI RECON LAB integrate with? 2 integrations: Griffeye Analyze DI and RECON CASE READER.

Who is SUMURI RECON LAB built for? Small businesses, mid-market companies and enterprises (our editorial estimate).

SUMURI RECON LAB pros and cons

  • Where it wins
    • Processes Windows, macOS, iOS, Android, and Google Takeout artifacts
    • Analyzes AFF4, DMG, ZIP, iOS backups, and mobile extractions
    • Includes timelines, searching, tagging, bookmarking, and report editing
  • Where it doesn't
    • There is no free plan or lower-priced entry tier
    • The main suite is macOS-native; Windows review uses RECON CASE READER
    • Only the first year of updates is included

SUMURI RECON LAB fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update