X-Ways Forensics
X-Ways Forensics: A deep Windows forensic toolkit with broad evidence analysis and case-management features. Ranked #7 of 30 in Digital Forensics Software by our editors (8.8/10); pricing: Paid; best for deep Windows forensic examination.
At a glance
- Editor score8.8 / 10
- PricingPaid
- Best forDeep Windows forensic examination
- Free planNo
- Mobile forensicsYes
- Founded2002 · Bünde, Germany
- Facts checked20 Sep 2026

Where it wins
- Analyzes physical, raw, ISO, VHD, VHDX, VDI, and VMDK evidence
- Combines carving, memory analysis, search, tagging, and reporting
- Supports multi-user case collaboration and an X-Tensions programming API
Where it doesn't
- Runs on Windows only
- No free plan; licenses are paid
- Mobile evidence analysis depends on compatible third-party tools and add-ons
Our verdict on X-Ways Forensics
X-Ways Forensics is a Windows desktop application for computer forensic examiners handling investigations across law enforcement, government, corporate, and specialist settings. Its scope covers disk imaging and cloning, raw and virtual disk image analysis, filesystem examination, deleted-partition identification, file carving, data recovery, memory-dump analysis, keyword search, evidence tagging, reporting, and case work. The application can run from a USB stick without installation, which suits portable forensic workflows.
The licensing structure supports either a one-year non-perpetual license or a perpetual license for indefinite use. The non-perpetual option is immediately usable with BYOD or BYOD+ and was listed at AUD 2,130 during research. The perpetual option is dongle-based or available with BYOD and was listed at AUD 5,469. The pricing page states that sales are final and generally does not accept returns. Both options are paid, so X-Ways Forensics is primarily suited to professional teams and practitioners who need a dedicated forensic environment rather than a free investigative utility.
Its strongest fit is deep Windows evidence examination. The published capabilities extend from physical disks, RAIDs, and filesystems to ISO, VHD, VHDX, VDI, VMDK, iTunes backups, and data imported through compatible third-party mobile tools. Investigators can index and search evidence, export search hits, manage cases, collaborate with multiple users, and produce HTML, tab-delimited text, or XML reports. Memory forensics, RAID and dynamic-disk interpretation, carving, and the X-Tensions programming API add breadth for specialist work. However, the Windows-only platform and paid licensing narrow its audience, while mobile workflows rely on compatible third-party acquisition tools and add-ons. Choose it for comprehensive Windows-focused forensic examination; consider an alternative if cross-platform operation or a self-contained mobile workflow is the priority.
Your product? Our editors can test X-Ways Forensics in depth and publish a review, labelled as paid · from $149/mo →
X-Ways Forensics pricing
All 2 X-Ways Forensics plans and prices →
X-Ways Forensics fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Evidence sources | Raw DD images, ISO, VHD, VHDX, VDI, VMDK, physical disks, RAIDs, filesystems, Android/iOS data imported through third-party tools, iTunes backups |
| Mobile forensics | Yes |
| Disk imaging | Yes |
| Memory forensics | Yes |
| Case collaboration | Yes |
| Supported platforms | Windows 7/8/8.1/10/11 and Windows Server 2008/2012/2016/2019/2022/2025 |
| Export formats | HTML, tab-delimited text, XML |
| Deployment | Desktop |
| Platforms | Windows |
| Support | Email, Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Paid (source) |
| Website | x-ways.net |
| Facts checked | 20 Sep 2026 |
Alternatives to X-Ways Forensics
- AutopsyA free, cross-platform platform for broad, case-based digital investigations.9.4
- Paraben E3 Forensic PlatformA broad evidence-processing platform for teams handling varied digital investigations.9.3
- Magnet AXIOM CyberA broad investigation platform for collecting and analyzing endpoint, mobile, cloud, and memory evidence.9.2
See all X-Ways Forensics alternatives →
X-Ways Forensics vs the competition
- X-Ways Forensics vs Autopsy
- X-Ways Forensics vs Paraben E3 Forensic Platform
- X-Ways Forensics vs Magnet AXIOM Cyber
- X-Ways Forensics vs Exterro FTK Central
- X-Ways Forensics vs OpenText Forensic
- X-Ways Forensics vs Oxygen Forensic Detective
Compare X-Ways Forensics with any tool side by side →
Also Ranked In
X-Ways Forensics is ranked in 3 of our directories.
Used X-Ways Forensics? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used X-Ways Forensics for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
X-Ways Forensics is listed in our Digital Forensics Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/x-ways-forensics/"><img src="https://www.itechguides.com/best/badge/x-ways-forensics.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update




