PALADIN

SUMURI's bootable Linux suite for forensic imaging, triage and recovery.

Computer forensicsName your priceBootable Linux
Visit sumuri.com ↗Last verified: 5 Nov 2026

Name your priceDownload
$25 minimumFor corporate use
$99PALADIN PRO USB
9.4.2Latest, PALADIN 9 LTS
The short version

What is PALADIN?

PALADIN is a bootable Linux forensic suite from SUMURI, used for imaging, triage and recovery. It is still maintained. The download is name your price, with a $25 minimum donation for corporate users, and a ready-made PALADIN PRO USB costs $99.

The current release is 9.4.2, part of PALADIN 9 LTS, built on Ubuntu 24.04 LTS with a Linux 6.17 based live kernel. The system is modified so it does not change attached media and does not auto-mount drives at boot. It bundles Autopsy, The Sleuth Kit, Volatility 3 and more than 30 categories of DFIR tools, plus SUMURI's own PALADIN Toolbox for imaging and hashing.

Bottom line: PALADIN is one of the easiest ways to get a write-protected forensic boot drive at low or no cost. Individuals and law enforcement can pay what they like. Companies should budget at least $25, or $99 for the PRO USB.

What it does

Key features

Built-in write blocking

The OS is changed to prevent writes to attached media and to stop drives auto-mounting at boot.

PALADIN Toolbox

A graphical app for imaging, logical acquisitions, hashing and mounting devices, included in PALADIN 9 LTS.

BitLocker-aware imaging

The Logical Imager supports BitLocker decryption, so you can collect files from encrypted drives.

Bundled DFIR tools

Autopsy, The Sleuth Kit, Volatility 3 for memory analysis, and 30+ categories of curated tools. Persistent Mode keeps reports and settings between sessions.

What it costs

PALADIN pricing (2026)

Plan Price What you get
PALADIN (download) Name your price Full live environment. Individuals, non-profits and law enforcement choose the amount.
PALADIN (corporate use) $25 minimum Same download. Corporate users must donate at least $25.
PALADIN PRO $99 Samsung Type-C USB with 64-bit and 32-bit versions, plus Bring Your Own ISO for adding your own tools.

Prices in US dollars from sumuri.com. The download is funded by donations.

Honest fit

Who it's for, who it isn't

Pick PALADIN if

  • You want a write-protected forensic boot drive
  • You want Autopsy and The Sleuth Kit ready to go
  • You need to image BitLocker-protected drives
  • You want to pay little or nothing to start

Look elsewhere if

  • You need a commercial suite with remote network collection
  • You want installed Windows software rather than a boot drive
  • Your machines block booting from USB
What people ask

PALADIN FAQ

Is PALADIN free?

It is name your price. Individuals, non-profits and law enforcement choose what to pay. Corporate users must donate at least $25.

How much is PALADIN PRO?

$99. It is a Samsung Type-C USB with 64-bit and 32-bit versions of PALADIN, and it lets you add your own ISO.

What is the latest version of PALADIN?

9.4.2. It is the current release of PALADIN 9 LTS, based on Ubuntu 24.04 LTS with a Linux 6.17 based live kernel.

Does PALADIN write-protect drives?

Yes. Write blocking is built in, and drives are not auto-mounted at boot.

Does PALADIN work with Secure Boot?

Mostly. SUMURI says Secure Boot compatibility has improved, but some BIOS settings may still need changes.

What are good PALADIN alternatives?

CAINE is the closest free option. It is another bootable Linux forensic distro. See our PALADIN alternatives for more.
Keep comparing

PALADIN alternatives