Startup Stash is one of the world's largest online directory of tools and resources for startups
Windows forensics suite built on WinHex, from X-Ways Software Technology AG.
X-Ways Forensics is a commercial Windows forensics suite from X-Ways Software Technology AG in Germany, built on its WinHex disk editor. Licences start at $1,560 for a time-limited licence or $4,040 for a perpetual one, and version 21.9 is current.
It covers disk imaging and cloning, RAID, LVM and partition reconstruction, file systems from NTFS and exFAT to ext4 and APFS, file carving, mass hashing, search, and viewers for the registry, event logs and browser data. It is portable, so it can run from a USB stick without installation. There is no public trial: trial licences go only to law enforcement, government agencies and some companies, on request. X-Ways Investigator, a simpler version for non-specialists, costs about half.
Bottom line: X-Ways Forensics suits examiners who want a portable Windows suite and are buying a licence for real casework. If you are learning or need a free toolkit, start with SIFT Workstation instead.
Clone and image disks, read RAID, LVM and partition structures, and open NTFS, FAT, exFAT, ext4, APFS, HFS+ and more.
Carve files from unallocated space, calculate hashes in bulk and search with GREP expressions.
View the registry, event logs and browser artifacts, parse e-mail and review events on a timeline.
Case management with multiple examiners and audit logs, an X-Tensions API for add-ons, and AI photo analysis through Excire Forensics.
| Plan | Price | What you get |
|---|---|---|
| Forensics, non-perpetual | $1,560 | 1, 2 or 3 years, usable right away with BYOD. $1,439 each for 2 or more, $1,330 for 5 or more. |
| Forensics, perpetual | $4,040 | Indefinite use with a dongle or BYOD, updates until Nov 2027. $3,719 each for 2 or more, $3,435 for 5 or more. |
| Investigator, perpetual | $2,079 | Simplified version for police, lawyers and auditors, updates until Nov 2027. |
| Trial | Not public | Only on request, for law enforcement, government agencies and certain companies. |
Prices in US dollars from the x-ways.net order page, before VAT or sales tax. Network dongles, BYOD+ and longer or shorter update periods change the price.