Free Tools
Security Tools
Built by forensic examiners with 20 years of investigative experience. No signup required to start.
28 free tools across email forensics, disk acquisition, web security, document analysis, hash integrity, calculators, workflow and Windows privilege-escalation auditing.
Sherlock Forensics ships 28 free interactive security and forensic tools built by CISSP-certified examiners in Vancouver. Email forensics: Sherlock PST Viewer, Sherlock OST Viewer, MSG viewer with SMTP transport chain analysis, EML viewer, email header analyzer with SPF DKIM DMARC spoofing detection and Sherlock Email Analyzer. Disk and mobile acquisition: Sherlock Disk Imager for forensic acquisition with chain of custody, Sherlock Android Acquirer for logical mobile acquisition and Sherlock USB Blocker for write-protected forensic imaging. Web and network: free website security scorecard with letter grade, Sherlock Port Scanner as a free Nmap alternative for Windows and Hack Your Own Website interactive guided security testing. Document forensics: Sherlock NSF Viewer for Lotus Notes archives, Sherlock PDF Editor, Sherlock OCR Reader, Sherlock Browser Viewer for forensic browser history extraction and Sherlock Universal Events Viewer for Windows event log triage. Hash and metadata integrity: Sherlock Hash Calculator, free hash verifier, metadata viewer and Sherlock Metadata Inspector. Calculators and decision tools: pentest cost calculator, breach cost ROI calculator, security readiness assessment quiz and a vendor comparison decision engine for forensic software selection. Workflow tools: chain of custody template, forensic report generator and privacy compliance tools. Sherlock EoP Auditor for Windows privilege-escalation surface scanning is in early access. Every tool is free to use. CISSP, ISSAP and ISSMP certified forensic examiners. 20 years of court-defensible digital forensics in British Columbia.
Forensic Desktop Software
iPhone and iPad Analyzer
iOS forensic software for Windows. Acquire and analyze iPhone or iPad logical backups. Encrypted-backup decryption, 70+ artifact views including deleted-content carving, keychain extraction, WhatsApp, Safari, locations and hidden-vault app detection. Court-ready HTML reports. Cellebrite and Magnet AXIOM alternative at $599 one-time (no subscription).
Get iPhone and iPad Analyzer
PST Viewer
Open PST/OST files without Outlook. Search, export and verify email archives. Forensic reports. Forensic Edition from $67.
Get PST Viewer
Android Acquirer
Android logical acquisition via ADB. Extract SMS, contacts, call logs, media and apps. Court-ready forensic reports. Forensic Edition from $399.
Get Android Acquirer
NSF Viewer (Lotus Notes)
Open .nsf, .ntf, .nsg and mail.box files from IBM, HCL and Lotus Notes archives. No Notes client required. Pure-Rust standalone parser, cryptographic NoteID identity verification, court-ready PDF reports. Forensic Edition $297 lifetime.
Get NSF Viewer
Forensic PDF Viewer + Editor
View, edit and threat-scan PDFs without trusting them. Built-in phishing detection, JS/action scanning and safe-by-default Rust parser. Pro from $29/year.
Get PDF Editor
OCR Reader
Forensic OCR with per-word confidence scoring, ed25519 hash-chained audit trails and 7 export formats including EDRM XML v1.2. Batch OCR with 1-32 workers. Forensic Edition $67.
Get OCR Reader
Universal Events Viewer
Windows event log triage in plain English. 16 one-click buttons including "Have I Been Hacked?" five-phase analysis. Forensic Edition from $97.
Get Events Viewer
Disk Imager
Free forensic disk imager. Raw .dd and E01 output. Three-pass SHA-256 verification. Resumable. FTK Imager alternative.
Get Disk Imager
Sherlock EoP Auditor
Windows privilege-escalation surface scanner. Map the local EoP surface of any Windows host the way an attacker would. Built by the lab that finds zero-days. Early-access list open.
Join early-access list
MSG/EML Viewer
Open Outlook .msg and RFC-822 .eml files without Outlook. SMTP transport chain, SPF/DKIM/DMARC, anomaly detection. Forensic Edition from $67.
Get MSG/EML Viewer
Browser Viewer
Extract history, bookmarks, downloads and extensions from Chrome, Edge, Firefox, Brave, Opera, Vivaldi and Tor. Forensic Edition from $29.
Get Browser Viewer
OST Viewer
Open Outlook OST files without Exchange or Office 365. View cached emails offline. Forensic reports. Forensic Edition from $67.
Get OST Viewer
USB Write Blocker
Free forensic USB write blocker. One-click registry-level write protection for evidence drives. Essential for forensic imaging.
Get USB Blocker
Hash Verifier
Drag-and-drop SHA256, SHA512, MD5, SHA1 calculator. Batch processing and hash comparison for forensic integrity.
Get Hash Verifier
Metadata Inspector
View, export and strip EXIF, PDF and Office metadata. Privacy and forensic analysis.
Get Metadata InspectorScanners & Analyzers
Hack Your Own Website
Guided security testing tool. Walk through the same passive checks that attackers use. Headers, DNS, SSL, exposed paths and more.
Launch ToolSecurity Scorecard
Enter your domain, get an instant letter grade. Checks SSL, security headers, DNS authentication, cookies and HTTPS enforcement.
Scan My DomainEmail Header Analyzer
Paste email headers. See visual hop trace, SPF/DKIM/DMARC authentication results, sender verification and spoofing detection.
Analyze Headers
Port Scanner
Fast TCP port scanning for security assessments. Service detection and attack surface mapping.
Get Port ScannerFile Hash Calculator
Drag and drop to generate MD5, SHA-1, SHA-256, SHA-512. Compare hashes. No file upload. Runs in your browser.
Hash a FileMetadata Viewer
View hidden EXIF, PDF and Office metadata. GPS locations, author info, dates. Strip before sharing.
View MetadataCalculators
Pentest Cost Calculator
5-step questionnaire. Get a realistic price range for your penetration test based on scope, compliance and timeline.
Get EstimateBreach Cost Calculator
What would a data breach cost your company? Industry-specific estimates. Build the business case for security investment.
Calculate RiskEmail and Privacy
Sherlock Email Analyzer
Forensic email analysis with sender verification, header parsing and authentication validation. Detect spoofed and manipulated messages.
Analyze EmailPrivacy Tools
Privacy assessment and data protection tools for individuals and organizations. Evaluate your digital privacy posture.
View Privacy ToolsAssessments
Security Readiness Quiz
10 questions. 2 minutes. Find out where your organization stands and what gaps to close before your next audit.
Take AssessmentVendor Comparison
Answer 4 questions. Get matched with the right security vendor for your environment. Independent, vendor-neutral guidance.
Compare VendorsForensic Resources
Chain of Custody
Proper evidence custody documentation ensures digital evidence remains admissible in court. Review our methodology and procedures.
View MethodologyForensic Report Generator
Generate structured forensic reports with proper formatting for court submission. Consistent methodology documentation across all case types.
Generate ReportBeyond Free Tools
These tools are the starting point. Not the finish line.
Free tools cover basic security checks. A professional penetration test from Sherlock Forensics covers 200+ attack vectors: business logic flaws, authentication bypass, privilege escalation, API security and manual exploitation. From $1,500 USD.
Questions