InVitro
Editions and pricing

Buy it once. Keep it.

Every paid edition is a perpetual licence. Maintenance gives you every version released while it is active, and the versions you already have keep working when it ends.

Imager / Viewer

Free

Any use, no time limit, no account.

Image disks, USB media and optical discs, and open existing cases.

Download free

Recovery

$995 perpetual

Maintenance renewal $269/year.
1-year term licence $398.

Every filesystem, deleted files, partition recovery, carving and damaged volumes.

Buy Recovery
Most labs start here

Forensic

$1,995 perpetual

Maintenance renewal $539/year.
1-year term licence $798.

Recovery, plus hashing, search, YARA and Sigma, artifacts, timeline and reports.

Buy Forensic

Complete

$2,995 perpetual

Maintenance renewal $809/year.
1-year term licence $1,198.

Forensic, plus volume decryption, Hashcat/John export and third-party modules.

Buy Complete

Prices in US dollars, excluding tax. Seat discounts: 2+ seats: 8% off; 5+ seats: 15% off. Free teaching licence for accredited courses (classroom use, not casework).

Compare editions

Editions build on each other: each one includes everything in the edition to its left.

FeatureImager / ViewerRecoveryForensicComplete
Acquisition and viewing
Image disks, partitions and USB/flash media to raw (dd) or .ivi with a per-sector read map
Failing-drive imaging: multi-pass strategies, retries, skip and resume, one-click failing-drive preset
Drive health: SMART, HPA/DCO hidden sectors, NVMe health
ddrescue and HDDSuperClone map import; ddrescue mapfile export
Optical discs (CD, DVD, BD): every session and track, raw CD with subchannel; CloneCD, cue/bin and ISO export
Verify an image against its stored hashes
Open and browse existing cases, preview, hex view, export the reports they hold
Recovery
Add images and mount every supported container, partition scheme and filesystem
Deleted files, orphans and lost-and-found
Partition recovery from each filesystem's own metadata
Signature carving with validation, unallocated-space scope and resume
Damaged volumes: automatic metadata-copy choice with the reason recorded, switchable
Checksum verification on read (Btrfs, ZFS, ReFS) and honest per-sector statuses
Volume Shadow Copies as browsable versions
Drive map, hex and structure viewer
Export recovered files with a manifest
Forensic analysis
Hashing (MD5, SHA-1, SHA-256, ssdeep, TLSH), hash sets, NSRL and VICS import
Single-read content pass, processing profiles and a headless command line
Keyword, pattern and regex search; indexed search
YARA (YARA-X) over files; Sigma rules over Windows event logs
Windows artifacts: registry, event logs, LNK, Prefetch, jump lists, USN journal, SRUM, shellbags and more
E-mail (PST, MSG, EML), Office, PDF, SQLite, plist and archive expansion
Timeline, gallery with visual similarity, tags, bookmarks and notes
New reports in HTML, PDF and CSV; report packages to exchange findings
Decryption and extensibility
BitLocker (password, recovery key, .bek, VMK or FVEK) and LUKS1/LUKS2
F2FS per-file encryption
Keys stored in the case, so locked volumes unlock again when the case reopens
Hash export for Hashcat and John the Ripper (BitLocker, LUKS, ZIP); potfile import
Third-party modules built with the Module SDK

RAID assembly is not part of any edition yet; it is coming as an add-on pack.

Licence terms in plain words

  • Perpetual. You pay once and may use the version you bought, and every version released while your maintenance is active, for as long as you like.
  • Maintenance. The first year is included. After that, renewal costs about 27% of the licence price per year ($269, $539 and $809 for Recovery, Forensic and Complete). A late renewal runs from the date the previous year ended, so letting it lapse saves nothing.
  • When maintenance ends. Versions released before the end date keep working forever. A version released afterwards opens as the free viewer, and tells you why and which version to install instead.
  • Term licence. If you prefer an annual budget line, a 1-year term licence costs about 40% of the perpetual price and includes updates for that year.
  • Seats. One licence is one computer. Moving it to another computer is self-service. 2+ seats: 8% off; 5+ seats: 15% off.
  • Offline labs. Activation works with a request file that you carry to any connected computer. Once activated, a perpetual licence never needs the network again.
  • Never locked out of evidence. Without a valid licence, InVitro runs as the free viewer. Your cases always open, browse and export.

Read the licence terms summary.

Frequently asked questions

Is the imager really free?

Yes, for any use, including commercial casework, with no time limit. It images disks, partitions, USB and flash media, and optical discs. It also opens existing cases and exports the reports they hold.

Can I try a paid edition before buying?

Yes. The 30-day trial of Complete mounts, browses, previews, searches and analyses everything. Exports are limited during the trial: a small number of recovered files per export, and reports marked "Evaluation". That way you can confirm your files are there and correct before you pay. When the trial ends, your cases open in the free viewer.

Does activation send any case data?

No. Activation sends three things: the licence key, a hash of the machine fingerprint, and the application version. The user manual documents the exact payload. See Privacy.

We work air-gapped. Can we activate?

Yes. Create an activation request file on the offline computer, carry it to any connected computer, and import the licence file you get back. Deactivation works the same way.

Do you crack passwords?

No. InVitro Complete exports hashes in Hashcat and John the Ripper formats and imports the recovered password or potfile, so you keep using the cracking tools your lab already has.

Can I upgrade from one edition to another?

Yes. You pay the difference between the two licence prices, and your maintenance end date carries over.

Do you sell through resellers and accept purchase orders?

Yes. Write to sales@invitroforensics.com for a quote, a purchase order, a reseller or a multi-seat licence.

Is there an academic licence?

Free teaching licence for accredited courses (classroom use, not casework). Write to sales@invitroforensics.com from your institution's address.