MMagnet Forensics provides digital investigation software that helps investigators collect and analyze evidence from computers, mobile devices, cloud services, and IoT. Its core products—AXIOM for multi-source data analysis and case management, GRAYKEY for mobile data extraction, and AUTOMATE for automated workflows—work by ingesting data from many sources and organizing it into a usable case file. The company differentiates itself with an integrated, end-to-end platform that draws on law enforcement and national security experience and complements Grayshift to offer a broader, single solution for digital investigations. Its goal is to help investigators quickly extract, process, examine, and manage digital evidence across cybercrime, child exploitation, corporate fraud, and national security cases in both public and private sectors.
Work here?Claim your company
Industries
Company Size
501-1,000
Company Stage
IPO
Headquarters
Waterloo, Canada
Founded
2009
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Total Funding
$86M
Above
Industry Average
Funded Over
3 Rounds
Magnet Forensics updates mobile hardware and launches Graykey Fastrak. Magnet Forensics has released Graykey Fastrak and Graykey 2 to expand mobile extraction capacity as investigative labs face growing device backlogs. Ref · E-D · 2026 · §BLG Class · Confidential Juris · England & Wales Status · Active Mobile device acquisition remains one of the sharpest bottlenecks in UK investigations and civil proceedings. When an urgent court order is served or an internal investigation lands, forensic teams often face a physical queue of smartphones waiting for extraction. Because physical and full file system extractions have traditionally tied up specialised hardware sequentially, delays at the collection stage can ripple through the entire disclosure timetable. Magnet Forensics has introduced two developments aimed directly at laboratory throughput: Graykey Fastrak and Magnet Graykey 2. These releases highlight a clear shift among forensic technology vendors towards addressing scale and physical lab capacity, at a time when data volumes and device counts continue to strain investigators across both criminal and commercial disciplines. Parallel mobile extractions with Graykey Fastrak. Magnet Forensics announced that Graykey Fastrak enables multiple extractions to run simultaneously. The company stated that the tool is designed to help agencies reduce backlogs and accelerate evidence collection when time is critical. While the vendor has not released public technical documentation detailing device limits or system prerequisites, the core functional change is the departure from strictly serial extraction workflows. In standard forensic practice, acquiring a modern smartphone often involves long waiting periods while passcode bypass routines execute, followed by multi-hour extraction passes over physical cables. When an investigation requires forensic images from multiple custodians, such as a company board or a group of employees subject to an urgent preservation notice, technicians have traditionally had to process devices one after another. Enabling concurrent extractions on a single deployment removes a major hardware constraint, allowing forensic practitioners to turn physical exhibits around much faster. Hardware upgrades and growing intake volumes. Alongside the Fastrak release, Magnet Forensics confirmed that Magnet Graykey 2, the next generation of its mobile hardware unit, is now available. The vendor stated that the new hardware is designed to help digital forensic laboratories expand mobile access capacity and deliver critical evidence to investigators faster. The specific physical specifications and internal architectural changes of the Graykey 2 unit have not been detailed in the announcement, but the focus remains squarely on physical lab intake and processing capability. This pressure on laboratory capacity is evident across the forensic sector. In a concurrent announcement regarding child protection workflows, Cellebrite stated that the volume of Child Sexual Abuse Material (CSAM) reaching law enforcement is at a historic high and continues to grow. Cellebrite reported that online platforms, encrypted services and dark web infrastructure have enabled the production and storage of illicit material at an unprecedented scale. To address this influx, Cellebrite pointed to the adoption of automated triage systems to assist investigators. Taken together, the updates from Magnet Forensics and Cellebrite reflect how forensic vendors are responding to pressure points at opposite ends of the investigative pipeline. Magnet Forensics is targeting the initial hardware acquisition barrier, while Cellebrite is focusing on processing and triaging high volumes of illicit data once inside the analysis environment. What this means in practice. For UK litigators, compliance officers and forensic practitioners, hardware and extraction improvements alter how evidence collection should be budgeted and managed under the Civil Procedure Rules. Reassessing disclosure timetables under Practice Direction 57AD. In English commercial litigation operating under Practice Direction 57AD, parties must agree realistic timetables for the collection, review and production of digital evidence. When mobile devices are in scope, practitioners frequently build substantial contingency periods into the schedule to account for lab bottlenecks. If simultaneous extractions through Graykey Fastrak reduce device turnaround times, forensic teams can provide litigators with tighter, more predictable collection windows, reducing the need to request deadline extensions from the court. Handling multi-device collections in internal investigations. Internal corporate investigations frequently require the sudden acquisition of several company-issued and personal devices. The primary operational risk in these exercises is business disruption. Custodians are reluctant to surrender their primary communication tools for several days. If a forensic team can connect multiple handsets and extract data concurrently rather than consecutively, custodians can often have their devices returned within hours. This increases compliance with collection requests and minimises operational downtime. Maintaining strict forensic logging during parallel processing. Running concurrent extractions introduces potential risks to administrative rigor if laboratory protocols are not updated. Practitioners should ensure that: * Individual device logs, connection times and chain of custody documentation remain entirely segregated for each exhibit. * Destination storage media and drive paths are clearly partitioned to prevent concurrent read and write operations from creating I/O contention or cross-custodian data contamination. * Passcode derivation and acquisition completion timestamps are independently validated and recorded against each distinct physical device. Defensibility and verification. Accelerating extraction speed does not change the evidential thresholds required in UK courts. Whether evidence is intended for a Crown Court trial or an application in the High Court, the methods used to bypass security controls and extract physical storage must remain transparent and reproducible. Practitioners adopting Graykey Fastrak or Graykey 2 must verify that concurrent extractions yield identical hash values to standard serial acquisitions on the same device profiles. Documenting that simultaneous operations do not introduce dropped packets, truncated files or corrupted system partitions ensures that the resulting digital disclosure withstands scrutiny during expert cross-examination. § sources. Every development reported above is drawn from these published sources. § From the guide, latest version. THE DISCLOSURE REVIEW DOCUMENT · A GUIDE FOR UK LAWYERS Completing the Disclosure Review Document A Technical and Legal Guide COMPUTER FORENSICS LAB DISCOVERY. UK § CONTENTS In this guide 01 Executive summary 02 The problem in plain English: an exam you sit jointly 03 Anatomy of the DRD 04 What to learn from the client 05 What to learn from your e Discovery specialist 06 What to learn from your forensic examiner 07 Field by field: who supplies which answer 08 Drafting Section 1 well 09 Joint completion and negotiation 10 The timetable, mapped to the learning 11 Worked example: a Section 2 built from evidence 12 Common mistakes and technical limitations 13 Questions to ask · Suggested wording 14 Checklist and red flags · When to involve a digital forensic expert 15 Frequently asked questions 16 Glossary · References · Disclaimer · How a specialist laboratory can assist § 01 · ORIENTATION Executive summary THE HEADLINE POINT: THE DRD IS COMPLETED FROM THREE SOURCES OF KNOWLEDGE, NONE OF THEM THE DRAFTING LAWYER Instruct the practice Bring e-discovery in early. Defensibility is built, not retrofitted. Whether you are responding to a regulator, preparing for disclosure, or scoping an internal investigation, start the chain of custody with a short, confidential conversation.
Magnet Forensics claims it can bypass Apple's iPhone inactivity reboot feature, which automatically restarts devices after 72 hours of inactivity to protect user data from unauthorised access. The company developed GrayKey Preserve and Evidence Preservation Mode to keep iPhones in an "After First Unlock" state, making it easier for law enforcement to access data. The technology reportedly disables radio transmissions and prevents the phone from entering a more secure "Before First Unlock" state, even after rebooting. According to a leaked video obtained by 404 Media, the solution preserves certain data indefinitely that would normally be automatically deleted after several days, including cached locations and recently deleted photos. Security researcher Jiska Classen suggests Magnet may have found a way to manipulate the iPhone's internal clock. Apple has not commented on the claims.
Magnet Forensics expands collaboration with NCMEC to strengthen Victim Identification. New capabilities coming soon to Magnet Griffeye will allow investigators to securely share information related to child sexual abuse material directly with NCMEC, streamlining efforts to identify child exploitation victims. Magnet Forensics today announced new capabilities within Magnet Griffeye that will allow investigators to securely submit files, hashes, and other investigative information related to child sexual abuse material (CSAM) directly to the National Center for Missing & Exploited Children (NCMEC). Expected to become available in 2027, the new functionality, the next evolution in Magnet Forensics' partnership with NCMEC, makes it easier for investigators to share information to support child victim identification efforts. The new NCMEC Online Hash and File Submissions capability within Magnet Griffeye will enable internet crimes against children (ICAC) investigators to contribute information directly to NCMEC from within their existing investigative environment - a step that has previously been disconnected in the investigative workflow. By reducing manual steps and eliminating the need to move between systems, the capability will help investigators share critical information more efficiently while remaining focused on active investigations. For examiners handling child exploitation cases, sharing evidence and intelligence that may aid victim identification is a critical part of the investigative process. Historically, that work has often required separate tools and manual workflows outside of the primary investigative environment. By helping examiners securely share both media files and hashes in suspected CSAM cases directly from Magnet Griffeye, Magnet Forensics and NCMEC are reducing friction in a critical stage of the investigative workflow. "Investigators should be able to move from identifying critical material to sharing it with NCMEC without breaking their investigative workflow," said Johann Hofmann, VP, Media Forensics Product and Strategic Development at Magnet Forensics. "That is what this collaboration is about; removing friction from a critical step so investigators can spend less time managing process and more time focused on identifying victims and advancing investigations." Information submitted through the new capability will support NCMEC's Child Victim Identification Program, which works to identify previously unknown victims of child sexual abuse. By removing roadblocks for investigators in sharing evidence and related information, Magnet Forensics and NCMEC are strengthening collaboration between agencies and supporting faster access to information that can advance investigations and identify victims. Get the latest DFIR news. "Every piece of information can matter when law enforcement is working to identify a child and bring them to safety," said John Shehan, senior vice president at the National Center for Missing & Exploited Children. "We're grateful for our continued partnership with Magnet Forensics and for their commitment to giving investigators better tools to share critical information, identify victims faster and ultimately protect more children from exploitation." This announcement marks the latest chapter in the ongoing relationship between Magnet Forensics and NCMEC, who have collaborated on multiple initiatives designed to support ICAC investigators.
Magnet Forensics redefines digital investigations with evolution of Magnet One. New AI innovations, streamlined workflows, and third-party integrations expand how investigators acquire, share, and act on digital evidence. Magnet Forensics has unveiled significant advancements to its revolutionary Magnet One platform - with streamlined mobile and vehicle workflows, third-party tool integrations, and the introduction of Magnet AI all announced at the annual Magnet User Summit in Nashville, TN. These advancements enable agencies to reduce handoffs, shorten time to evidence, and move from data to actionable leads faster - without breaking continuity across tools or teams. Magnet One connects technology, people, and processes to help investigation teams manage the growing volume and complexity of digital evidence more efficiently. The only platform that seamlessly unifies mobile, cloud, computer, drone, and vehicle evidence, Magnet One has evolved into a fully connected investigation platform where evidence moves continuously from extraction to collaboration to investigative understanding. Investigators can now acquire key data, make it available immediately and seamlessly in Magnet Review for secure collaboration, and apply advanced AI-powered capabilities to surface leads faster - all while keeping work connected across teams and through trusted integrations across the broader investigative ecosystem. "When we introduced Magnet One, our goal was to help agencies manage digital evidence as a connected workflow - not a set of disconnected steps," said Braden Thomas, Chief Research and Development Officer at Magnet Forensics. "These advancements move that vision forward by helping teams collaborate in real time, reduce friction across the investigative process, and bring intelligence to the evidence - while giving agencies the flexibility to integrate Magnet One into the tools and workflows they already rely on." Magnet AI brings investigative intelligence into Magnet One. Magnet Forensics introduced Magnet AI, the intelligence engine powering AI-driven innovation across the Magnet Forensics ecosystem. Magnet AI is designed to help investigators cut through growing volumes of digital evidence by surfacing leads faster and bringing context to what matters most - while keeping verification and decision making firmly in human hands. Advanced AI capabilities powered by Magnet AI and available in Magnet Review include Intelligent Search and the newly unveiled Intelligent Insights, which moves beyond collecting artifacts to surfacing relationships, timelines, and patterns - all grounded in citations and direct links to source evidence. Intelligent Insights is available today for early access. Get the latest DFIR news. Magnet One Case Stream turns devices into instant sources of truth. Magnet One Case Stream, a first-of-its-kind cloud-enabled workflow included in Magnet One, allows digital investigators to stream both mobile and vehicle data directly to non-technical stakeholders the moment it is extracted. Magnet One users now have access to this transformative workflow experience, which reduces time to evidence and enables investigative teams to act on leads in real-time. "Magnet One Case Stream is highly effective at getting case information into stakeholders' hands quicker, to allow us to make quick decisions, especially when limited by a geographic area," said Brant Mendenhall, Senior Officer with the Indiana State Excise Police. Enabling an open platform through Magnet One Connect. Magnet One seamlessly connects Magnet Forensics' ecosystem of tools, unifying case management, providing centralized cloud storage, and simplifying workflows for digital investigators. With the introduction of Magnet One Connect, the platform now provides a groundbreaking, truly holistic approach to investigations. Magnet One Connect allows approved partners to integrate with Magnet Review and Magnet One through a secure, managed API with transparent usage tracking and access control, enabling agencies to exchange data with trusted third-party tools, while maintaining continuity of evidence analysis and saving time with their casework. New partnerships announced. As part of Magnet One Connect, Magnet Forensics announced new partnerships with Siren and Lumyx. Siren provides crime analysts with search, analytics, visualization, and reporting capabilities for investigations at enterprise scale. "By combining Magnet Forensics' deep digital evidence capabilities with Siren's data fusion and analytics, organizations can enrich their investigations and uncover hidden connections to reveal a more complete investigative picture," said Renaud Delbru, Co-Founder and Chief Scientific Officer, Siren. With a specialization in geolocation evidence, Lumyx enables prosecutors to easily analyze location data on an intuitive map and generate visual case presentations for agencies, plea negotiations, or courtroom proceedings. Geolocation data from Magnet One cases can now be seamlessly transferred into Lumyx, allowing teams to maximize insight, visual understanding, and impact.
Magnet Forensics acquires V2 Forensics, expanding leadership in drone-related digital investigations. Acquisition expands capabilities of Magnet Forensics' end-to-end digital investigation ecosystem. Magnet Forensics, a global leader in investigative intelligence solutions, announced today it has acquired V2 Forensics, a drone forensics company and maker of Disero, an industry-first digital forensics solution for unmanned aerial systems (UAS). The acquisition expands the breadth of Magnet Forensics' comprehensive investigative solutions to include purpose-built drone forensics expertise alongside mobile, computer, cloud, and vehicle forensics. Drone technology is now embedded across public safety, national security, and commercial entities, creating new investigative challenges. As drones become more capable and more widely deployed, investigators are increasingly encountering UAS devices in incidents ranging from criminal activity and negligent harm to border security, prison contraband delivery, and threats to critical infrastructure. "With the growing presence of drones in both everyday and high-risk environments, investigators need specialized tools designed specifically for UAS evidence," said David Miles, President, Magnet Forensics. "Incorporating V2 Forensics' industry-leading technology and expertise expands our ability to support complex drone-related investigations and helps ensure investigators can extract critical information needed to protect public safety and national security." Recent global conflicts have also highlighted the expanding role of drones in modern military operations, with drone attacks in conflict settings increasing by 4,000% from 2020 to 2024. Drones are becoming central to modern warfare, making the ability to extract critical information from them essential for military operators. Modern drones capture extensive operational and contextual data, including flight telemetry, onboard media, sensor readings, and communication artifacts - information that can be crucial for law enforcement, security teams, and forensics professionals during their investigations. Disero simplifies the analysis of this evidence by bringing it together in a single, purpose-built forensic environment designed to support faster, clearer investigations of UAS activity. Capabilities such as rapid acquisition, detailed reconstruction, and clear visualization of UAS activity enable investigators to quickly understand what occurred, where a drone traveled, and how it was operated, particularly in time-sensitive scenarios where public safety and security are at risk. Get the latest DFIR news. "We're proud to be joining Magnet Forensics and contributing our expertise in drone forensics to a broader digital investigation platform," said Jansen Cohoon, President, V2 Forensics. "We see significant opportunity to advance innovation in drone forensics and help military and defense teams gain clearer insight into UAS activity across complex operational environments."
Find jobs on Simplify and start your career today
Don't see your dream role? Check out thousands of other roles on Simplify.Browse all jobs
Industries
Company Size
501-1,000
Company Stage
IPO
Headquarters
Waterloo, Canada
Founded
2009
Find jobs on Simplify and start your career today
Don't see your dream role? Check out thousands of other roles on Simplify.Browse all jobs