WetStone Technologies
WetStone Technologies, founded in 1997, develops specialized digital forensics and incident response software—steganography detection, malware discovery, and DICOM medical imaging security—for law enforcement, government, healthcare, and enterprise cybersecurity customers worldwide.
- Company typePrivate
- Founded1997
- HeadquartersCortland, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What WetStone Technologies does
WetStone Technologies, founded in 1997 and headquartered in Jersey City, New Jersey (with principal operations in Cortland, New York), develops specialized digital forensics and incident response (DFIR) software for law enforcement, government intelligence agencies, healthcare organizations, and enterprise cybersecurity teams. Its core product portfolio consists of two suites: the Gargoyle Suite for malware discovery and classification (including Gargoyle Investigator MP, Gargoyle Investigator LE for CSAM investigations, and the Gargoyle Enterprise Manager) and the Stego Suite for steganography detection and steganalysis (StegoHunt MP, StegoCommand, StegoEnterprise, and the forthcoming StegoMobile). A third product line, SecureDICOM, addresses malware and hidden-data threats in DICOM medical imaging files for healthcare customers. The underlying technology combines proprietary detection algorithms such as a Fibonacci hash pre-filter with MD5 verification, statistical analysis of DCT/LSB artifacts across image, audio, video, and text modalities, polyglot file detection, and YARA rule integration, supported by a curated dataset library of more than 1,000 steganography programs with monthly malware signature updates.
The company monetizes through quote-based enterprise software licenses (Electronic Software Download or pre-loaded USB flash drives for field investigations), recurring annual maintenance contracts that include technical support and monthly dataset updates, and paid training/certification classes. Go-to-market combines direct enterprise field sales (with a Request Demo funnel and a 1-844 sales line) and a global value-added reseller network spanning the UAE, Turkey, Brazil, Mexico, India, France, and multiple African and South Asian markets. On October 1, 2022, Sivisoft, Inc. and its subsidiary SquareML, Inc. acquired the digital forensics line of business from WetStone Technologies, Inc., then a wholly-owned subsidiary of Allen Corporation of America, with the acquired assets continuing under the new owner while WetStone Technologies, Inc. remained a subsidiary of Allen Corporation.
WetStone Technologies firmographics
Firmographics- Name
- WetStone Technologies
- Legal name
- WetStone Technologies, Inc.
- Website
- https://wetstonetech.com
- Company type
- Private
- Founded year
- 1997
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- WetStone Technologies, founded in 1997, develops specialized digital forensics and incident response software—steganography detection, malware discovery, and DICOM medical imaging security—for law enforcement, government, healthcare, and enterprise cybersecurity customers worldwide.
- Ownership category
- akta.pro rank
WetStone Technologies industry classification
Industry- Product category
- Digital Forensics Software
- NAICS
- Software Publishers (5132)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Endpoint Forensics & Incident Response (DFIR) (HDADAEAJ)
- akta.pro secondary industries
- Endpoint Deception & Anti-Ransomware (HDADAEAL), Data Loss Prevention (DLP) & Sensitive Data Discovery (PHI/PII) (HLACAJAC)
Keywords
Where WetStone Technologies is headquartered
LocationHeadquarters
- HQ city
- Cortland
- HQ country
- United States
- HQ region
- North America
Offices5 records
Markets served
WetStone Technologies business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations
Revenue model
- Software Licenses (ESD): Electronic Software Download licenses for forensic workstations, available as subscription licenses on single system, not transferable, basic license is 2 cores with additional core licensing available
- USB Flash Drive Licenses (FLASH): 16GB USB 3.0 devices for field investigations and multiple systems, limited to 2 cores, delivered pre-loaded with software
- Annual Maintenance Contracts: 1-year software maintenance included with purchase offering technical email support, product updates, and dataset updates. Annual renewal required for continued updates with 60-day grace period before reinstatement fees
- Training Services: 4-hour online Kick Start and Certification training classes offered monthly in various time zones for StegoHunt and Gargoyle Investigator products
- Dataset Updates: Monthly dataset updates for malware signatures and steganography detection, provided to customers with active maintenance contracts
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | ESD License - Electronic Software Download |
| One time/ perpetual license | Multi-year contract | FLASH License - USB Flash Drive |
| Subscription | Annual | Annual Maintenance Contract |
| Other | Pay-as-you-go | Training - Kick Start and Certification |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels5 records
WetStone Technologies product offering
Product offeringCore offering
WetStone Technologies develops and sells specialized digital forensics and incident response (DFIR) software focused on malware discovery and steganography detection. Its flagship suites—Gargoyle Suite (malware/PUP detection) and Stego Suite (steganography and steganalysis)—serve law enforcement, forensic labs, enterprise cybersecurity teams, and government intelligence customers. A third core product, SecureDICOM, provides specialized security analysis for DICOM medical imaging files used by healthcare organizations.
Product overview
WetStone Technologies provides a portfolio of specialized digital forensics and incident response (DFIR) software products delivered as standalone desktop applications for cybersecurity, law enforcement, and enterprise investigators. The core product lines include Gargoyle Suite for malware discovery (encompassing Gargoyle Investigator MP for malware detection and Gargoyle Investigator LE for CSAM investigations) and Stego Suite for steganography detection (including StegoHunt MP, StegoEnterprise, and StegoCommand). A third key offering is SecureDICOM, a specialized healthcare security tool for DICOM medical imaging files. Products are available as Electronic Software Download (ESD) or USB flash drives (FLASH/G-Flash) for field investigations, with optional WetStone Datasets subscriptions providing regular updates. The company also offers McAfee professional services as a complementary offering. All products are designed for forensic laboratories, law enforcement, field investigators, private investigators, and enterprise cyber security personnel.
Differentiator
Problem solved
Functional benefit
Brands
- Gargoyle Suite: Advanced malware discovery solution for computer forensic investigators and incident response teams, including Gargoyle Investigator MP and Gargoyle Enterprise Manager.
- Stego Suite
- SecureDICOM
Products and services
- Gargoyle Investigator MP Advanced malware discovery solution for computer forensic investigators and incident response teams that performs rapid search for malicious applications, contraband, hostile programs, and lost or leaked corporate assets across Windows desktop and server platforms.
- Gargoyle Investigator LE Specialized tool for law enforcement to detect child sexual abuse material (CSAM) through integration with Project VIC's VICS data model and Microsoft's PhotoDNA technology, analyzing image and video files on systems including embedded content in archives and documents.
- Gargoyle Enterprise Manager Enterprise management tool for deploying and managing Gargoyle Investigator across multiple systems within an organization.
- StegoHunt MP Industry-leading steganography program detection tool and steganalysis suite that detects both steganography programs and carrier files through statistical analysis, supports images, audio, video, and text, and includes StegoAnalyst for deep analysis and StegoBreak for dictionary attacks.
- StegoEnterprise Scalable command line Linux application for scanning directories and detecting steganography in carrier files using detection algorithms, with use cases including acceptable use policy enforcement, forensic investigations, data breach response, and insider threat identification.
- StegoCommand Scalable command-line steganography detection and steganalysis application designed for high-volume production data streams with near real-time detection capabilities and low false positive/negative rates.
- StegoMobile Mobile investigation tool for steganography detection on mobile devices (announced as coming soon).
- SecureDICOM Specialized healthcare security solution for DICOM medical imaging files that detects malware, uncovers hidden steganographic data, validates DICOM standard conformity, and provides near real-time threat detection and quarantine with regulatory compliance support (HIPAA).
- WetStone Datasets Comprehensive and current datasets for detecting and identifying known malware, potentially unwanted applications, and tools frequently used by cyber criminals, with minimum 12 releases per year for active maintenance subscribers.
- Training Services (Kick Start and Certification) 4-hour online Kick Start and Certification training classes offered monthly in various time zones for StegoHunt and Gargoyle Investigator products.
Quantifiable outcome
- Over 20 different types of malware can be detected by Gargoyle
- +2 more outcomes
Companies that use WetStone Technologies
Customer profileNamed customers4 records
Segments5 records
Ideal customer profiles4 records
WetStone Technologies technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration5 records
AI capability8 records
Feature7 records
WetStone Technologies partnerships and signals
Strategic signalPartnerships
Ten partnerships are on record, tiered flagship and core.
- Sivisoft/SquareMLflagshipSivisoft and its wholly-owned subsidiary SquareML acquired the assets related to WetStone's digital forensics line of business from Allen Corporation of America. Sivisoft will continue to improve and expand WetStone products.
- Project VIC InternationalcorePartnership for information sharing and analysis technologies to aid law enforcement in child exploitation investigations. Integration of Project VIC's Video Image Classification Standard (VICS) data model and Microsoft's PhotoDNA technology with WetStone's image processing capabilities resulted in Gargoyle Investigator LE.
- MergenProcoreValue-added reseller agreement for Turkey market. Resells StegoHunt MP, StegoCommand, Gargoyle Investigator MP, and LE products. Company assists public and private sector clients in Digital Forensic Investigations and Cyber Security.
- WE Data SolutionscoreValue-added reseller agreement for Brazil market. Resells StegoHunt MP, StegoCommand, Gargoyle Investigator MP, and LE products to digital investigation and computer forensics customers.
- TRACIPcoreValue-added reseller agreement covering France, Algeria, Morocco, Tunisia, Benin, Burundi, Cameroon, Chad, Gabon, Ivory Coast, Senegal, and Togo. Resells StegoHunt MP, StegoCommand, Gargoyle Investigator MP, and LE products.
- EMT ElectronicscoreValue-added reseller agreement for Turkey market. Resells StegoHunt MP, StegoCommand, and Gargoyle Investigator MP products. Company established in 1987 in Ankara with products utilized in over 55 countries.
- DGForensikscoreValue-added reseller agreement for Mexico market. Resells StegoHunt MP, StegoCommand, and Gargoyle Investigator MP products to law enforcement and intelligence community.
- ForensicsGuru.comcoreValue-added reseller agreement covering India, Bangladesh, Sri Lanka, and Bhutan. Resells StegoHunt MP, StegoCommand, and Gargoyle Investigator MP products.
- Scientific Analytical Tools (S.A.T. Trading LLC)coreValue-added reseller agreement covering UAE, Bahrain, Kuwait, Oman, Qatar, Saudi Arabia, Turkey, Jordan, India, Malaysia, Nepal, Pakistan, and Bangladesh. Resells StegoHunt MP, StegoCommand, and Gargoyle Investigator MP.
- KangurucoreKanguru provides customized USB flash drive platform with physical write protect switch for WetStone's G-Flash MP forensic malware discovery application. Partnership delivers durable, high-capacity flash drives for field investigations.
Scale indicators4 records
Recent moves7 records
Expansion highlights6 records
WetStone Technologies competitors and assessment
Company assessmentDirect peers
- Magnet Forensics: Magnet Forensics (AXIOM, Atlas, DVR Examiner) provides DFIR and digital evidence acquisition software sold to law enforcement, corporate investigators, and incident response teams - the same DFIR workflow WetStone targets with Gargoyle and StegoHunt.
- ADF Solutions: ADF Solutions builds digital forensic triage tools for law enforcement, military, and enterprise investigators, offering directly comparable field-investigation workflow software to WetStone's Gargoyle-based incident response offerings.
- Backbone Security: Backbone Security is a niche vendor specializing in steganography detection and digital steganalysis - the closest direct competitor to WetStone's Stego Suite in the steganalysis-and-malware-detection subcategory.
- Paraben Corporation: Paraben provides E3 forensics software for digital investigations, including mobile and computer forensics, and is listed as a WetStone integration partner - a comparable specialty forensic software vendor serving similar investigator personas.
- MSAB (Micro Systemation AB): MSAB's XRY is a leading mobile forensic tool used by law enforcement and intelligence agencies, comparable to WetStone's DFIR offerings in the digital-investigation workflow and adjacent to WetStone's mobile expansion roadmap.
- Cellebrite: Cellebrite is a mobile forensics leader (UFED, Physical Analyzer) widely deployed by law enforcement globally - directly comparable as a DFIR software vendor to law enforcement and a logical extension point for WetStone's announced StegoMobile product.
- Exterro (formerly AccessData / FTK): Exterro's Forensic Toolkit (FTK) is a leading forensic investigation platform used by law enforcement and corporate teams, directly comparable to Gargoyle Investigator and StegoHunt for malware discovery and steganalysis workflows.
- Elcomsoft: Elcomsoft develops password recovery, mobile, and computer forensic tools widely used by law enforcement and corporate investigators, operating in a directly comparable DFIR software niche to Gargoyle and StegoHunt.
Broad incumbents
- Mandiant (Google Cloud): Mandiant provides incident response, threat intelligence, and DFIR services and software at enterprise scale, operating as a broader incumbent in the same end markets where WetStone's Gargoyle and StegoHunt are deployed.
- OpenText (EnCase / Guidance Software): OpenText owns EnCase, the long-standing incumbent forensic investigation platform that WetStone integrates with via EnScript. It is a broader, established forensics incumbent with overlapping capabilities to Gargoyle Investigator MP.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
WetStone Technologies social profiles
Digital presenceWetStone Technologies financial estimates
Financial estimateRevenue estimate
Valuation estimate
WetStone Technologies leadership team
Management profileNumber of profiles
Profiles1 record
WetStone Technologies funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
WetStone Technologies M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about WetStone Technologies
What does WetStone Technologies do?
WetStone Technologies develops and sells specialized digital forensics and incident response (DFIR) software focused on malware discovery and steganography detection. Its flagship suites—Gargoyle Suite (malware/PUP detection) and Stego Suite (steganography and steganalysis)—serve law enforcement, forensic labs, enterprise cybersecurity teams, and government intelligence customers. A third core product, SecureDICOM, provides specialized security analysis for DICOM medical imaging files used by healthcare organizations.
Is WetStone Technologies a public or private company?
WetStone Technologies is a private company. It is classified as corporate owned and is currently operating.
When was WetStone Technologies founded?
WetStone Technologies was founded in 1997. It employs 11 to 50 people.
Where is WetStone Technologies based?
WetStone Technologies is headquartered in Cortland, United States, in the North America region.
How does WetStone Technologies make money?
Five revenue lines are on record. Software Licenses (ESD) is the primary driver. The others are USB Flash Drive Licenses (FLASH), annual Maintenance Contracts, training Services and dataset Updates.
Who are WetStone Technologies's main competitors?
Direct peers on record are Magnet Forensics, ADF Solutions, Backbone Security, Paraben Corporation, MSAB (Micro Systemation AB), Cellebrite, Exterro (formerly AccessData / FTK) and Elcomsoft. Broad incumbents are Mandiant (Google Cloud) and OpenText (EnCase / Guidance Software).
Does WetStone Technologies have an API?
No public API is recorded for WetStone Technologies.
What industry is WetStone Technologies in?
WetStone Technologies's product category is Digital Forensics Software. Its primary akta.pro industry code is HDADAEAJ, Endpoint Forensics & Incident Response (DFIR), with a secondary code of HDADAEAL, Endpoint Deception & Anti-Ransomware. Its NAICS code is 5132 and its SIC code is 7372.