DFRWS
DFRWS is a 501(c)(3) non-profit that organizes annual digital forensics research conferences across the USA, EU, and APAC, curates peer-reviewed publications like DFIR Review, and maintains community open-source standards (CASE, SOLVE-IT) for digital evidence handling.
- Company typePrivate
- Founded2001
- HeadquartersArlington, United States
- Headcount1–10
- GTM typeB2B
- OfferingServices
What DFRWS does
DFRWS (Digital Forensic Research Workshop, Inc.) is a 501(c)(3) non-profit organization founded in 2001 that serves as the primary convening body for the digital forensics research community. It operates three annual regional conferences in the USA, EU, and APAC, supplemented by the Digital Forensics Doctoral Symposium (DFDS), running for 25 years and reaching practitioners across 16 countries. The organization also curates the monthly DFIR Review publication, an open-access peer-reviewed outlet published via PubPub under CC BY-NC-ND licensing, and runs annual forensic challenges dating back to 2005.
DFRWS's core products are its knowledge and standards artifacts: the CASE (Cyber-investigation Analysis Standard Expression) ontology, now a Linux Foundation Community Project; SOLVE-IT, a MITRE ATT&CK-inspired knowledge base for forensic techniques; and a portfolio of community-maintained open-source projects including AFF4, DFIR ORC, GRANEF, Hansken, sdhash, ssdeep, and VICSafer. The technology layer is non-proprietary; DFRWS contributes governance, peer review, and convening infrastructure rather than commercial software. Its underlying platform is conventional: EasyChair for paper submissions, PubPub for publication hosting, and the dfrws.org website for marketing and outreach.
The organization's revenue model is event-driven and sponsorship-supported. Conference registrations (tiered into Full, Law Enforcement, and Student, with virtual options) and corporate sponsorships (Community Leader, Community Mentor, Community Member tiers starting at $1,500 USD) constitute the primary income streams. Student scholarships are funded out of sponsorship revenue. The organization does not disclose financials and is volunteer-run, with sponsorship packages and individual registration fees (in-person $545-$945; virtual $75-$150) governing cash flow. Being a non-profit, there is no equity, no parent company, and no venture funding.
DFRWS firmographics
Firmographics- Name
- DFRWS
- Legal name
- Digital Forensic Research Workshop, Inc.
- Website
- https://dfrws.org
- Company type
- Private
- Founded year
- 2001
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- DFRWS is a 501(c)(3) non-profit that organizes annual digital forensics research conferences across the USA, EU, and APAC, curates peer-reviewed publications like DFIR Review, and maintains community open-source standards (CASE, SOLVE-IT) for digital evidence handling.
- Ownership category
- akta.pro rank
DFRWS industry classification
Industry- NAICS
- Research and Development in the Physical, Engineering, and Life Sciences (54171), Scientific Research and Development Services (5417), Professional, Scientific, and Technical Services (541)
- SIC
- Miscellaneous Publishing (2741), Books: Publishing Or Publishing & Printing (2731)
- akta.pro primary industry
- Endpoint Forensics & Incident Response (DFIR) (HDADAEAJ)
- akta.pro secondary industries
- Scholarly Societies & Conference Proceedings Publishing (MPAJABAK), Conference Proceedings & Research Reports Publishing (EDAGAFAL), Digital Forensics & Malware Analysis (EDAOAIAJ), Research & Science Grantmaking Foundations (BPAGAKAI)
Keywords
Where DFRWS is headquartered
LocationHeadquarters
- HQ city
- Arlington
- HQ country
- United States
- HQ region
- North America
Offices3 records
Markets served
DFRWS business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Operations, Personnel, Technology or R&D, Marketing or Sales, Infrastructure
Revenue model
- Conference Registrations: Revenue generated from conference attendance fees. DFRWS hosts annual conferences in USA, EU, and APAC regions with tiered pricing for Full, Law Enforcement, and Student registrations. Virtual attendance options available at lower price points.
- Sponsorships: Corporate and organizational sponsorships at various levels (Community Leader, Community Mentor, Community Member) that provide visibility, exhibit space, and promotional opportunities at conferences. Sponsorship packages start at $1500 USD and can be customized.
- Student Scholarships: Need-based financial assistance funded by sponsorships for students to attend and present research at conferences.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | One time/ perpetual license | DFRWS USA 2026 In-Person Registration |
| Subscription | One time/ perpetual license | DFRWS USA 2026 Virtual Registration |
| Subscription | One time/ perpetual license | DFRWS APAC 2026 Registration |
| Subscription | One time/ perpetual license | DFRWS EU 2026 Registration |
| Other | Multi-year contract | Sponsorship Packages |
Go-to-market motion2 records
Distribution channels7 records
Marketing channels8 records
DFRWS product offering
Product offeringCore offering
DFRWS organizes annual regional digital forensics research conferences (USA, EU, APAC) plus the Digital Forensics Doctoral Symposium, publishes the monthly peer-reviewed DFIR Review, runs annual forensic challenges, and stewards a portfolio of open-source community projects (CASE ontology, SOLVE-IT knowledge base, AFF4, DFIR ORC, and related forensic tools). The organization functions as a non-profit knowledge hub for researchers, practitioners, law enforcement, and tool vendors to share peer-reviewed research and advance the state of digital forensics.
Product overview
DFRWS is a non-profit organization (501(c)(3)) that organizes digital forensics research conferences and supports the community through publications and open source projects. The core offerings include DFRWS regional conferences (USA, APAC, EU), the DFIR Review monthly publication, and various open source projects including SOLVE-IT (a digital forensic technique knowledge base) and CASE (ontology-based investigation standard). DFRWS also runs annual Forensic Challenges and maintains an archive of 806+ peer-reviewed research papers spanning from 2001 to present.
Differentiator
Problem solved
Functional benefit
Products and services
- DFRWS Regional Conferences (USA, EU, APAC) Annual regional conferences featuring peer-reviewed research papers, practitioner presentations, workshops, demos, panel discussions, and poster sessions in digital forensics. Each regional edition runs as a hybrid event with in-person and virtual attendance options. Intended audience: digital forensics researchers, practitioners, law enforcement, students, and tool vendors.
- DFIR Review Monthly review publication providing a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. Publishes practitioner-authored studies of specific devices, digital traces, analysis methods, and criminal activities with DOI numbers for citation in legal matters.
- SOLVE-IT Knowledge Base Open-source knowledge base that describes and indexes techniques available to digital forensic investigators along with potential weaknesses and mitigations. Inspired by MITRE ATT&CK, it provides resources and tools for systematic error mitigation for digital evidence.
- CASE (Cyber-investigation Analysis Standard Expression) Structured ontology-based specification for representing information commonly exchanged and analyzed during investigations involving digital evidence. A Linux Foundation Community Project actively maintained by the DFRWS community to enable interoperability across forensic tools.
- DFRWS Forensic Challenges Annual digital forensics research challenges dating back to 2005 that advance research in different areas. DFRWS selects topics deserving research focus and prepares artifacts reflecting real-world scenarios for teams to submit analysis and tools, with prizes awarded to top entries.
- Digital Forensics Doctoral Symposium (DFDS) Doctoral symposium co-located with DFRWS EU 2026 that provides a platform for doctoral students to share early-stage research, engage in discussions with peers, and build connections within the digital forensics community.
Quantifiable outcome
- 806 peer-reviewed research papers published since inception
- +2 more outcomes
Companies that use DFRWS
Customer profileNamed customers5 records
Segments5 records
Ideal customer profiles4 records
DFRWS technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature3 records
DFRWS partnerships and signals
Strategic signalPartnerships
Eleven partnerships are on record, tiered flagship, core and minor.
- Project VIC InternationalflagshipUS-based technology focused charity that advances technologies to combat child abuse and child exploitation. Partners with DFRWS to host specialized 2-day workshops for Crimes Against Children investigators and forensics examiners at DFRWS USA 2026.
- Linköping University (LiU)flagshipLeading Swedish academic institution with strong tradition in computer science, cybersecurity, and AI. Co-organizes DFRWS EU 2026 with DFRWS and Digital Forensics Sweden, hosting Workshop Day and main conference sessions.
- Digital Forensics SwedenflagshipNetwork hosted by Santa Anna IT Research Institute since 2018 that connects law enforcement challenges with research and companies developing new forensic tools.
- Swedish Police AuthoritycoreNational police force with nearly 40,000 employees. The Swedish National Forensic Centre (NFC) provides forensic expertise and engages in collaboration with academia and industry.
- Santa Anna IT Research InstitutecoreNon-profit IT research organization that hosts the Digital Forensics Sweden network. Facilitates projects connecting law enforcement challenges with research and companies developing forensic tools.
- AI SwedenminorSwedish national center for applied AI, collaborating with 160+ partners. Supports new technologies, standards, and methods for digital forensic investigations as part of Digital Forensics Sweden initiative.
- Forensic FocuscoreLeading digital forensics portal since July 2002 with busy forums, breaking industry news, education directory, interviews, articles, newsletter with 16,000+ subscribers, and LinkedIn's largest digital forensics group.
- Norrköping Visualization CenterminorWorld-unique visualization research center in Norrköping that provides venue for Friday conference sessions and the multimedia track, offering interactive experiences.
- Women in Forensic Computing (WinFC)minorWorkshop co-locating with DFRWS EU 2026 on Monday, March 23, focused on supporting women in forensic computing. Organized by Friedrich-Alexander-Universität Erlangen-Nürnberg.
- George Mason UniversityflagshipHosts DFRWS USA 2026 at Mason Square campus in Arlington, Virginia. Jessica Hyde serves as adjunct professor teaching mobile forensics in the digital forensics graduate program.
- PubPubcoreOpen-access publishing platform used for DFIR Review publications. DFRWS publications are available under CC BY-NC-ND license through PubPub.
Scale indicators7 records
Recent moves6 records
Expansion highlights6 records
DFRWS competitors and assessment
Company assessmentOthers
- Magnet Forensics: Magnet Forensics is a commercial DFIR tool vendor (AXIOM, GrayKey) and DFRWS sponsor, whose founder Jessica Hyde sits on the DFRWS Board and chairs DFIR Review. It is comparable as a DFIR ecosystem player but is a vendor partner rather than a peer organization, running its own CEIC practitioner conference.
- Cellebrite: Cellebrite is the dominant commercial mobile forensics vendor (UFED, Premium) and a historical DFRWS sponsor, serving the same law enforcement DFIR audience. It is comparable as an ecosystem participant but is a commercial vendor running its own Cellebrite Pathfinder events rather than a peer scholarly society.
Regional players
- INTERPOL Digital Forensics / Cybercrime Directorate: INTERPOL's Cybercrime Directorate runs international law enforcement training and collaboration programs in digital forensics, including the INTERPOL Digital Forensics training programme that DFRWS board member Pavel Gladyshev helped develop. It is comparable as a digital forensics convening body for law enforcement but operates inter-governmentally and globally rather than as a scholarly society.
Direct peers
- USENIX Association: USENIX is a non-profit advanced computing systems society that hosts peer-reviewed academic conferences (SOUPS, OSDI, USENIX Security), analogous to DFRWS as a volunteer scholarly society in cybersecurity/security. Both run open proceedings, depend on academic volunteers, and convene researchers and practitioners around technical research.
- FIRST (Forum of Incident Response and Security Teams): FIRST is an international confederation of incident response and security teams that holds an annual technical colloquia and conferences. It is structurally similar to DFRWS as a non-profit, member-driven convener of incident response professionals, with overlapping board membership (Wietse Venema served as FIRST chair) and shared CSIRT/law enforcement audiences.
- ACM (Association for Computing Machinery): ACM is the largest international computing scholarly society, publishing peer-reviewed conferences and journals (including CCS, SIGSAC). It is comparable to DFRWS as a scholarly society publishing indexed research, with a membership/monograph model that DFRWS could evolve toward, though ACM operates at much greater scale across all of computing.
- IEEE Computer Society: IEEE Computer Society publishes peer-reviewed computing conferences and journals (including IEEE Transactions on Information Forensics and Security) and runs membership-driven scholarly activities. It is a structural analog to DFRWS as a scholarly society with indexed publications and academic volunteer leadership, though it covers all of computing rather than specializing in DFIR.
- SANS Institute: SANS is the dominant DFIR training and certification provider (GCFE, GCFA, FOR508) and runs the SANS DFIR Summit and Forensic Summit. It is directly comparable to DFRWS in target audience (DFIR practitioners and law enforcement) and overlapping content (memory, mobile, network forensics), though SANS is commercial and training-led while DFRWS is non-profit and research-led.
Broad incumbents
- RSA Conference: RSA Conference is the largest commercial cybersecurity conference globally, with a track on digital forensics and incident response. It competes with DFRWS for enterprise security buyers and vendor sponsors, but operates at far greater scale (40,000+ attendees) and is commercial rather than research-led.
- Black Hat: Black Hat is the largest commercial cybersecurity conference brand (USA, EU, Asia) with briefings, trainings, and arsenals covering DFIR among many security topics. It competes for the same vendor sponsorship dollars and practitioner mindshare as DFRWS but at much larger scale and broader scope.
Market position
Strengths4 records
Competitive moat4 records
Key risks5 records
Key highlights6 records
Customer concentration
DFRWS social profiles
Digital presenceDFRWS financial estimates
Financial estimateRevenue estimate
Valuation estimate
DFRWS leadership team
Management profileNumber of profiles
Profiles17 records
DFRWS funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
DFRWS M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about DFRWS
What does DFRWS do?
DFRWS organizes annual regional digital forensics research conferences (USA, EU, APAC) plus the Digital Forensics Doctoral Symposium, publishes the monthly peer-reviewed DFIR Review, runs annual forensic challenges, and stewards a portfolio of open-source community projects (CASE ontology, SOLVE-IT knowledge base, AFF4, DFIR ORC, and related forensic tools). The organization functions as a non-profit knowledge hub for researchers, practitioners, law enforcement, and tool vendors to share peer-reviewed research and advance the state of digital forensics.
Is DFRWS a public or private company?
DFRWS is a private company. It is classified as nonprofit foundation owned and is currently operating.
When was DFRWS founded?
DFRWS was founded in 2001. It employs 1 to 10 people.
Where is DFRWS based?
DFRWS is headquartered in Arlington, United States, in the North America region.
How does DFRWS make money?
Three revenue lines are on record. Conference Registrations are the primary driver. The others are sponsorships and student Scholarships.
Who are DFRWS's main competitors?
Others on record are Magnet Forensics and Cellebrite. INTERPOL Digital Forensics / Cybercrime Directorate is listed as a regional player. Direct peers are USENIX Association, FIRST (Forum of Incident Response and Security Teams), ACM (Association for Computing Machinery), IEEE Computer Society and SANS Institute. Broad incumbents are RSA Conference and Black Hat.
Does DFRWS have an API?
No public API is recorded for DFRWS.
What industry is DFRWS in?
Its primary akta.pro industry code is HDADAEAJ, Endpoint Forensics & Incident Response (DFIR), with a secondary code of MPAJABAK, Scholarly Societies & Conference Proceedings Publishing. Its NAICS code is 54171 and its SIC code is 2741.