DFRWS

What DFRWS does

DFRWS (Digital Forensic Research Workshop, Inc.) is a 501(c)(3) non-profit organization founded in 2001 that serves as the primary convening body for the digital forensics research community. It operates three annual regional conferences in the USA, EU, and APAC, supplemented by the Digital Forensics Doctoral Symposium (DFDS), running for 25 years and reaching practitioners across 16 countries. The organization also curates the monthly DFIR Review publication, an open-access peer-reviewed outlet published via PubPub under CC BY-NC-ND licensing, and runs annual forensic challenges dating back to 2005.

DFRWS's core products are its knowledge and standards artifacts: the CASE (Cyber-investigation Analysis Standard Expression) ontology, now a Linux Foundation Community Project; SOLVE-IT, a MITRE ATT&CK-inspired knowledge base for forensic techniques; and a portfolio of community-maintained open-source projects including AFF4, DFIR ORC, GRANEF, Hansken, sdhash, ssdeep, and VICSafer. The technology layer is non-proprietary; DFRWS contributes governance, peer review, and convening infrastructure rather than commercial software. Its underlying platform is conventional: EasyChair for paper submissions, PubPub for publication hosting, and the dfrws.org website for marketing and outreach.

The organization's revenue model is event-driven and sponsorship-supported. Conference registrations (tiered into Full, Law Enforcement, and Student, with virtual options) and corporate sponsorships (Community Leader, Community Mentor, Community Member tiers starting at $1,500 USD) constitute the primary income streams. Student scholarships are funded out of sponsorship revenue. The organization does not disclose financials and is volunteer-run, with sponsorship packages and individual registration fees (in-person $545-$945; virtual $75-$150) governing cash flow. Being a non-profit, there is no equity, no parent company, and no venture funding.

Name

DFRWS

Legal name

Digital Forensic Research Workshop, Inc.

Website

https://dfrws.org

Company type

Private

Founded year

2001

Operating status

Operating

Headcount range

1–10 employees

Short description

DFRWS is a 501(c)(3) non-profit that organizes annual digital forensics research conferences across the USA, EU, and APAC, curates peer-reviewed publications like DFIR Review, and maintains community open-source standards (CASE, SOLVE-IT) for digital evidence handling.

Ownership category

akta.pro rank

NAICS

Research and Development in the Physical, Engineering, and Life Sciences (54171), Scientific Research and Development Services (5417), Professional, Scientific, and Technical Services (541)

SIC

Miscellaneous Publishing (2741), Books: Publishing Or Publishing & Printing (2731)

akta.pro primary industry

Endpoint Forensics & Incident Response (DFIR) (HDADAEAJ)

akta.pro secondary industries

Scholarly Societies & Conference Proceedings Publishing (MPAJABAK), Conference Proceedings & Research Reports Publishing (EDAGAFAL), Digital Forensics & Malware Analysis (EDAOAIAJ), Research & Science Grantmaking Foundations (BPAGAKAI)

Keywords

• Digital forensics research
• Forensic investigations conferences
• Peer-reviewed DFIR publications
• Open source forensics tools
• Law enforcement training

Headquarters

HQ city

Arlington

HQ country

United States

HQ region

North America

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Operations, Personnel, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Conference Registrations: Revenue generated from conference attendance fees. DFRWS hosts annual conferences in USA, EU, and APAC regions with tiered pricing for Full, Law Enforcement, and Student registrations. Virtual attendance options available at lower price points.
2. Sponsorships: Corporate and organizational sponsorships at various levels (Community Leader, Community Mentor, Community Member) that provide visibility, exhibit space, and promotional opportunities at conferences. Sponsorship packages start at $1500 USD and can be customized.
3. Student Scholarships: Need-based financial assistance funded by sponsorships for students to attend and present research at conferences.

Pricing tiers

Go-to-market motion2 records

Distribution channels7 records

Marketing channels8 records

Core offering

DFRWS organizes annual regional digital forensics research conferences (USA, EU, APAC) plus the Digital Forensics Doctoral Symposium, publishes the monthly peer-reviewed DFIR Review, runs annual forensic challenges, and stewards a portfolio of open-source community projects (CASE ontology, SOLVE-IT knowledge base, AFF4, DFIR ORC, and related forensic tools). The organization functions as a non-profit knowledge hub for researchers, practitioners, law enforcement, and tool vendors to share peer-reviewed research and advance the state of digital forensics.

Product overview

DFRWS is a non-profit organization (501(c)(3)) that organizes digital forensics research conferences and supports the community through publications and open source projects. The core offerings include DFRWS regional conferences (USA, APAC, EU), the DFIR Review monthly publication, and various open source projects including SOLVE-IT (a digital forensic technique knowledge base) and CASE (ontology-based investigation standard). DFRWS also runs annual Forensic Challenges and maintains an archive of 806+ peer-reviewed research papers spanning from 2001 to present.

Differentiator

Problem solved

Functional benefit

Products and services

• DFRWS Regional Conferences (USA, EU, APAC) Annual regional conferences featuring peer-reviewed research papers, practitioner presentations, workshops, demos, panel discussions, and poster sessions in digital forensics. Each regional edition runs as a hybrid event with in-person and virtual attendance options. Intended audience: digital forensics researchers, practitioners, law enforcement, students, and tool vendors.
• DFIR Review Monthly review publication providing a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. Publishes practitioner-authored studies of specific devices, digital traces, analysis methods, and criminal activities with DOI numbers for citation in legal matters.
• SOLVE-IT Knowledge Base Open-source knowledge base that describes and indexes techniques available to digital forensic investigators along with potential weaknesses and mitigations. Inspired by MITRE ATT&CK, it provides resources and tools for systematic error mitigation for digital evidence.
• CASE (Cyber-investigation Analysis Standard Expression) Structured ontology-based specification for representing information commonly exchanged and analyzed during investigations involving digital evidence. A Linux Foundation Community Project actively maintained by the DFRWS community to enable interoperability across forensic tools.
• DFRWS Forensic Challenges Annual digital forensics research challenges dating back to 2005 that advance research in different areas. DFRWS selects topics deserving research focus and prepares artifacts reflecting real-world scenarios for teams to submit analysis and tools, with prizes awarded to top entries.
• Digital Forensics Doctoral Symposium (DFDS) Doctoral symposium co-located with DFRWS EU 2026 that provides a platform for doctoral students to share early-stage research, engage in discussions with peers, and build connections within the digital forensics community.

Quantifiable outcome

• 806 peer-reviewed research papers published since inception
• +2 more outcomes

Named customers5 records

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Eleven partnerships are on record, tiered flagship, core and minor.

• Project VIC InternationalflagshipStrategic or Co-development PartnerUS-based technology focused charity that advances technologies to combat child abuse and child exploitation. Partners with DFRWS to host specialized 2-day workshops for Crimes Against Children investigators and forensics examiners at DFRWS USA 2026.
• Linköping University (LiU)flagshipStrategic or Co-development PartnerLeading Swedish academic institution with strong tradition in computer science, cybersecurity, and AI. Co-organizes DFRWS EU 2026 with DFRWS and Digital Forensics Sweden, hosting Workshop Day and main conference sessions.
• Digital Forensics SwedenflagshipStrategic or Co-development PartnerNetwork hosted by Santa Anna IT Research Institute since 2018 that connects law enforcement challenges with research and companies developing new forensic tools.
• Swedish Police AuthoritycoreStrategic or Co-development PartnerNational police force with nearly 40,000 employees. The Swedish National Forensic Centre (NFC) provides forensic expertise and engages in collaboration with academia and industry.
• Santa Anna IT Research InstitutecoreStrategic or Co-development PartnerNon-profit IT research organization that hosts the Digital Forensics Sweden network. Facilitates projects connecting law enforcement challenges with research and companies developing forensic tools.
• AI SwedenminorStrategic or Co-development PartnerSwedish national center for applied AI, collaborating with 160+ partners. Supports new technologies, standards, and methods for digital forensic investigations as part of Digital Forensics Sweden initiative.
• Forensic FocuscoreGTM or Marketing PartnerLeading digital forensics portal since July 2002 with busy forums, breaking industry news, education directory, interviews, articles, newsletter with 16,000+ subscribers, and LinkedIn's largest digital forensics group.
• Norrköping Visualization CenterminorStrategic or Co-development PartnerWorld-unique visualization research center in Norrköping that provides venue for Friday conference sessions and the multimedia track, offering interactive experiences.
• Women in Forensic Computing (WinFC)minorStrategic or Co-development PartnerWorkshop co-locating with DFRWS EU 2026 on Monday, March 23, focused on supporting women in forensic computing. Organized by Friedrich-Alexander-Universität Erlangen-Nürnberg.
• George Mason UniversityflagshipStrategic or Co-development PartnerHosts DFRWS USA 2026 at Mason Square campus in Arlington, Virginia. Jessica Hyde serves as adjunct professor teaching mobile forensics in the digital forensics graduate program.
• PubPubcoreTechnology or IntegrationOpen-access publishing platform used for DFIR Review publications. DFRWS publications are available under CC BY-NC-ND license through PubPub.

Scale indicators7 records

Recent moves6 records

Expansion highlights6 records

Others

• Magnet Forensics: Magnet Forensics is a commercial DFIR tool vendor (AXIOM, GrayKey) and DFRWS sponsor, whose founder Jessica Hyde sits on the DFRWS Board and chairs DFIR Review. It is comparable as a DFIR ecosystem player but is a vendor partner rather than a peer organization, running its own CEIC practitioner conference.
• Cellebrite: Cellebrite is the dominant commercial mobile forensics vendor (UFED, Premium) and a historical DFRWS sponsor, serving the same law enforcement DFIR audience. It is comparable as an ecosystem participant but is a commercial vendor running its own Cellebrite Pathfinder events rather than a peer scholarly society.

Regional players

• INTERPOL Digital Forensics / Cybercrime Directorate: INTERPOL's Cybercrime Directorate runs international law enforcement training and collaboration programs in digital forensics, including the INTERPOL Digital Forensics training programme that DFRWS board member Pavel Gladyshev helped develop. It is comparable as a digital forensics convening body for law enforcement but operates inter-governmentally and globally rather than as a scholarly society.

Direct peers

• USENIX Association: USENIX is a non-profit advanced computing systems society that hosts peer-reviewed academic conferences (SOUPS, OSDI, USENIX Security), analogous to DFRWS as a volunteer scholarly society in cybersecurity/security. Both run open proceedings, depend on academic volunteers, and convene researchers and practitioners around technical research.
• FIRST (Forum of Incident Response and Security Teams): FIRST is an international confederation of incident response and security teams that holds an annual technical colloquia and conferences. It is structurally similar to DFRWS as a non-profit, member-driven convener of incident response professionals, with overlapping board membership (Wietse Venema served as FIRST chair) and shared CSIRT/law enforcement audiences.
• ACM (Association for Computing Machinery): ACM is the largest international computing scholarly society, publishing peer-reviewed conferences and journals (including CCS, SIGSAC). It is comparable to DFRWS as a scholarly society publishing indexed research, with a membership/monograph model that DFRWS could evolve toward, though ACM operates at much greater scale across all of computing.
• IEEE Computer Society: IEEE Computer Society publishes peer-reviewed computing conferences and journals (including IEEE Transactions on Information Forensics and Security) and runs membership-driven scholarly activities. It is a structural analog to DFRWS as a scholarly society with indexed publications and academic volunteer leadership, though it covers all of computing rather than specializing in DFIR.
• SANS Institute: SANS is the dominant DFIR training and certification provider (GCFE, GCFA, FOR508) and runs the SANS DFIR Summit and Forensic Summit. It is directly comparable to DFRWS in target audience (DFIR practitioners and law enforcement) and overlapping content (memory, mobile, network forensics), though SANS is commercial and training-led while DFRWS is non-profit and research-led.

Broad incumbents

• RSA Conference: RSA Conference is the largest commercial cybersecurity conference globally, with a track on digital forensics and incident response. It competes with DFRWS for enterprise security buyers and vendor sponsors, but operates at far greater scale (40,000+ attendees) and is commercial rather than research-led.
• Black Hat: Black Hat is the largest commercial cybersecurity conference brand (USA, EU, Asia) with briefings, trainings, and arsenals covering DFIR among many security topics. It competes for the same vendor sponsorship dollars and practitioner mindshare as DFRWS but at much larger scale and broader scope.

Market position

Strengths4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/DFRWS
• YouTubeyoutube.com/channel/UC0MVaGW4AQc24anpUrWk6zA
• Facebookfacebook.com/DFRWS
• LinkedInlinkedin.com/company/dfrws

Revenue estimate

Valuation estimate

Number of profiles

Profiles17 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about DFRWS