# Exterro FTK vs Velociraptor

| Attribute | Exterro FTK | Velociraptor |
|---|---|---|
| **Vioscale score** | 65.2 (13% (low)) | 24.3 (3% (low)) |
| deployment.options | - | `{"cloud":true,"hybrid":true,"on_prem":true,"air_gapped":true,"self_hosted":true}` |
| description.long | An integrated software system that combines tools for legal investigations, regulatory compliance management, cybersecurity oversight, and computer forensics, enabling enterprises to coordinate these functions through one interface. | A digital forensic and incident response tool that enables targeted collection and analysis of forensic evidence from endpoints simultaneously, with capabilities for artifact hunting, event log analysis, and endpoint monitoring. |
| integrations.count | 190 | 6 |
| integrations.list | `[{"name":"Gmail"},{"name":"Google Drive"},{"name":"Calendar"},{"name":"Cloud Storage"},{"name":"Vault"},{"name":"Exchange"},{"name":"OneDrive"},{"name":"OneNote"},{"name":"SharePoint Online"},{"name":"Yammer"},{"name":"Salesforce"},{"name":"Slack"},{"name":"Microsoft Teams"},{"name":"Zoom"}]` | `[{"name":"Slack"},{"name":"Discord"},{"name":"S3"},{"name":"SMB"},{"name":"Azure OAuth"},{"name":"Google OAuth"}]` |
| platform.support | - | `{"cli":true,"mac":true,"web":true,"linux":true,"windows":true}` |
| pricing | `{"type":"subscription","sourceUrl":"https://www.exterro.com/forensic-toolkit","retrievedAt":"2026-08-19T23:33:50.220Z"}` | - |
| pricing.model | commercial | - |
| pricing.price_level | unknown | - |
| security.disclosure_policy | - | yes |
| security.iso27001 | yes | - |
| security.soc2 | yes | - |

## Capabilities (Digital Forensics)

| Capability | Exterro FTK | Velociraptor |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | - | - |
| Disk imaging file carving | - | - |
| Volatile memory RAM analysis | - | - |
| Mobile ios android extraction | - | - |
| Remote endpoint acquisition | - | - |
| Mac os apfs support | - | - |
| Cloud saas m365 extraction | - | - |
| Court admissible hashing reporting | - | - |
| Automated artifact timelining | - | - |
| Malware triage yara scanning | - | - |
| Fips 140 2 certification | - | - |
| SOC2 type ii | - | - |
| Pricing model | - | - |

*Source: Vioscale. Generated 2026-09-01T16:30:54.309Z. "-" = undocumented, not absent.*