Skip to content
SPECIFICTION
Get listed

SUMURI PALADIN

sumuri.com

Free plan Linux
Visit sumuri.com
Spec score 7.7 #15 of 30 in Digital Forensics Software

What it is

SUMURI PALADIN is a donation-supported live Linux environment for forensic imaging, triage, and recovery. PALADIN 9 LTS uses Ubuntu 24.04 LTS and is modified to prevent changes to attached media and disable automatic mounting at boot. Its graphical Toolbox handles imaging, logical acquisitions, hashing, and device mounting, with read-only options and logging. Included software includes Autopsy, The Sleuth Kit, and other open-source forensic tools. Supported image formats include E01/Ex01, RAW (.dd), SMART, AFF, VHD, and VMDK. PALADIN LTS can mount and image through NFS or SMB networks and supports BitLocker-encrypted Windows partitions from Vista through Windows 10. It integrates Arsenal Image Mounter Remote Agent for advanced mounting and live or remote analysis. Persistent Mode preserves reports and configurations between prepared sessions, subject to extra free space. PALADIN runs as a Linux live environment on 64-bit and 32-bit PC hardware.

Spec sheet

Purpose
PALADIN is a donation-supported, live Linux environment for forensic imaging, triage, and recovery.Read 2 Oct 2026 · sumuri.com
Intended users
SUMURI describes PALADIN as used worldwide by law enforcement, military, and corporate investigators.Read 2 Oct 2026 · sumuri.com
Integrations
PALADIN 9 LTS integrates Arsenal Image Mounter Remote Agent for advanced disk-image mounting and live or remote analysis.Read 2 Oct 2026 · sumuri.com
Support
SUMURI provides a PALADIN Version 9 Quick Start Guide and directs users to its knowledge base and support portal for help.Read 2 Oct 2026 · sumuri.com
Headquarters
Magnolia, Delaware, USARead 28 Sep 2026 · sumuri.com
Boot compatibility
PALADIN 9 LTS supports Secure Boot on a wider range of systems, though some BIOS configurations may still need adjustment.Read 2 Oct 2026 · sumuri.com
Encryption support
PALADIN LTS supports BitLocker-encrypted Windows partitions from Vista through Windows 10.Read 2 Oct 2026 · sumuri.com
Forensic safeguards
PALADIN 9 LTS is built on Ubuntu 24.04 LTS and is modified to prevent changes to attached media and disable auto-mounting at boot.Read 2 Oct 2026 · sumuri.com
Hardware compatibility
PALADIN PRO includes 64-bit and 32-bit versions and is described as supporting NVMe and eMMC imaging, including on pre-T2 Intel MacBooks and HP Stream laptops.Read 2 Oct 2026 · sumuri.com
Image formats
PALADIN LTS supports forensic image formats including E01/Ex01, RAW (.dd), SMART, AFF, VHD, and VMDK.Read 2 Oct 2026 · sumuri.com
Included software
PALADIN includes Autopsy and The Sleuth Kit, alongside open-source forensic tools.Read 2 Oct 2026 · sumuri.com
Network imaging
PALADIN LTS can mount and image over NFS or SMB networks.Read 2 Oct 2026 · sumuri.com
Persistent mode
Persistent Mode can preserve reports, tool configurations, and other content between sessions when configured in advance, and requires extra free space.Read 2 Oct 2026 · sumuri.com
Toolbox
The PALADIN Toolbox provides a graphical interface for imaging, logical acquisitions, hashing, and device mounting, with read-only access options and logging.Read 2 Oct 2026 · sumuri.com

Plans and prices

PALADIN LTS Free Name your price; corporate users must donate at least $25; others may choose any amount, including nothing Read 2 Oct 2026 · sumuri.com
PALADIN PRO $99, paid once Preconfigured Samsung USB; includes PALADIN LTS 64-bit and PALADIN 32-bit; one-year USB warranty Read 2 Oct 2026 · sumuri.com

Every SUMURI PALADIN plan and price →

Strong points and limits

Strong points

  • Read-only access options and logging
  • Supports E01, RAW, SMART, AFF, VHD, and VMDK
  • Includes Autopsy and The Sleuth Kit
  • NFS and SMB network imaging
  • Free PALADIN LTS plan available

Limits

  • Runs as a Linux live environment
  • Persistent Mode requires extra free space
  • PALADIN PRO costs $99, paid once
  • Some Secure Boot BIOS settings may need adjustment

Who it suits

PALADIN suits law-enforcement, military, and corporate investigators needing Linux-based forensic imaging and recovery tools. It also fits users handling disk, mobile, memory, and other listed evidence sources.

Verdict

PALADIN combines forensic safeguards, imaging formats, network acquisition, and open-source tools in a Linux live environment. The free LTS plan is available, while PALADIN PRO is a $99, paid once USB package.

Where Specifiction places it

Alternatives to SUMURI PALADINAll alternatives →