Security & trust
Software you can trust with evidence.
Forensic software holds some of the most sensitive information an organisation keeps. Security at ForenSecure starts with where your data lives, continues with how our software protects the record, and includes working openly with your security team.
Our approach
Four commitments behind everything we ship.
Your data stays yours
CASEY Native runs entirely on your own infrastructure, under your policies. ForenSecure does not host or hold your case data.
Secure by design
Access is decided on the server, not the screen, and desktops never hold database credentials.
Integrity first
A tamper-evident audit trail means any later change to the record can be detected.
Kept current
Regular releases on a modern, long-term-support platform, delivered as code-signed installers.
Protecting the record
Who saw it, who changed it, and proof it hasn’t been altered.
An evidence record is only as strong as the controls around it. Ours are built into the system rather than left to process.
- Access that fits your unit. Roles you configure, and restricted cases hidden from anyone not entitled to see them.
- Everything audited. System events, case activity and changes to individual fields, including administrator overrides.
- Tamper-evident. Entries are chained together, so the integrity of any case can be checked at any time.
- Connected systems kept in check. Integrations get their own limited credentials, never a person’s login.
- Entry
- 031/26 · Exhibit movement · DH/6
- Prev
- 9c41e0…be27
- Hash
- 4f2a9c81d3e07b5a9d2c44f1b06e88aa…
- Entry
- 031/26 · Received by · M. Devlin
- Prev
- 4f2a9c…88aa
- Hash
- b8d03e5f19a2c7764e0d1f93a5c2e417…
Illustration. Hash values are examples.
CASEY Native
Deployed inside your network.
Desktops talk only to the CASEY API over HTTPS. The API checks who you are and what you may see before it touches the database, and it is the only route to your data.
CASEY Native
Windows desktop client for managers and examiners.
CASEY API
Service on your Windows Server that enforces access to every case.
SQL Server
Your case database, on your hardware, reachable only by the API.
Your security review
We work with your IT and security teams.
Every organisation has its own approval process. We support it directly, with the people who build the software.
Documentation
Architecture and data-flow information, with installation and hardening guides for each component.
Questionnaires
We answer security and procurement questionnaires, and walk reviewers through the controls in detail.
Direct access
Questions go to the team that designs and builds the software, not a call centre.
CASEY Cloud is in development. Hosting and security details for the browser edition will be published as it approaches release.
Responsible disclosure
Found something? Tell us.
ForenSecure welcomes responsible disclosure of security issues affecting our software, the customer area or this website. We will not pursue legal action against good-faith researchers who follow this policy.
Email security@forensecure.com with reproduction steps, affected versions or URLs, and how to contact you. We acknowledge reports within two working days, give a triage decision within five, and credit reporters in our release notes if they wish.
In scope
- ForenSecure software, including the CASEY Native client and the CASEY API
- forensecure.com and the /portal customer area
Out of scope
- Denial-of-service or resource-exhaustion testing
- Social engineering of ForenSecure staff or customers
- Findings that need an already-compromised user account
- Testing against a customer’s installation without their written permission
Questions from your IT or security team? Get in touch