Arcana Forensics Arcana Forensics
FIELD TEST PASS · AF-FT-2026-0921 · verify on GitHub Actions

Evidence acquisition without the cloud.

An air-gapped Rust pipeline that hashes, seals, and custody-chains evidence files on the machine in front of you. No network calls, no telemetry, no disk-wipe capability — just acquire → AES-256-GCM vault → SHA-256 hash-chained ledger.

Download Community zip Run the field test Pricing Source on GitHub

Acquire

Confined directory walk — no symlinks, no device nodes followed. SHA-256 every file before it's touched.

Seal

AES-256-GCM into a versioned vault blob. Key derived from your passphrase, never stored in the case directory.

Custody

Every action appended to a local SHA-256 hash chain in SQLite. verify re-hashes and re-checks it end to end.

Also from Arcana

Arcana Recon

Python CLI. Repairs lighting-damaged document photos (glare/shadow), maps reading order, and seals the result in an ARCN vault the Rust tool can also open. Classical image processing, no ML model. MIT license. Source & docs

Arcana Restore

Desktop app + CLI for Windows/macOS/Linux. Repairs glare-damaged document photos and short videos (real pixels from other frames, not AI guessing), seals into a passphrase-encrypted vault (Argon2id + AES-256-GCM). No independent security audit yet; installers just published and largely untested outside Linux. Download & verify (SHA256SUMS) · Source & docs

Licensing

CommunityFree · MIT license · full source
Professional$3,500 / seat / year
Enterprise$35,000 / year
GovernmentFrom $150,000 — contact sales

This software does not wipe disks, does not follow symlinks, and does not phone home.

Payments are handled by Stripe on the pricing page — never inside the acquire tool, never in a case directory.

A Stripe receipt is not a chain-of-custody exhibit and not expert testimony.