Magnet Forensics
A widely deployed digital forensics and investigation platform used across federal law enforcement and major police departments, now under Thoma Bravo ownership following a $1.35 billion 2023 acquisition.
Visit Website ↗ + Add to CompareOverview
Magnet Forensics builds digital forensics software — most notably Magnet AXIOM and AXIOM Cyber — used to acquire, process, analyze, and report on evidence pulled from computers, mobile devices, cloud services, and IoT sources. The platform is aimed at two overlapping audiences: public safety investigators building court-ready cases, and enterprise incident response teams reconstructing what happened during a breach. Reported customers include the FBI and Department of Homeland Security component agencies such as ICE and CBP, along with municipal departments including the LAPD, NYPD, and London’s Metropolitan Police.
Founded in Waterloo, Ontario in 2010, Magnet went public on the Nasdaq and TSX in 2021 before Thoma Bravo agreed to acquire it for roughly $1.35 billion in a deal that closed in April 2023. Thoma Bravo combined Magnet with Grayshift, the mobile-device extraction specialist it had taken majority control of the previous year, pairing Grayshift’s phone-unlocking capability with Magnet’s broader evidence processing and case management suite. Headcount has grown substantially since, from roughly 400 employees around the time of the take-private deal to reported figures north of 1,000 today.
As a scaled, PE-owned incumbent with a long public-sector sales history, Magnet isn’t a disruptive newcomer — but its breadth of named law enforcement and federal adoption is a real, verifiable signal of operational trust that many digital forensics competitors can’t match.
Innovation Matrix Assessment
Continues regular AXIOM and AXIOM Cyber releases and has integrated Grayshift's mobile-extraction technology since the 2023 combination, a steady cadence typical of a mature incumbent rather than a fast-moving startup.
Reported deployment across the FBI, DHS component agencies (ICE, CBP), and large municipal police departments (LAPD, NYPD, London Met) demonstrates real operational capability at public-sector scale.
A ~$1.35B acquisition by Thoma Bravo in 2023, combined with Grayshift, and continued headcount growth toward roughly 1,000 employees indicate durable business momentum post-acquisition.
A well-established, formerly publicly traded digital forensics incumbent; per this site's convention, scaled incumbents are treated as less disruptive by definition regardless of technical quality.
Named, verifiable adoption by federal law enforcement and major metropolitan police departments is a meaningful indirect efficacy signal, though it stops short of independent forensic-accuracy lab testing.
Digital forensics and evidence processing remain core to both law enforcement investigations and enterprise incident response, and the Grayshift combination broadened coverage into mobile extraction.
Why CISOs Should Care
Enterprise incident response teams conducting internal investigations get access to a forensic evidence platform with a proven, named track record inside federal law enforcement and major police departments.
What Makes It Different
Broad, independently reported adoption across the FBI, DHS component agencies, and large municipal police forces sets it apart from digital forensics tools with a narrower public-sector footprint.
The Matrix Verdict
55/100 — INCREMENTAL INNOVATOR
A mature, credibly adopted digital forensics platform with real evidentiary track record; not disruptive as a large PE-backed incumbent, but a genuinely useful and independently verifiable choice for DFIR work.
Editorial Note: Claims vs. Verified Findings
The Thoma Bravo acquisition price (~$1.35B) and named law enforcement customers (FBI, ICE, CBP, LAPD, NYPD, London Met) are independently reported in press coverage (TechCrunch, Thoma Bravo press releases). Specific accuracy or performance claims about AXIOM itself are vendor-sourced and were not independently lab-verified in this research.
Sources
Alternatives to Magnet Forensics
Abnormal AI
AI-native behavioral security platform that analyzes sender identity and communication patterns, rather than message content alone, to stop…
Palo Alto Networks Cortex XSIAM
Palo Alto Networks' AI-driven 'autonomous SOC' platform that unifies SIEM, EDR, SOAR, and attack-surface data into a single…
Fenix24
Chattanooga-based ransomware recovery specialist that has restored operations after 500+ real-world incidents, including 30 Fortune 500 companies.
Torq
AI-native hyperautomation platform positioning itself as an 'agentic SOC,' using a multi-agent system to autonomously execute large volumes…
Microsoft Sentinel
Microsoft's cloud-native SIEM, deeply integrated with Azure and Microsoft 365 telemetry, now layering agentic AI (Security Copilot/Sentinel agents)…
Sophos
Sophos is a UK-founded, Thoma Bravo-owned cybersecurity vendor unifying endpoint protection, network firewalls, and managed detection and response…