WetStone Labs

WetStone Technologies was a Cortland, New York digital-forensics and malware-research shop founded in 1997, best known among forensic examiners and incident responders for two niche tools: Gargoyle Investigator, a malware and unauthorized-software discovery tool, and StegoHunt, one of the more established commercial tools for detecting steganography (data hidden inside images, audio, or other carrier files) on seized media. In October 2022, Allen Corporation sold WetStone’s digital-forensics line of business to SiviSoft, and the brand now operates as WetStone Labs, described as SiviSoft’s cybersecurity/digital-forensics division rather than a standalone company.

The tools themselves remain narrowly useful: steganography detection is a small but real gap in most forensic toolkits (EnCase, FTK, and similar suites don’t specialize in it), and Gargoyle’s malware-discovery signatures have decades of forensic-lab tuning behind them. This is not a platform play — it’s specialist tooling for law-enforcement, government, and corporate forensic examiners doing post-incident investigation, not a control that prevents attacks in the first place.

Because WetStone no longer operates as an independent company, evidence about its current investment, staffing, and product roadmap under SiviSoft ownership is thin compared to a standalone vendor. We include it because the tools are still sold and used, but CISOs should understand they’re evaluating a legacy specialist capability inside a larger parent rather than a company making independent go-to-market bets.