Introducing The Acorn

Get ready for The Acorn our compact Linux Digital Forensic Workstation with Intel muscle, software-based USB write blocking, and a curated open source digital forensics toolkit. Arriving June 2025. Join our Launch List.

Squirrel Forensics delivers a powerful, Linux Digital Forensic Workstation built for investigators, cybersecurity teams, IT professionals, service providers, educators, and students. Compact and rugged, each system runs on Linux-Ubuntu hardware and features a proprietary software-based USB write-blocker, along with a carefully curated selection of over 50 industry-trusted open-source forensic tools and back-end applications that support and enhance every stage of the DFIR process, from evidence acquisition to analysis and reporting.

Purpose-built for field, lab, and remote investigations, these workstations offer a streamlined, customisable environment for thorough forensic analysis, compliance-focused workflows, and practical learning. All at an accessible introductory price point under £600.

Evidence

Gather digital forensic evidence across multiple endpoints and media - efficiently and securely.

Events

Capture key endpoint events - logins, file changes, process execution, and more.

Exploits

Identify suspicious behavior and uncover hidden threats across systems and networks.

Velociraptor forensic use case

Startup's & SMEs

The Acorn’s affordability makes it accessible to startups and small businesses. Companies of all sizes face rising cyber threats – data breaches, insider threats, and compliance issues. With The Acorn, internal IT teams, outsourced IT service providers, and security teams can promptly respond to security incidents, investigate suspicious activities, and conduct compliance audits in-house.

This enables IT service providers to offer The Acorn as an additional value-added service to their clients, improving response times, helps meet regulatory obligations while contributing to minimising financial and reputational risk.

Evidence ingestion process in Autopsy's GUI running on the Acorn forensic workstation, used for digital forensic investigations and case management.

Law Enforcement & Government Agencies

Smaller police forces often lack the budget for traditional, expensive forensic equipment. The Acorn provides an affordable, field-ready solution for collecting and preserving digital evidence, imaging drives, analysing USB sticks, and investigating mobile devices quickly and securely at the scene.

National agencies benefit from its portability, allowing deployment for remote field operations, counter-terrorism efforts, and intelligence gathering. It can also be run with TOR and a VPN from the main workstation to ensure anonymity.

Guymager forensic use case – forensic imaging screenshot

Independent Investigators & Consultants

The Acorn is not a replacement for established, high-end forensic platforms but a powerful, portable complement to them. It’s fully customisable and upgradeable, making it suitable for handling a wide range of data volumes and investigative workloads.

It excels as a fast, effective early case assessment tool, helping you triage data quickly, select the right tools, and streamline investigations to match the scope and sensitivity of each case.

The Acorn empowers you to offer professional-grade forensic services from data recovery to malware analysis and network threat investigations wherever you’re needed.

Write-Blocker Forensic Use Case

Educational Institutions & Training Centres

Universities and training providers often struggle to give students hands-on forensic experience, as commercial-grade tools are expensive and difficult to license.

The Acorn offers a safe, low-cost environment for exploring real-world forensic tools without the licensing hurdles.

By delivering the same capabilities at a fraction of the price, the Acorn enables educators to integrate live forensic exercises into their courses, better preparing students for careers in cyber incident response and digital forensics.

Become a Beta Tester for the Acorn

Shape the future of digital forensics. Get early access to a powerful new forensic workstation and help us make it even better.

The Acorn is a compact, portable digital forensics workstation created by Squirrel Forensics. It’s built for professionals, educators, and independent investigators, featuring:

• Built-in proprietary USB write blocker
• Pre-installed open-source forensic tools (Autopsy, Velociraptor, Wireshark, and more)
• A secure Linux OS, optimised for digital investigations
• All priced under £600

We’re inviting forensic professionals, incident responders, educators, and cybersecurity experts to join our Beta Program.

You’re a great fit if:

✅ You work in DFIR, IT security or academia
✅ You want early hands-on access
✅ You’re happy to provide feedback or a case study

What you’ll get:

• Early access to the Acorn before launch
• Direct communication with our dev team
• Beta tester pricing or a free evaluation unit (limited slots)
• Potential feature in case studies or social posts
• Preview of our upcoming AI Forensics API

Squirrel Forensics logo featuring Sleuthy the Squirrel, representing a leading digital forensics and cybersecurity company.

Get In Touch

* Required fields