Decentralized digital forensics

Civil society worldwide is facing sustained and sophisticated digital attacks from a whole host of threat actors. Yet, they often lack safe, accessible, and expedient ways to confirm compromise. The majority of mobile forensics capacity is centralized: advanced analysis typically happens in a small number of expert labs, private sector businesses or with scarce incident responders, and generally requires victims to surrender their devices and/or be burdened with running complicated technologies.

WARD offers a secure, scalable way for civil society to quickly address digital threats. Its decentralized, offline digital forensics technology provides users with a diagnostics toolkit to detect potential compromises on mobile devices without uploading device data to a central authority. It also enables local digital-security practitioners to export minimal, privacy-preserving documentation to a trusted expert of their choosing—enabling safe local triage, faster response times, and auditable methodologies that work even during low internet connectivity.

WARD strengthens the ability of local organizations in authoritarian contexts to begin critical forensics investigations, resolve digital threats more quickly, and build their own forensics capabilities.

WARD features

Decentralized

No device surrender or data transfer over insecure networks.

Accessible

Free, open-source diagnostic toolkit.

Secure and private

Minimal, privacy-preserving exports to trusted experts.