B08_Attachment_1_JOFOC_Redacted_1.pdf

Justification for Other than Full and Open Competition Bureau of Land Management

FAR 13.106-1(b)(1) Simplified Acquisitions

(PR 0044045748)

1. Identification of the agency and the contracting office.

Bureau of Land Management, Ridgecrest Field Office 300 South Richmond Road Ridgecrest, CA 93555-4436

2. Description of supply or service required to meet the agency’s needs.

Mobile device forensics is a critical component of our investigative workflow. The ability to extract, analyze, and automate evidence collection from a wide range of devices—including iOS and Android—is essential. Graykey provides unique features that competitors lack.

3. The rationale or circumstances for limiting competition.

GrayKey has brute force capabilities Apple Iphones and other devices that cannot open. It will keep trying to attack the phone until the device opens for extraction. Once connected, you can choose which extractions to download—e.g., full filesystem dump, decrypted keychain, RAM. After download, AXIOM automatically verifies file integrity via hash matching.

Through native integrations, Magnet AXIOM and GrayKey delivers a fluid end-to-end mobile forensic pipeline—unlocking devices, extracting data, and seamlessly analyzing it with forensic-grade assurance.

AXIOM includes a “Connect to GrayKey” feature: In AXIOM, select Mobile → iOS → Connect to GrayKey, input the GrayKey’s IP or hostname, authenticate, then browse available extractions on GrayKey.

Automated Ingestion & Parsing

• AXIOM imports the GrayKey image and intelligently processes its artifacts, including:

o Full iOS filesystem content o Decrypted keychain data o RAM memory dumps

• These are parsed with AXIOM’s mobile artifact engine to display chats, geolocation, app data, timelines, etc.

Streamlined Workflow & Multi-Device Scalability

• Eliminates manual steps: no need to manually export GrayKey images and re-import into AXIOM. Workflow becomes “GrayKey → AXIOM ingestion” in one pipeline.

• Supports GrayKey Fastrak: After extraction, mobile images are automatically pushed to AXIOM for processing, helping scale multi-device ingestion.

a. Advanced iOS Device Extraction

• Graykey provides industry-leading support for iOS device extraction. Current competitors iOS support is limited and less effective, making Graykey the only viable option for comprehensive iOS investigations.

b. Multi-Device Extraction

• Graykey Fastrack enables simultaneous extraction from multiple devices, a capability not available in other mobile forensic product suite as other vendors are limited to single-device extraction.

• GrayKey performs the exploit, unlocking, and extraction entirely in-house on a single, secure offline hardware appliance, preventing data leaks or evidentiary contamination.

• Other vendors are not as robust as GrayKey when it comes to unlocking electronic devices such as, Apply Iphone devices,

c. Automation Across Data Sources

• Graykey Automate supports workflow automation across mobile, PC, and cloud data sources. Competitors’ products are restricted to its own ecosystem and require additional infrastructure, limiting their utility.

d. Media Forensics and CSAM/ICAC Support

• Graykey (with Magnet Forensics) offers advanced media review and categorization tools

(e.g., Griffeye, Verify) for large-scale CSAM investigations. No other vendor can provide this.

e. Consistent and Intuitive User Interface

• Graykey features a patented, logical, and intuitive interface, reducing training time and increasing productivity. Competitors’ products are more cumbersome and less user-friendly.

f. Regular Updates and Quality Assurance

• Graykey undergoes rigorous QA testing and provides reliable, timely updates.

Competitors’ updates cadence has been inconsistent, with reports of significant delays1.

g. Superior Customer Support

• Magnet Forensics (Graykey) is recognized for industry-leading customer support, with dedicated teams available.

h. Robust Stakeholder Review

• Graykey enables creation of Portable Cases with evidence from multiple sources, not just mobile devices. Competitors’ reports are limited in scope.

AXIOM includes a “Connect to GrayKey” feature: In AXIOM, select Mobile → iOS → Connect to GrayKey, input the GrayKey’s IP or hostname, authenticate, then browse available extractions on GrayKey.

4. A description of the Market Research (MR) conducted and the results or a statement of the reason MR was not conducted.

Market research into mobile device forensic extraction tools indicates that while several vendors offer digital forensic solutions, no other commercially available product matches the specialized device‑unlocking and rapid physical extraction capabilities provided by GrayKey.

Tools such as Cellebrite UFED and MSAB XRY are widely used in law enforcement and support both logical and physical data extraction; however, GrayKey surpasses its competitors by offering unparalleled device‑unlocking capabilities and significantly faster data extraction performance. Peer and industry reviews consistently note that GrayKey provides unique efficiency and effectiveness for accessing locked iOS devices—capabilities not replicated by other vendors in the current market.

Other platforms, such as Oxygen Forensic Detective, Belkasoft X, and lower‑cost options from Sherlock Forensics, provide robust logical acquisition or mid‑range extraction features, but they do not offer comparable secure unlock workflows for modern, encrypted iOS devices and therefore cannot meet the operational requirements that necessitate GrayKey’s specialized hardware-backed extraction process.

Based on this review, GrayKey is the only tool identified that fulfills the full requirement for rapid, repeatable, court‑defensible unlocking and physical extraction of secured mobile devices, justifying the determination that a sole-source acquisition is necessary to meet mission needs.

5. Price estimate, including all options, if applicable.

6. Recommended source. (Requestor) Recommended vendor is Magnet Forensics SAM UEI; JKRDYNDWLNB8

Certification

The information contained in this Justification for Other than Full and Open Competition is certified accurate and complete to the best of my knowledge and belief.

Name of Requestor Date Title of Requestor

Name of Contracting Officer Date