SSA X-Ways Request 11-3-2026.pdf

Request Form to Division of Purchasing (DOP)

Sole Source Authorization - SSA - New

If you have any questions please contact us at DOPHelpDesk@adm.idaho.gov

Form ID 26326

Generated after Receipt by DOP

Year

Requestor Information

Agency Name* Idaho State Police

Agency Acronym*

ISP

Requestor Name* Olivia French

Phone* 208-884-7033

E-mail* olivia.french@isp.idaho.gov

Property Being Purchased:* X-Ways Forensics software licenses for computer forensic data extraction and analysis.

This field has a 300 character limit

Type of Exemption Check all that apply

Type of Exemption*

A solicitation has been completed and my Agency wishes to award contracts to multiple vendors for the same or smilar property (Multiple Award Authorization)

My Agency wishes to administer or award a solicitation at a dollar amount above its normal Delegated Purchasing Authority (Limited/One-Time DPA)

The property required is available on one or more open contracts, but my Agency wishes to purchase from a different vendor. (Note: if total value is over $10,000, Agency must also check the box for exemption from competition if requesting to pruchase from a specific vendor). (Utilization of Open Contract).

A solicitation is being developed (by my Agency under its DPA or in conjunction with DOP) and my Agency wishes to limit responses to a specific manufacturer/brand name (I.e. no substitutions). (Note: this option assumes that multiple vendors can offer the identified brand name; otherwise, select the option for exemption from competition to request a Sole Source Authorization (Brand Name Only)

A solicitation has been completed and there is a need to negotiate with one or more vendors. (Authorization to Negotiate)

My Agency is seeking to purchase directly from an identified vendor without completing a solicitation OR wishes to perform a level of competition that is less formal than would typically be required. (Various exemptions-additional questions to follow) mailto:olivia.french@isp.idaho.gov

Additional Questions*

There is an immediate threat to public health, safety, or welfare (Emergency Purchase Authorization)

The required property can only be procured from a single supplier (sole manufacturer and distributor) (Sole Source Authorization)

There is an existing Policy Directive on the DOP website which requires authorization to be utilized (Utilization of Policy Directive)

It would be impractical, unreasonable, or disadvantageous to complete the required competitive process under the circumstances (One Time Exemption).

Sole Source Authorization

IDAPA 38.05.01.042.02 provides that sole source purchase shall be used only if a requirement is reasonably available from a single supplier.

Fiscal Year*

FY27

Type of Request*

New

Renew (Agency wishes to extend an existing sole source authorization)

Amend (Check this box to request a change to the goods/services, term or other conditions of the

SSA)

Both Renew and Amend

New

Name of Requested Vendor* X-Ways

Desired Term in Years*

Anticipated Total Cost (for full desired term):

$26,500.00

Do you anticipate the need for renewals?

Yes No

Property* Describe the property you are seeking

Idaho State Police Forensic Services (ISPFS) is seeking continued licensing for X-Ways Forensics, a specialized digital forensic software application developed by X-Ways Software Technology AG. The software is utilized by the ISPFS Digital Forensic Unit (DFU) to acquire, preserve, examine, and analyze digital evidence from computers, hard drives, and other electronic storage media.

X-Ways Forensics allows examiners to perform complete forensic acquisitions of digital storage devices while preserving the integrity of the original data. The software provides advanced examination capabilities, including recovery of deleted files, file system and partition analysis, keyword and hash searches, file signature identification, registry analysis, and the examination of complex data structures. It also allows examiners to analyze certain types of cellular device data and identify relevant evidence across multiple digital devices.

The software is designed to efficiently process large volumes of digital evidence while requiring relatively minimal computer resources. Its portability allows examiners to operate the software from a USB device without requiring installation or a complex database configuration.

ISPFS currently maintains two X-Ways Forensics licenses. The software has undergone laboratory performance verification testing and is approved for use in DFU forensic examinations. Examiners have also completed specialized training and certification associated with the software.

X-Ways Forensics is used alongside other forensic applications, including Magnet AXIOM, to provide complementary examination capabilities and independently verify forensic findings. Continued licensing will allow ISPFS to maintain established forensic examination procedures, preserve existing investments in examiner training and certification, and support the accurate and efficient processing of digital evidence for criminal investigations throughout Idaho.

https://adminrules.idaho.gov/rules/current/38/380501.pdf

Justification* Check all that apply

Sole source provider of a licensed or patented good or service

Sole manufacturer AND distributor

Sole provider of factory-authorized/warranty service

Sole provider of items that are compatible with existing equipment, systems, programs, etc.

Other

Business Need* Describe the Agency's business need for the requested property

Idaho State Police Forensic Services (ISPFS) requires specialized software to acquire, preserve, &analyze digital evidence from computers & storage devices without altering original data. X-Ways Forensics supports criminal investigations, efficient evidence examination, and independent verification.

This field has a 300 character limit

Description* Describe what makes the identified property unique. Why is it the only property that could meet your business need?

X-Ways Forensics is a proprietary digital forensic software application developed and manufactured exclusively by X-Ways Software Technology AG. The software provides specialized capabilities for acquiring, preserving, examining, and analyzing digital evidence from computers, hard drives, and other electronic storage media. Its combination of advanced forensic analysis tools, efficient processing, portability, and compatibility with existing laboratory procedures makes it an essential component of the Idaho State Police Forensic Services (ISPFS) Digital Forensic Unit (DFU).

**Proprietary Software and Specialized Forensic Capabilities**

X-Ways Forensics allows examiners to perform complete forensic acquisitions of computer storage devices while preserving the integrity of the original evidence. The software captures data without altering the original source, supporting the accuracy and reliability necessary for criminal investigations and courtroom proceedings.

The software provides extensive forensic examination capabilities, including:

- Recovery and analysis of deleted files and data.

- Advanced keyword, text, and hash-based searches.

- File system analysis, partition recovery, and file signature identification.

- Identification of file extension mismatches and hidden or disguised data.

- Windows registry analysis and examination of connected devices and network activity.

- Parsing of complex file structures, databases, and other digital artifacts.

- Recognition of encrypted volumes, including BitLocker.

- Analysis of multiple digital devices to identify relationships and patterns.

- Examination of certain types of cellular device data extracted through other forensic tools.

These capabilities allow examiners to process substantial volumes of digital evidence efficiently and identify information that may otherwise require extensive manual examination.

**Efficient Processing and Portability**

One of the distinguishing characteristics of X-Ways Forensics is its ability to perform advanced forensic examinations while requiring relatively minimal computer resources. Unlike some competing applications, X-Ways does not require a complex database configuration or extensive hardware resources to operate effectively.

The software is also portable and can operate directly from a USB storage device on compatible Windows computers without requiring a traditional installation. This provides flexibility when conducting forensic examinations on different workstations and reduces the administrative and technical requirements associated with software deployment.

X-Ways Software Technology AG identifies these features, along with efficient processing speeds and advanced deleted-file recovery capabilities, as distinguishing characteristics of its software.

**Compatibility with Existing Laboratory Operations**

X-Ways Forensics is currently utilized by ISPFS and has undergone laboratory performance verification testing. The software is approved for forensic examinations within the DFU, and examiners have completed specialized training and certification associated with its operation.

ISPFS maintains two X-Ways Forensics licenses and uses the software as part of its established digital evidence examination procedures.

Forensic software must be evaluated to ensure that it produces accurate, reliable, and repeatable results. ISPFS conducts performance verification testing using known reference data and compares results across different forensic applications. This process can take up to a week for each software product.

Replacing X-Ways would require the laboratory to purchase and implement alternative software, complete additional performance verification testing, and provide specialized training and certification to examiners before the replacement could be approved for operational use.

**Complementary Use with Other Forensic Software**

ISPFS currently utilizes Magnet AXIOM alongside X-Ways Forensics. Although both products provide computer forensic acquisition and analysis capabilities, they offer different examination tools and methods for interpreting digital evidence.

X-Ways is particularly valuable for its advanced file system analysis, efficient processing, recovery of deleted information, and ability to examine raw digital data. Magnet AXIOM provides additional capabilities for analyzing and correlating evidence across computers, mobile devices, and other digital storage media.

Maintaining both applications allows DFU examiners to independently verify forensic findings using different software tools. This is important because forensic applications may interpret or recover certain types of data differently. Using multiple tools supports the laboratory's ability to confirm results and maintain confidence in the accuracy of digital evidence presented during criminal proceedings.

For this reason, Magnet AXIOM is not considered a complete replacement for X-Ways Forensics. Rather, the two products serve complementary purposes within the laboratory's existing forensic examination processes.

**Existing Investment in Examiner Training and Certification**

ISPFS has invested substantial resources in training and certifying DFU examiners to use X-Ways Forensics. These certifications are specific to the software and cannot be transferred to competing forensic applications.

According to the laboratory's software justification, specialized forensic training courses can cost thousands of dollars per examiner, excluding associated travel, lodging, and personnel expenses. The identified training cost for X-Ways Forensics is approximately $2,200 per course.

Transitioning to alternative software would require additional expenditures for training, certification, software licensing, and laboratory performance verification. These expenses would be incurred without necessarily providing additional capabilities beyond those already available through the laboratory's existing forensic software.

**Sole Manufacturer and Proprietary Licensing**

X-Ways Software Technology AG has provided a sole source letter dated October 30, 2026, confirming that it is the sole manufacturer and provider of X-Ways Forensics and its software updates. The company also confirms that training is provided exclusively by X-Ways or its authorized instructors.

The software is protected by proprietary licensing restrictions, and competing manufacturers cannot provide the identical X-Ways Forensics application or independently develop and distribute its proprietary updates.

Although licenses may be available through resellers, the underlying software and its updates originate exclusively from X-Ways Software Technology AG.

**Conclusion**

While other digital forensic software products are commercially available, ISPFS has determined that X-Ways Forensics provides a combination of specialized examination capabilities, processing efficiency, portability, and established laboratory functionality that is not fully replicated by the alternatives evaluated.

The software is already performance-verified, examiners are trained and certified in its use, and it serves an important role in independently verifying findings obtained through other forensic applications.

Replacing X-Ways Forensics would introduce additional licensing, training, and verification costs while potentially reducing the laboratory's examination flexibility and ability to independently confirm forensic findings.

For these reasons, ISPFS is requesting a sole source exemption for the continued licensing of X-Ways Forensics to maintain established digital forensic examination capabilities and support criminal investigations throughout Idaho.

Alternatives*

Describe the research you conducted to identify other potential property/sources. What potential alternatives did you find and why will they not meet the Agency's business needs?

Idaho State Police Forensic Services (ISPFS) evaluated alternative computer forensic software applications to determine whether other products could meet the operational requirements of its Digital Forensic Unit (DFU). The evaluation considered forensic data acquisition capabilities, advanced file system analysis, deleted data recovery, processing efficiency, compatibility with existing laboratory procedures, examiner training requirements, and the costs associated with implementing alternative software.

ISPFS currently utilizes X-Ways Forensics as one of its primary computer forensic examination tools. The software has undergone laboratory performance verification testing, is approved for use in forensic examinations, and is operated by trained and certified DFU examiners.

The following alternatives were identified and evaluated:

**1. Magnet AXIOM**

Magnet AXIOM is currently utilized by ISPFS and is considered an industry-standard digital forensic examination application. The laboratory maintains two licenses at an estimated annual cost of $5,750 per license, with associated training costing approximately $3,900 per course.

Like X-Ways, AXIOM can perform forensic acquisitions and analyze evidence from computers and other digital storage devices. AXIOM also provides integrated capabilities for examining mobile device data and correlating information across multiple devices.

Although AXIOM offers substantial forensic examination capabilities, it does not eliminate the need for X-Ways. Each application provides different methods for examining, recovering, and interpreting digital evidence. X-Ways offers advanced file system analysis, efficient processing, and specialized tools for examining raw digital data.

ISPFS utilizes both products to provide complementary examination capabilities and independently verify forensic findings. Maintaining multiple forensic applications is important because different tools may identify or interpret certain types of evidence differently.

Replacing X-Ways with AXIOM alone would reduce the laboratory's available examination methods and eliminate an established tool used for independent verification.

**2. Belkasoft X Computer**

Belkasoft X Computer provides forensic acquisition and analysis capabilities for computers and digital storage devices. The laboratory identified an estimated annual licensing cost of $1,200, with associated training costing approximately $1,000 per course.

Although Belkasoft offers comparable computer data acquisition capabilities, ISPFS's evaluation identified limitations in its depth and flexibility of forensic analysis compared to X-Ways. The evaluated computer-focused product would also require additional software licensing to provide the cellular data analysis capabilities available through the laboratory's existing tools.

Implementing Belkasoft would require DFU examiners to complete additional training and certification, and the software would need to undergo laboratory performance verification before being approved for operational use.

Based on these considerations, Belkasoft was not identified as a suitable replacement for the comprehensive examination capabilities currently provided by X-Ways.

**3. Detego Field Triage Computer**

Detego Field Triage Computer provides computer forensic acquisition and examination capabilities. The laboratory identified an estimated annual licensing cost of $1,200, with associated training costing approximately $1,000 per course.

Although Detego offers forensic data extraction capabilities, ISPFS's evaluation identified limitations in its analytical functionality compared to X-Ways. Detego is primarily designed to support forensic triage and evidence identification rather than replace the full range of detailed examination tools currently utilized through X-Ways.

The evaluated product would also require additional software for certain cellular data examinations.

Implementation would require additional licensing, examiner training and certification, and laboratory performance verification. ISPFS determined that Detego would not provide an equivalent replacement for X-Ways within its established forensic examination processes.

**4. FTK (Forensic Toolkit)**

FTK is a commercially available computer forensic application that provides data acquisition, processing, and analysis capabilities. The laboratory identified an estimated annual licensing cost of $5,175, with access to a training catalog costing approximately $3,450 annually.

Although FTK provides many standard computer forensic functions, ISPFS's evaluation determined that its analytical capabilities did not offer sufficient advantages over X-Ways to justify replacing the existing software.

FTK would also require additional software for certain cellular device examinations, along with examiner training, certification, and laboratory performance verification.

The estimated annual licensing cost of FTK is substantially higher than the current cost of X-Ways. Replacing X-Ways with FTK would therefore increase software expenditures while introducing additional implementation costs and potentially reducing examination efficiency.

**5. OpenText EnCase**

OpenText EnCase is an established computer forensic application that provides data acquisition and analysis capabilities. The laboratory identified an estimated annual licensing cost of $4,000, with associated training costing approximately $3,000 per course.

ISPFS previously utilized EnCase extensively within its forensic operations. However, based on the laboratory's experience, DFU determined that EnCase had become less effective for its casework requirements and transitioned to other forensic solutions.

Returning to EnCase would require additional software licensing, examiner training and certification, and laboratory performance verification. The evaluated product would also require separate software for certain cellular device examinations.

Given the laboratory's prior experience and the capabilities currently available through X-Ways, ISPFS determined that returning to EnCase would not provide sufficient operational benefits to justify replacing the existing software.

**6. GetData Forensic Explorer (FEX)**

GetData Forensic Explorer provides computer forensic acquisition and analysis capabilities. The laboratory identified an estimated annual licensing cost of $2,695, with associated training costing approximately $3,500 per course.

Unlike several alternatives evaluated primarily through available product information and industry comparisons, ISPFS has direct experience with FEX. A DFU examiner utilized a full-license trial of the software during a competency test to evaluate its forensic examination capabilities.

Based on this evaluation, ISPFS determined that FEX's analytical tools were less effective than those available through X-Ways and Magnet

AXIOM.

FEX also does not provide a dedicated cellular device examination module, limiting its ability to support the laboratory's broader digital forensic examination requirements.

Implementing FEX would require additional examiner training and certification, laboratory performance verification, and potentially supplemental software licenses.

Based on the laboratory's direct evaluation, FEX was not considered a suitable replacement for X-Ways.

**7. Operational and Financial Considerations**

In addition to comparing software capabilities, ISPFS considered the financial and operational consequences of replacing X-Ways Forensics.

The laboratory currently maintains two X-Ways licenses at an estimated annual cost of $1,550 per license, totaling approximately $3,100 annually. Compared with several alternatives evaluated, X-Ways provides extensive forensic examination capabilities at a relatively low licensing cost.

X-Ways is also designed to operate efficiently without requiring extensive hardware resources or complex database configurations. Its portability allows examiners to operate the software from compatible Windows systems without requiring a traditional installation.

These characteristics support efficient forensic examinations and reduce the technical resources necessary to operate the software.

Additionally, X-Ways has already undergone laboratory performance verification testing and is approved for use by ISPFS. DFU examiners have completed specialized training and certification associated with the software.

Replacing X-Ways would require the laboratory to purchase alternative software, provide additional examiner training and certification, and complete new performance verification testing before implementation.

Laboratory performance verification testing can take up to a week, and specialized forensic training can cost thousands of dollars per examiner, excluding travel, lodging, and personnel expenses. These additional expenditures would be incurred without a demonstrated improvement in the laboratory's existing forensic capabilities.

**8. Sole Source and Availability of the Requested Software**

X-Ways Software Technology AG provided a sole source letter dated October 30, 2026, confirming that it is the sole manufacturer and provider of X-Ways Forensics and its software updates.

Although X-Ways licenses may be purchased through resellers, the underlying software is proprietary and cannot be manufactured, modified, or independently updated by competing software developers.

The company's End User License Agreement establishes restrictions on modification, reverse engineering, and redistribution of the software.

Accordingly, other forensic software manufacturers cannot provide the identical X-Ways Forensics product or its proprietary functionality.

The requested exemption is intended to authorize continued licensing of X-Ways Forensics based on its established operational use and specialized capabilities. It is not based on an assertion that no other computer forensic software exists.

**9. Conclusion**

ISPFS identified and evaluated several commercially available alternatives to X-Ways Forensics, including Magnet AXIOM, Belkasoft X Computer, Detego Field Triage Computer, FTK, OpenText EnCase, and GetData Forensic Explorer.

While these applications provide various computer forensic capabilities, ISPFS has not identified an alternative that would fully replace the combination of advanced analysis tools, processing efficiency, portability, cost-effectiveness, and complementary examination functionality currently provided by X-Ways.

The laboratory also relies on X-Ways alongside Magnet AXIOM to independently verify forensic findings and maintain multiple methods of examining digital evidence. Eliminating X-Ways would reduce this examination flexibility and require additional expenditures for replacement software, examiner training, and laboratory verification.

Based on its evaluation of available alternatives, existing investments, and operational requirements, ISPFS determined that continued licensing of X-Ways Forensics is the most practical and cost-effective option for maintaining its current digital forensic examination capabilities.

For these reasons, ISPFS is requesting a sole source exemption for X-Ways Forensics to support the continued acquisition, examination, and analysis of digital evidence used in criminal investigations throughout Idaho.

File Upload and Certification

Notes

File Upload program specific sole source X-Ways.docx 24.41KB

X-Ways EULA.pdf 377.55KB

X-Ways sole source letter.pdf 96.8KB

Maximum File Size 250 MB

Agency Certification*

By submitting this form, I certify that the information provided above is true and accurate to the best of my knowledge, supports the requirement for a sole source procurement, and is in the best interest of the State.

Signature* Date Submitted* 2026-11-03

Approval - SSA

Administrator Intends to approve*

Yes No

(Pending legal notice and appeal period)

Optional Posting?* This exemption will be sent for posting before final approval.

Yes No

Notes Public View

This field has a 300 character limit

File Upload

Maximum File Size 250 MB

DOP Signature*

DOP Printed Name* Mike Gwinn

DOP Title* Deputy Administrator

Date Time 2026-11-03