Pricing

Built for the community. Scaled for teams.

The collector is free and open source. Upgrade for full artifact coverage, priority support, and enterprise deployment.

Free for the community, scalable for teams.

The collector is open source and free forever. Pro tiers add full artifact coverage, priority support, and enterprise deployment.

Community

Open-source collector for individual use

Free

  • Shell history collection
  • Safari browser artifacts
  • Evidence container with hashing
  • Chain of custody logging
  • Community support
Download

Professional

Full artifact coverage for teams

Coming soon

  • All Community features
  • Chrome, Firefox, Edge browsers
  • Unified Logs (tracev3)
  • FSEvents journal parsing
  • Spotlight metadata
  • Priority email support
Get notified

Enterprise

For large teams and MSSPs

Coming soon

  • All Professional features
  • Keychain metadata
  • Custom plugin development
  • On-premises deployment
  • Dedicated support channel
  • SLA guarantees
Contact us

Frequently asked questions

Can't find what you're looking for? Open a discussion on GitHub or reach out to our team.

    • Is the Collector really free?

      Yes! The macfor Collector is open-source under the MIT license. You can use it for personal or commercial purposes at no cost.

    • When will Professional and Enterprise be available?

      We're working on Pro and Enterprise tiers now. Get in touch via the contact form and we'll let you know the moment they're ready, including early-access pricing for waitlist sign-ups.

    • What's included in support?

      Community tier includes community support via GitHub Discussions. Professional and Enterprise will include priority email and dedicated support channels respectively.

    • Do you offer discounts for non-profits or education?

      Yes, we plan to offer 50% off for qualified non-profits and educational institutions when paid tiers launch. Contact us to be notified.

    • What happens to my data if I downgrade?

      Your collected evidence remains yours. The collector and evidence format are open-source, so you can always access your data.