Fast, Accurate Forensic Triage Software for Law Enforcement
Streamline your investigative workflow. Instantly flag what needs attention, clear what doesn't, and expose visual connections across millions of files — so investigators can focus on what genuinely requires their expertise, inside the forensic tools they already use.
The growing challenge of video
in forensic investigations.
Seized devices routinely contain terabytes of images and video — far too much for manual review to handle effectively. As video has become the dominant medium for sharing content, the volume of footage is growing faster than existing investigative workflows can effectively keep pace with.
Video is where the challenge is most acute. A single seized device can contain thousands of hours of footage, often with the same content frequently appearing hundreds of times across multiple devices in slightly different forms. Since cryptographic hashing is exact-match only and any minor change breaks the match, and traditional perceptual hashing methods do not scale and have limited applicability for videos, investigators are left to manually review vast volumes of video evidence with limited automated assistance.
The challenge deepens further when offenders use evasion techniques specifically designed to defeat detection:
Picture-in-picture
Illegal content embedded within innocent-looking video
Clip injection
Short illegal segments dispersed across longer videos
Visual manipulation
Speed, colour, and aspect changes that defeat matching
Re-encoding
Format conversion that breaks cryptographic hashing
What is Nexus LE?
As a digital forensic triage tool, it is the layer that runs before investigation begins.
Across every case, Nexus LE delivers three core capabilities:
Database matching
Automatically flags known illegal content and clears known non-harmful content against your visual fingerprint databases
Duplicate detection
Identifies and groups visually duplicated media across all case files, so no content is ever reviewed twice
Similarity clustering
Detects and clusters all visually related media within the case, surfacing connections that would be impossible to find manually
Agencies can import external databases from industry sources from day one, build their own from cases they process, or both — covering both blacklisted (known illegal) and whitelisted (known non-harmful) content, creating an institutional asset that makes every subsequent investigation faster.
Nexus LE integrates into existing forensic workflows, exporting results directly into the tools your team already uses — giving investigators a smaller, better-organised, and fully prioritised evidence set.
How to use Nexus LE.
Why agencies choose Nexus LE.
Agencies choose Nexus LE to help their investigative teams meet the challenge posed by the rapidly growing volume of video and image evidence in forensic investigations — streamlining workflows, building institutional knowledge, and delivering more accurate results faster.
Traditional cryptographic hashing fails the moment a video is re-encoded, clipped, compressed, or converted — any minor change breaks the match entirely. While perceptual hashing works reasonably well for images, it does not scale reliably for video.
For video evidence, existing hash-based approaches leave investigators largely without effective automated detection.
Nexus LE's visual fingerprinting software analyses video files frame by frame — identifying matches based on what is shown, not how the file is stored — detecting known video content even after heavy modification, at the speed and scale demanded by real investigations.
| Capability | Cryptographic MD5, SHA-1, SHA-256 | Perceptual PDQ, PhotoDNA | Nexus Visual Fingerprints |
|---|---|---|---|
| Exact file match | |||
| Minor compression / resize / format change | |||
| Significant re-encoding or heavy modification | |||
| Significant cropping | |||
| Video content | |||
| Video identified from a short clip or single frame | |||
| Near-zero false positives |
- Matches video content regardless of re-encoding, clipping, speed changes, or format conversion
- Works on images and video with equal accuracy — neither treated as secondary
- Identifies related video clips that share source footage, even when heavily edited or re-exported
Before a single file is opened in a forensic investigation tool, Nexus LE runs three automated triage processes across the entire evidence set:
Every image and video is compared against your databases of known content:
Blacklist matching: Known illegal content is flagged immediately, with no manual review required.
Whitelist matching: Known legal content is automatically cleared from the review queue.
Investigators see only material that genuinely requires their attention.
The same content frequently appears dozens or hundreds of times across a case. Nexus LE groups all visual duplicates — so one review decision applies to every copy.
Nexus LE maps all visual relationships across the entire evidence set before investigation begins — giving investigators a pre-built map of connections.
The result: investigators open their forensic tool with a pre-triaged, prioritised evidence set — not terabytes of unsorted data.
Nexus LE is not a replacement for the forensic investigation platforms agencies already rely on — it is the triage layer that runs before them. It slots into existing infrastructure with no changes required, and exports results directly into the tools investigators already use.
The operational impact is immediate: less time on routine triage, more time on the work that requires genuine expertise.
- Air-gapped deployment — runs securely on isolated systems with no internet connection required
- Seamless export — results import directly into existing forensic investigation tools, including link analysis software for law enforcement, structured and ready to act on
- Senior investigator time is protected for complex judgement calls, not routine triage
- Processing time scales with new content, not total data volume — larger cases do not mean proportionally more investigator hours
- Team capacity effectively increases without any change in headcount
Every piece of content reviewed through Nexus LE can be added to the agency's own reference database — automatically identified in every future case, regardless of modification. As cases are processed, the proportion automatically resolved grows and the effective workload per case falls.
The agency's database is not a feature of the software; it is a strategic asset the agency builds and owns.
Agencies can establish database coverage from three starting points, and in practice all three run in parallel:
Import External Databases
Nexus LE supports importing blacklist and whitelist databases from industry sources and partner agencies, establishing baseline coverage from day one — before a single internal case has been processed.
Seed From Existing Cases
Agencies with a backlog of previously investigated cases can seed the database during initial deployment — immediately converting institutional knowledge already held by the team into automated detection.
Build Case by Case
Every case processed adds to the database. Investigators review unknown content, make categorisation decisions, and those decisions become permanent database entries applied automatically to every future case.
Designed for law enforcement agencies of all sizes.
Pricing and deployment options are tailored to fit different agency sizes, case volumes, and infrastructure requirements, ensuring maximum effectiveness and security regardless of operational scale.
Request a Demo
See Nexus LE in action and discover how it handles video evidence at scale
Get Pricing Information
Contact us for customised pricing based on your agency's case volume and needs
Discuss Deployment Options
Learn how Nexus LE integrates with your existing infrastructure, including air-gapped and on-premise environments