Digital forensics / all software

In development · early access

SIMgo

Read a SIM without changing it

Get everything off a SIM in under a minute, without changing it. Put the card in any PC/SC reader and SIMgo returns its identifiers, the phone number wherever it's stored, where the SIM last registered, and its contacts, calls and messages.

SIMgo from start to finish: the card found and checked by itself, read without changing it, reviewed, a deleted SMS recovered, and the project saved with its SHA-256 and a report. SIMgo's demo SIM (made-up data), read shown sped up.

The problem it solves

A SIM is easy to damage as evidence: a wrong PIN can lock it, and general SIM tools can write to it. Most suites treat the SIM as an afterthought to the handset. SIMgo is built for a quick, safe triage of the SIM on its own, with a record of every command sent to it.

Who it's for: Digital forensic units, mobile examiners and investigators who need a SIM's identifiers and content quickly and safely.

What it does

  • Read-only by design. Only read commands reach the card reader. Anything that could change the card is refused before it's sent.
  • Safe PIN handling. Reads whether the PIN is on and how many tries are left without using one. It never guesses, and never tries a PIN when only one try is left.
  • The phone number, wherever it is. Collects every place the number might be stored, and marks the ones a user could have typed in.
  • Last known location. The location, routing and 4G tracking areas where the SIM last registered, plus forbidden and preferred networks with operator names.
  • Contacts, calls and SMS. Every phonebook, last numbers dialled, call logs, and received, sent and draft messages. Deleted messages are recovered from records the phone didn't wipe.
  • Evidential output. Each read is saved as a .simgo project with the raw bytes and SHA-256 of every file and a timestamped log of every command, with the project's own SHA-256 recorded next to it and checked again when it's opened.
  • Reports. PDF, HTML or CSV, of everything or just the sections you choose, with the case details and the project's SHA-256 on every report.

See it work

what to click, and what you get

01 · Insert the SIM

Put the SIM in the reader. SIMgo finds it by itself.

There's nothing to choose: the card is found and checked straight away, its ICCID read and whether its PIN is on, without sending a PIN or using up a try.

  1. Read this SIM the one thing to do next, in the same place every time.

02 · Read

Three case details, then one button.

Type the exhibit and case references and the examiner, and press Read SIM. Only read commands reach the card: the demo SIM's read is 38 files and 256 commands, every one logged.

  1. Exhibit reference names the files and goes on the report.
  2. Case reference and examiner the examiner is remembered for next time.
  3. Read SIM docked at the bottom of the window, Ctrl+Enter from anywhere.

03 · Review

The number, the identity and where it last registered.

The phone number comes first, then the ICCID, the IMSI and the last known area (LAC 6699 (0x1A2B)). Below them, everything about the card and subscriber, each location file, and the networks that refused the SIM while it was roaming.

  1. Phone number wherever it's stored, marked if a user could have typed it.
  2. Last known area the location and tracking areas the SIM last registered in.
  3. Forbidden networks with operator and country.

04 · Records

Contacts, calls and SMS. Deleted messages too.

Every phonebook, the call logs and the messages, in tabs. A deleted SMS the phone didn't wipe is recovered and shown in amber, and the audit log has every command sent to the card.

  1. Search numbers match however they're written: 07700 900456 and +44 7700 900456 find the same one.
  2. Audit log every command and the card's reply, with the time of each.

05 · Report

Saved with its SHA-256. A report anyone can check.

Save project writes the read as a .simgo file with the raw bytes of every file and the command log, and its SHA-256 next to it. Reports are PDF, HTML or CSV, of everything or the sections you choose.

  1. Save project the hash is checked again whenever the project is opened.
  2. Export report PDF, HTML or CSV, with the case details and the project's SHA-256 on every report.

On screen

click to enlarge
A finished read: the phone number, ICCID, IMSI and last known area, with the project saved and its SHA-256
Review: what matters most, first
Read: the card found and checked, the case details filled in and the Read SIM button docked below
Read: found, checked, ready to read
Records: the SMS tab with a recovered deleted message shown in amber
Records: a deleted SMS, recovered

At a glance

Platform
Windows 10 and 11, with any PC/SC smart card reader
Cards
UICCs (USIM / ISIM, 3G, 4G and 5G) and 2G SIMs
Outputs
Hashed .simgo project; PDF, HTML or CSV report
Works offline
Yes
Pricing
From £295, then £75 a year

Good to know

  • The phone number often isn't stored on a SIM. SIMgo shows every place it might be, but the operator holds the definitive record.
  • Location is the area the SIM last registered in, not a point. The operator can say which cells it covers.
  • Micro and nano SIMs need an adapter for most readers. SIMgo never reads authentication or ciphering keys.

SIMgo is in development

It isn't on general sale yet. Request early access to use it on your own material before release, report what works and what doesn't, and help shape the finished version. Early-access users get launch pricing locked in.

Planned pricing and licensing →

Single workstation

£295

then £75 a year from year two

Unit licence

£1,200

then £300 a year from year two

Planned launch prices, excluding VAT. A unit licence covers every workstation in one force's forensic unit.

  • Try it before release on your own material
  • Download link and licence key emailed once approved
  • Direct line to the developer for feedback
  • Launch pricing locked in for early-access users