Open source alternative to RevEng.AI and Binary Ninja Sidekick
Last verified
Analyze any binary, Electron app, or .NET assembly with AI agent tools; connects Hopper, Ghidra, or IDA Pro to Claude, Cursor, and other coding agents.
REA connects Ghidra or Hopper to Claude Code or Cursor so a researcher can ask the agent to locate a function, explain its behavior, and annotate it in natural language. Evidence files record the findings with their provenance for later reference or team sharing.
If your analysis workflow lives entirely in a GUI disassembler and you have no need to involve a coding agent, REA adds little beyond what the disassembler already provides.
The investigation model (decompile, understand, recreate) targets the specific workflow of understanding how a feature works in a shipped app and building a version for your own project. REA handles JavaScript and Electron apps without any external engine, so the barrier to starting is low.
If the app you are investigating is open source or exposes a public API that covers the feature you need, direct reading or API use is simpler than reverse engineering.
REA's GitHub topics include 'ctf' and its tool catalog covers operations most relevant to capture-the-flag binary challenges: decompilation, function inspection, memory region analysis, and string extraction. The agent handles traversal while the competitor focuses on the problem.
Time-constrained CTF formats where setup overhead matters may be better served by running CLI tools directly rather than configuring agent integration.
Firmware region inspection and explicit extraction use Binwalk and Unblob on Linux. REA structures the output with inline evidence, which helps document findings without manually correlating tool outputs across multiple runs.
Requires a separately installed Binwalk and Unblob on a supported Linux host. Windows firmware analysis is not supported.
Reverse engineering shipped software is slow and fragmented. A developer who wants to understand how a feature works in a competitor's app must open a decompiler, read pseudocode, take notes, and then relay those findings to a language model in a separate window. The back-and-forth between tool and chat adds friction to every investigation.
Commercial AI-assisted RE services exist, but they come with trade-offs that rule them out for many workflows: binaries go to an external server, costs scale with usage, and the analysis pipeline is opaque. Proprietary binaries, regulated software, and anything under NDA cannot realistically be sent off-premises for analysis. Teams that face these constraints currently either skip AI assistance or maintain fragile manual extraction scripts.
Registers with Claude Code, Cursor, Codex, Gemini CLI, Windsurf, GitHub Copilot CLI, VS Code, and others through a single `npx rea-agents setup` command. Setup shows its exact path changes before applying them and backs up existing configuration before modifying it.
Analyzes JavaScript application directories and ASAR packages without executing the application, without Hopper, and without Ghidra. A single `rea analyze /path/to/app.asar --json` returns the recovered dependency graph, inline evidence, limitations, and unknowns.
Connects an existing Hopper or Ghidra installation to your agent. Ghidra 12.1.4 with a 64-bit JDK 21 exposes inventory, function, memory, and load-image inspection, plus atomic function annotation edits on Linux and macOS. IDA Pro integrates through an existing mrexodia/ida-pro-mcp registration.
Runs static APK analysis through a separately supplied headless JADX JAR and Java, with no emulator required and no APK execution. Covers structure, class hierarchy, and code paths from the decompiled output.
Saves successful analysis results to a snapshot file keyed by target bytes, operation, parameters, analysis tool, and settings. Later queries that match exactly are answered from the snapshot without relaunching the analysis engine, saving time on repeated investigations.
Every analysis result includes the evidence and limitations behind each conclusion. The `rea compare` command validates and diffs two Evidence bundles; `rea evidence-export` produces a canonical JSON for archiving or sharing findings without the original binary.
RevEng.AI is a cloud-based reverse engineering service that analyzes binaries through a managed API. REA is a local MCP server that connects your coding agent to analysis engines running on your own machine.
| Feature | REA | RevEng.AI |
|---|---|---|
| License | MIT | Proprietary |
| Deployment | Local, binaries stay on your machine | Cloud API, binaries uploaded to the service |
| Pricing | Free | Paid subscription |
| Analysis engine | Hopper, Ghidra, or IDA Pro | Managed backend |
| Agent integration | MCP (13+ coding agents) | REST API |
REA is the better choice when binaries cannot leave your environment: proprietary software, anything under NDA, regulated applications, or internal tooling where sending binaries off-premises raises security or legal concerns. RevEng.AI is worth considering when you want a fully managed service with no local setup and no need to install or configure a disassembler.
Binary Ninja Sidekick is the AI assistant built into Binary Ninja, a commercial disassembler with paid licensing. REA is an open source MCP layer that works across Hopper, Ghidra, and IDA Pro and surfaces results inside the coding agents you already use.
| Feature | REA | Binary Ninja Sidekick |
|---|---|---|
| License | MIT | Proprietary (requires Binary Ninja) |
| Analysis engine | Hopper, Ghidra, IDA Pro | Binary Ninja (required) |
| Agent integration | Claude Code, Cursor, Codex, and 10+ others | Binary Ninja native interface |
| Cost | Free | Requires Binary Ninja license |
| Local analysis | Yes | Yes |
REA is worth choosing if you already use Ghidra or IDA Pro, or if you want reverse engineering results surfaced inside Claude Code or Cursor rather than inside a dedicated disassembler window. Binary Ninja Sidekick is the better choice when you are already a Binary Ninja user and want AI assistance directly in that environment without changing your existing workflow.
Install REA with npm to connect it to your coding agents and analysis tools.
```bash
npx rea-agents setup
```Hopper has a paid license but supports a demo mode with vendor-defined limits, which REA can use for analysis. Ghidra is free and open source. IDA Pro is a paid commercial tool. For JavaScript, Electron, and ASAR analysis, REA needs no disassembler at all and only requires Node.js.
REA supports Claude Code, Claude Desktop, Codex, Cursor, Gemini CLI, Windsurf, Devin, OpenCode, Antigravity, GitHub Copilot CLI, Command Code, and VS Code. Other agents with MCP support can use a manual MCP configuration. Existing REA registrations are selected by default during setup; other detected agents stay unselected until you choose them.
No. REA analyzes binaries locally on your machine. The MCP server runs locally, and analysis results never leave your host unless you export them yourself. This makes REA usable with proprietary software, NDA-bound binaries, and regulated applications.
Binary Ninja Sidekick is an AI assistant embedded in Binary Ninja, a paid commercial disassembler. REA is MIT-licensed and works with multiple analysis engines (Hopper, Ghidra, IDA Pro) through the coding agents you already use, rather than inside a dedicated disassembler GUI. REA does not include a built-in disassembler.
Yes, through a separately supplied headless JADX JAR and Java. REA does not require an emulator or execute the APK. Coverage includes class hierarchy and decompiled code paths. See the Android analysis documentation in the repository for setup details and supported operations.
Alternative to
RevEng.AI
AI skill router for reverse engineering and penetration testing
Alternative to
Zenity
Self-hosted AI agent auditing across 60 trust and safety inspections.
Alternative to
Portkey
Open-source AI gateway with 23+ providers, failover, and MCP support.
Read-only Windows diagnostics with a local AI assistant.
Alternative to
E2B
Sandboxed runtime for autonomous AI agents, open source by NVIDIA
Alternative to
JEB Decompiler
Zero-overhead Android decompiler for mobile security researchers
Featured
Alternative toClaude Managed Agents
Open-source agent deployment API. Self-host or use Omnara Cloud.
Alternative to
Grok Bot
AI teammates you own: your keys, your model, your machine.
Alternative to
Superhuman
AI email assistant that drafts replies and clears your inbox
The projects we add and every new guide. Free, unsubscribe any time.
Claude Code to 
OpenCode
Jira to 
Windshift
Notion to 
AppFlowy
Slack to 
Mattermost
Linear to 
GitLab
Wispr Flow to 
Handy
CapCut to 
Concat
Grok Bot to 
rakazo
Superhuman to 
Inbox Zero
Airtable to 
AITable
Muse to 
OpenClaw
GitHub Copilot to 
Cline
Datadog to 
Netdata
Microsoft Teams to 
Rocket.Chat
Pinecone to 
Qdrant
Zapier to 
n8n
Devin AI to 
OpenHands
Firebase to 
Supabase
1Password to 
KeePassXCConfluence to 
Docmost
Contentful to 
Strapi
Adobe Premiere Pro to 
Shotcut
ChatGPT to 
AnythingLLM
LangSmith to 
Langfuse
