Reverse engineering examines compiled software or hardware to understand how it works. We do authorised work only: malware and incident analysis, vulnerability research, firmware and protocol analysis, interoperability with undocumented systems, and recovering behaviour of legacy software you own when the source is lost.
Read what the machine runs.
A simplified view of analysing a function in a binary: disassembly with annotations.
Built to hold up.
Malware and incident analysis
Static and dynamic analysis of suspicious files to understand behaviour, indicators and impact.
Binary and firmware analysis
Disassembly and decompilation of native code in C and C++, Rust, .NET and Java, and extraction of firmware images.
Mobile app analysis
Security analysis of Android and iOS apps you are authorised to assess: storage, network, and code protections.
Protocol and interoperability work
Documenting undocumented protocols and file formats so systems you own can interoperate.
Legacy recovery
Re-creating specifications and behaviour for old software you own when the source or documentation is lost, as a basis for migration.
Questions we often get.
It depends on jurisdiction, licence terms and purpose. We only take work with clear authorisation and a lawful purpose, such as security research, malware analysis, interoperability, or software you own. We do not do licence cracking, piracy or evasion of protections for unlawful ends.
Have something that should run itself?
Tell us what is slowing your team down. We will come back within one working day with an honest view on whether it is worth building and what it would take.