Release2026-10-13

REA is an open-source toolkit for reverse engineering. It lets agents inspect apps, binaries, and runtime behavior. It works with native binaries, JavaScript, Electron, .NET, and websites. Analysis runs locally and returns evidence with each conclusion. Setup registers REA with an agent and adds workflow instructions. It supports Claude Code, Cursor, Gemini CLI, and others. Native analysis needs Hopper, Ghidra, or IDA. Static JavaScript analysis needs no extra engine. The project is under an MIT license.

What it unlocks

Agents can now inspect app behavior down to native binaries without source code.

What you need to act on it

  • Node.js 22.x or higher
  • npm
  • Hopper, Ghidra, or IDA for native analysis

Sources

Send this to someone who needs it

Shares the story and its sources. Nothing about you.

What does this mean for your job?

This is the story as everyone gets it. Once a week we send you the version written for your role — what changed, why it matters for the work you actually do, and one thing to try. Free while we tune it.