Ghidra is an NSA-developed software reverse engineering framework that provides disassembly, decompilation, and analysis tools for examining compiled code across multiple platforms and processor architectures.
Checked October 2026.
Ghidra is a software reverse engineering framework developed by the National Security Agency Research Directorate that provides comprehensive analysis capabilities for compiled code across multiple platforms including Windows, macOS, and Linux.
The framework offers a complete suite of analysis tools including disassembly, assembly, decompilation, graphing, and scripting functionality. It supports a wide variety of processor instruction sets and executable formats, enabling analysts to examine different types of compiled software.
Ghidra operates in both interactive and automated modes, allowing users to perform manual analysis or integrate it into automated workflows. The platform supports extensibility through custom components and scripts written in Java or Python, enabling users to adapt the tool to specific analysis requirements.
The framework includes graphical visualization capabilities for code analysis and provides scripting interfaces for automating repetitive tasks. It was designed to address scaling and collaboration challenges in software reverse engineering efforts, particularly for analyzing malicious code and identifying potential vulnerabilities in networks and systems.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Ghidra Software Reverse Engineering Framework: features, pricing and alternatives.
Ghidra Software Reverse Engineering Framework is a product in the Malware Analysis category. It covers Reverse Engineering, Binary Analysis and Open Source.
Ghidra Software Reverse Engineering Framework is free. Download and setup instructions are at https://github.com/NationalSecurityAgency/ghidra/.
Alternatives to Ghidra Software Reverse Engineering Framework listed on CybersecTools:
Compare all Ghidra Software Reverse Engineering Framework alternatives at https://cybersectools.com/alternatives/ghidra-software-reverse-engineering-framework
Ghidra Software Reverse Engineering Framework is available as on-premises software. It is listed for mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
FLARE-VM is a Windows virtual machine setup tool that automates the installation and configuration of reverse engineering and malware analysis software using Chocolatey and Boxstarter technologies.
Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.
A set of commands for exploit developers and reverse-engineers to enhance GDB functionality.
On-premise AI file repository with continuous malware analysis and retrohunting.
Multi-engine file malware detection platform for securing business apps.
Multi-engine AI file analysis platform for malware detection via SaaS or on-prem.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
