What does REA actually do?
Reverse engineering means working out how software works from the finished program rather than its source code. Tools for this have existed for decades: IDA since the 1990s, Hopper since 2011, and Ghidra, released by the US National Security Agency in 2019. They are powerful but slow and require expert skill.
REA wraps these tools as a Model Context Protocol (MCP) server. An AI coding agent can then ask, in effect, “open this binary, find the function that exports a PDF, explain it” — and loop through decompiling, reading, writing code and testing on its own. It also inspects web and Electron apps through browser tooling, and reports cover Android, .NET, Apple app bundles and firmware.
Why did REA go viral in October 2026?
REA rose to the top of GitHub’s trending projects in early October 2026, and reports of near-identical free rebuilds of well-known desktop software made it a news story. Commentators compared it to the early days of MP3 file-sharing; critics warned that it can devalue developers’ work and that it raises intellectual-property questions. The underlying shift is real: AI agents have made reverse engineering much faster and cheaper than it was.
Is AI reverse engineering legal?
It depends on the country, the software licence and what you do with the result — this is general information, not legal advice.
| Usually lower risk | Usually higher risk |
|---|---|
| Analysing software you own or wrote, including legacy systems without source code | Copying a competitor’s product, code or interface and distributing it |
| Interoperability — making your system work with another, where the law allows it | Breaking licence terms that prohibit decompilation |
| Security research and malware analysis under proper rules | Circumventing copy protection or DRM |
In the United States, copyright, the DMCA’s anti-circumvention rules and licence agreements all apply; the fact that an AI did the work does not change who is responsible. Speak to a lawyer before reverse engineering anything you do not own.
Legitimate business uses of AI-assisted reverse engineering
- Legacy modernisation — documenting and rebuilding old in-house systems whose source code or original developers are gone.
- Integration — understanding an undocumented system you are licensed to use so a new app or AI agent can connect to it.
- Security review — checking your own software and suppliers’ components for vulnerabilities.
- Migration — extracting business rules from an old application before replacing it with custom AI software.
What does REA mean for software companies?
If features can be copied faster, the lasting advantages are the things that cannot be decompiled: your data, your customer relationships, your service and your speed of improvement. It is also a reminder to keep secrets and business logic on the server rather than inside apps users can download.
Frequently asked questions
Is REA free?
Yes. REA is open source and free to use; the analysis tools it connects to have their own licences, and AI model usage is paid to the model provider.
Does REA work with Claude Code?
Yes. It runs as an MCP server, so Claude Code and other MCP-compatible coding agents can use it.
Can REA copy any app?
It helps an agent understand and rebuild features, but results depend on the app’s complexity, and copying protected software can infringe copyright or licence terms.