# Ghidra

> Apache-2.0 NSA reverse-engineering suite with decompiler

**Category:** DevOps  
**Pricing:** open-source  
**URL:** https://ghidra-sre.org  
**GitHub:** https://github.com/NationalSecurityAgency/ghidra  
**Added:** 2026-10-15

---

## The Hook

Ghidra is the NSA’s software reverse-engineering framework: load a compiled binary and get disassembly, a decompiler that turns machine code back into C-like source, graphs and cross-references.

## What's Good

Apache-2.0 (NationalSecurityAgency/ghidra), release 12.1.4. Free alternative to commercial disassemblers, with a decompiler for many processor families, a debugger, collaborative project servers and a headless mode for batch analysis. Scriptable in Java or Python (PyGhidra), so it is the engine agents can drive — REA on Stack Gems uses it for native binaries. Runs on Windows, macOS and Linux. ★~88k.

## The Catch

A heavy Java desktop app — the 12.1 release needs a 64-bit JDK 21, and Python 3 for the debugger and PyGhidra. The UI is dense and the learning curve is steep. Check that you are allowed to reverse-engineer the target before you start.

## Verdict

The free standard for looking inside binaries — expect a learning curve, and pair it with an MCP bridge if your agent should help.