⚡Stack Radar

AI Coding Agents · Reviewed 16 Oct 2026

REA

REA lets coding agents reverse engineer apps, binaries, and browser behavior.

· rea.tools ↗

Paid against free › AI Coding Agents › REA

REA at a glance

SEO analysis

Collected Oct 12, 2026

rea.tools: an estimated 0 total monthly visits and about 0 monthly organic visits across 0 ranking keywords. Scout crawled 15 pages and measured a technical health score of 99/100.

0Estimated total trafficModeled monthly visits0Ranking keywordsPublic search sample99/100Technical health15 pages checked350Referring domainsLive backlink summary

Overview

01

Summary

The useful answer before the supporting detail.

REA is a tool that connects coding agents to local reverse engineering capabilities, enabling analysis of apps, binaries, and browser behavior S31. It is used by developers and security researchers who want to understand, modify, or rebuild software features with the help of AI coding agents S31. REA provides practical value by automating the inspection of JavaScript/Electron apps, native binaries, and web pages, returning source locations and module connections S1 S31.

02

Product identity and positioning

Name, category, positioning, audience, and first-party claims.

  • Identity: REA is a reverse engineering tool for coding agents S31.
  • Core purpose: It solves the problem of understanding how software works internally S31.
  • Intended users: Developers and security researchers using coding agents S1.
  • Product scope: REA is a tool that connects to coding agents via MCP, with workflows for JavaScript/Electron apps, native binaries, and browser behavior S92.
  • Positioning: REA positions itself as enabling reverse engineering with your coding agent S31.
  • Claimed distinction: REA claims to provide source locations and module connections for analyzed apps S1.
03

Use cases and audiences

Who the product serves and the jobs it is designed to handle.

AudiencePractical use case
DevelopersUnderstand how an app exports data by tracing its code and dependencies S1.
Security researchersReverse engineer native binaries to find rules or vulnerabilities S31.
Game developersRecreate game mechanics by inspecting the running game's update function S31.
QA engineersVerify behavior changes by inspecting the code behind a feature S31 S93.

Features

09

Features and capabilities

Core functions and evidence-backed product capabilities.

CapabilityWhat it does
JavaScript/Electron analysisAnalyzes application folders or ASAR archives without running the app, identifying modules, imports, IPC, and source locations S1 S92.
Native binary analysisConnects to Ghidra, IDA, or Hopper to analyze machine-code programs S1.
Browser behavior inspectionInspects web pages through a local debugging connection, returning loaded scripts and their source S31.
MCP integrationRegisters an MCP connection and installs an investigation skill for coding agents S92.
CLI commandsProvides one-off CLI commands for analysis, such as `analyze-javascript-application` S1.
Setup and diagnosticsIncludes a setup plan review and a `doctor` command to verify connections S1.
10

Integrations and ecosystem

Connected products, exports, APIs, and workflow compatibility.

Integration or interfaceTypeWhat it enables
AI modelCode, Codex, Cursor, AI modelCLI, Windsurf, Grok Build, and other MCP clientsIntegrationConnects REA to coding agents via MCP for investigation tasks S1.
GhidraIntegrationAnalyzes binaries using an existing Ghidra installation S1.
IDAIntegrationConnects to an existing IDA MCP registration for binary analysis S1.
HopperIntegrationDetects or proposes installation of Hopper for analysis S1.
MCP (Model Context Protocol)APIProvides a standard interface for coding agents to call REA tools S92.
CLIAPIOffers command-line commands for direct analysis S1.

Pricing

11

Pricing and plans

Published plans, free access, trials, credits, and pricing limitations.

Not established in the collected sources.

Competition

12

Alternative tools

Named from this report, then each website opened and checked before it is shown.

GhidraGitHub - NationalSecurityAgency/ghidra: Ghidra is a software reverse engineering (SRE) framework · GitHubLike REA, it provides advanced native binary analysis, but it is a standalone open-source suite rather than an MCP bridge for coding agents.FridaFrida • A world-class dynamic instrumentation toolkit | Observe and reprogram running programs on Windows, macOS, GNU/LiLike REA, it inspects app and browser behavior at runtime, but it focuses on dynamic instrumentation rather than static agent-driven reverse engineering.Browser DevToolsChrome for DevelopersLike REA, it inspects browser behavior and loaded scripts, but it is a manual browser interface rather than an automated tool for AI agents.

3 verified

13

Competitive landscape

Domains competing for the same organic search demand.

Sampled competitors

The economical SERP sample did not identify competing domains for rea.tools.

Website intelligence — Collected evidence

Customers, testimonials, and first-party review claims

No supporting public-page evidence was collected for this category.

Independent review sources discovered

No links to supported independent review platforms were discovered on the collected pages.

15

AI visibility

Measured ChatGPT and Google AI mentions with cited sources.

AI-assistant referral traffic

  • Estimated current generative-AI referral share: 0.0%

Scout traffic model did not return a separate AI-referral trend series for this domain.

Website intelligence — Collected evidence

Site-stated AI capabilities

No supporting public-page evidence was collected for this category.

These are first-party product claims, not independent measurements of AI-search visibility.

Website intelligence — Scout synthesis

  • First-party claim: The homepage explicitly targets coding agents, stating "REA gives your agent the tools to inspect a program and explain what it does" W4.
  • First-party claim: The site provides a copy-paste prompt for coding agents: "Install REA and connect it to this coding agent using npx rea-agents@latest setup" W9.
  • First-party claim: The Arabic version mirrors this prompt, indicating a deliberate focus on AI-agent integration across languages W34.
  • Scout inference: The product is designed to be installed and used within AI coding agents, making AI-visibility a core part of its value proposition.
16

Marketing opportunities

Actions calculated directly from the collected evidence.

The current datasets did not produce a high-confidence, evidence-backed opportunity. Re-run after new rankings, links, or first-party analytics become available.

Website intelligence — Collected evidence

Website evidence gaps

  • pricing: no usable public page was collected; verify whether the site publishes this evidence.
  • features: no usable public page was collected; verify whether the site publishes this evidence.
  • integrations: no usable public page was collected; verify whether the site publishes this evidence.
  • customers: no usable public page was collected; verify whether the site publishes this evidence.
  • reviews: no usable public page was collected; verify whether the site publishes this evidence.
  • changes: no usable public page was collected; verify whether the site publishes this evidence.
  • identity: no usable public page was collected; verify whether the site publishes this evidence.
  • technical: no usable public page was collected; verify whether the site publishes this evidence.

Website intelligence — Scout synthesis

  • First-party claim: The homepage includes a call-to-action to "See how REA works" and links to a setup guide and showcases W5.
  • First-party claim: The site offers a blog for deeper content, suggesting potential for content marketing around reverse engineering topics W7.
  • First-party claim: The Arabic version indicates an opportunity to target Arabic-speaking developers, a potentially underserved market W25.
  • Scout inference: The presence of a Discord server and X (Twitter) account (linked from the homepage) suggests community-building as a marketing channel W2.

Trust and proof

17

Customers, proof, and reviews

Published proof, customer signals, and review evidence.

Independent reviews

No citation-grounded independent review links were found.

Customer proof

No named customers, testimonials, or customer case studies were found.

Independent mentions

  • What Is REA? Reverse Engineer Apps With AI Agents — as `rea-agents`, that gives coding agents reverse-engineering abilities. The morluto/rea README calls it “one MCP for reverse engineering across binaries, applications, and runtime behavior.” It is MIT-licensed and free; you pay only for the agent’s
  • morluto/rea — See a feature in an app that you want in your own product? Ask your agent to investigate it with REA. It can inspect the app without its source code, explain how the feature works, show the evidence, and build a version for your project. ... REA connects your agent to tools for inspecting native binaries, JavaScript and Electron apps, .NET assemblies, and websites. You can also use the same tools from your terminal. Analysis runs locally, and results include the evidence and limitations behind e
  • REA — Reverse Engineering for Your Coding Agent — 11.2508.4 ... . The readable summary uses names from Microsoft’s public source to explain the ... Percentage implementation · Microsoft’s test cases · Native setup guide › Use REA to inspect https://rea.tools/. Clone this website for me.
  • Install REA and Set Up Your Coding Agent — to your coding ... . Client choices ... , and other supported MCP ... ## Set up native analysis Native binaries need a local analysis tool. Choose and configure one below, then give REA your executable or library. ... Linux and macOS
  • Reverse Engineering Guides — REA — Reverse Engineering Guides — REA # REA guides. Analyze a native function, an Electron export or a browser request. Each guide includes a prompt, code and results. ## Set up REA Connect your coding agent or use REA from the terminal.
  • REA FAQ: Setup, Updates and Troubleshooting — 's MCP ... and installs the ... guide for prerequisites and your first ... that supports local MCP
  • Your First Reverse Engineering Investigation — REA — rea.tools/examples/notes-example.zip into a new example folder and unpack it. Use REA to find what happens when I click Export notes. Show where notes.csv is written, which fields it contains, and the relevant files and lines. Your agent downloads
  • Get started — REA — Connect REA to your coding agent, or inspect a local app from your terminal. ... 11+) or ... Native binaries need a local analysis tool. Choose and configure one below, then give REA your executable or library. Choose a tool: Ghidra, Hopper or IDA

External links were grounded in one live web search. Search snippets are leads, not independently scraped page content; rejected links remain available in Review evidence.

18

Company, security, and trust

Ownership, policies, security signals, and public trust evidence.

SignalFindingSource
Company and ownershipNot published on the collected pages.—
Contact and supportNot published on the collected pages.—
Legal and privacyNot published on the collected pages.—
Security and complianceNot published on the collected pages.—
ReliabilityNot published on the collected pages.—
Domain registered2026-10-08—
Domain expires2027-10-08—

Not published in the collected sources: company and ownership, contact and support, legal and privacy, security and compliance, reliability. Absence here means the site does not state it publicly, not that it is false.

19

Documentation and product updates

Help resources, product guidance, and visible changes over time.

Resource or updateTypeWhat is availableDate or freshness
Product FAQFAQAnswers common product, workflow, pricing, privacy, ownership, API, and team questions. (source)Not dated
Reverse Engineering Guides — REAGuideLearn REA through short worked examples: a native calculation, an Electron CSV export and a browser request. (source)Not dated

Not found in the collected public sources: public roadmap, changelog or release notes, status page, separate help center or knowledge base.

Technical

20

Technical and delivery signals

Delivery model, platforms, API, data ownership, reliability claims and release activity.

SignalFindingSource
Delivery model (cloud, self-hosted, desktop, browser extension)REA runs locally and analyzes targets on the user's machine S92.S92
Platforms and appsSupports macOS, Linux, and Windows; Windows x64 has experimental read-only support for native PE applications S1.S1
API and extensibility (API, SDK, webhooks, MCP, plugins)Provides an MCP server and CLI commands S92 S1.S92
Data ownership and exportNot published on the collected pages.—
Performance and reliability claimsNot published on the collected pages.—
Release activityNot published on the collected pages.—
21

Measured infrastructure

Domain, certificate, and hosting signals, measured directly.

SignalFinding
Domain registered2026-10-08 — GoDaddy.com, LLC
Domain expires2027-10-08
TLS certificateGoogle Trust Services, valid, expires 2027-01-06
Security headersnone served
Headers not servedHSTS, CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy
Server headercloudflare
Nameserverskanye.ns.cloudflare.com, lorna.ns.cloudflare.com

Not measurable: wayback: wayback timed out; wayback: wayback timed out; wayback: ladder budget spent after 2 probe(s); rdap: exceeded the overall budget; wayback: exceeded the overall budget; tls: exceeded the overall budget; dns: exceeded the overall budget; headers: exceeded the overall budget. A gap here means the lookup was unavailable, not that the finding is negative.

22

Technical site audit

A bounded multi-page crawl with page-level issues and URLs.

Scout — Bounded technical crawl

  • Pages crawled: 15 of 15 maximum
  • Technical health: 99/100
  • Critical issues: 0
  • Warnings: 0
  • Notices: 5

Issues

SeverityIssueValueAffected URL
noticeLow visible word count102https://rea.tools/blog/
noticeMeta description length should be reviewed45https://rea.tools/zh-CN/
noticeMeta description length should be reviewed48https://rea.tools/zh-TW/
noticeMeta description length should be reviewed173https://rea.tools/ru/
noticeMeta description length should be reviewed176https://rea.tools/de/

Crawled pages

StatusTitleH1sWordsResponseURL
200REA — Reverse Engineering for Your Coding Agent1166845 mshttps://rea.tools/
200Reverse Engineering Case Studies — REA137139 mshttps://rea.tools/showcase/
200REA Blog — Thoughts on Reverse Engineering110226 mshttps://rea.tools/blog/
200Install REA and Set Up Your Coding Agent1148740 mshttps://rea.tools/get-started/
200Reverse Engineering Guides — REA122636 mshttps://rea.tools/guides/
200REA FAQ: Setup, Updates and Troubleshooting190428 mshttps://rea.tools/faq/
200REA — 和编程助手一起做逆向工程180213 mshttps://rea.tools/zh-CN/
200REA — 和程式設計助手一起做逆向工程180229 mshttps://rea.tools/zh-TW/
200REA-コーディングエージェントのリバースエンジニアリング163019 mshttps://rea.tools/ja/
200REA -코딩 에이전트를 위한 리버스 엔지니어링1138115 mshttps://rea.tools/ko/
200REA - Kodlama Aracınız için Tersine Mühendislik1152722 mshttps://rea.tools/tr/
200REA — Реверс-инжиниринг для Вашего программиста1162718 mshttps://rea.tools/ru/
200REA-Kỹ Thuật Đảo ngược Cho Đại Lý Mã Hóa Của Bạn1228225 mshttps://rea.tools/vi/
200REA-วิศวกรรมย้อนกลับสำหรับตัวแทนการเข้ารหัสของคุณ172849 mshttps://rea.tools/th/
200REA - Reverse Engineering für Ihr Codiermittel1176427 mshttps://rea.tools/de/

This is a bounded Scout crawl. Core Web Vitals and Lighthouse scores are not claimed unless a dedicated performance audit is connected.

23

Search Console and Analytics

First-party search and behavioral data connection state.

Modeled acquisition channels

ChannelEstimated share
direct0.0%
search0.0%
search organic0.0%
search paid0.0%
social0.0%
social organic0.0%
social paid0.0%
referrals0.0%
paid referrals0.0%
mail0.0%
gen ai0.0%
affiliate0.0%
other0.0%

First-party connections

IntegrationStatusData available after connection
Google Search ConsoleNot connectedClicks, impressions, CTR, average position, queries, pages, countries, and devices
Google AnalyticsNot connectedOrganic sessions, engagement, landing pages, conversions, geography, and devices

No first-party Search Console or Analytics numbers are shown until the site owner authorizes the corresponding Google account. Scout traffic model values above are modeled estimates, not private analytics totals.

Limits and method

24

Limitations and open questions

Known constraints and missing evidence from the collected pages.

The collected sources do not mention any alternative products. Evidence gaps include lack of pricing, customer reviews, company details, and security certifications. Open questions remain about the product's business model and long-term support.

25

Sources, method, and limitations

Evidence inventory, collection method, provider use, and constraints.

This report is based on 15 collected pages from rea.tools, including the homepage, setup guide, FAQ, first-investigation tutorial, and localized versions. Static and browser rendering rendering were used; external proof search was attempted but no verification requests were made. The evidence catalog contains 180 entries, but many are duplicates or localized variants. Limitations include the absence of pricing, reviews, and company information on the collected pages.

Paid against free, in your inbox

One job at a time: the paid tools worth paying for, the free ones you can run yourself, and who should pick which.

No tracking pixels. One click to leave. We use your address to send Stack Radar and nothing else. Privacy.