Software security and source recovery services

Select a service by the artifact you have and the question you need answered. The detailed scope pages explain the difference between extraction, readable reconstruction and a native security report. Scope, pricing and delivery timing are confirmed after sample review.

Areas of investigation

The questions guide the tools.
The sample determines the scope.

Python recovery

PyArmor / PyInstaller / bytecode

Separating packaging from protection. Assessing recoverable code, resources and the information a build no longer contains.

Native binary analysis

Nuitka / Go / Rust

Following control flow, available metadata and runtime behaviour when the original source is not available.

Mobile application security

Android / iOS / runtime

Examining application artifacts and device behaviour, with a clear boundary between app-side and server-side findings.

Technical scope

Platforms and formats I assess.
Feasibility is confirmed per sample.

PyArmor 7 Structure Analysis & Recovery

Review the supplied protection and runtime to assess which components can be reconstructed as readable Python.

Agreed Recovery Output & Analysis Report

PyArmor 8/9 Security Audit & Recovery

Assess the supplied PyArmor edition, protection settings and runtime requirements to identify what can be analyzed or reconstructed.

Agreed Recovery Output & Analysis Report

Python Packed Executables (PyInstaller)

Inspects PyInstaller, py2exe and cx_Freeze packages for embedded modules, resources and recoverable bytecode.

Extracted Artifacts & Supported Reconstruction

Nuitka C++ Compiled Executable Audit

Nuitka compiles Python through a C-based toolchain to native code. Review compiled behaviour, C-API interactions and available metadata.

Agreed Native Analysis & Technical Report

Golang Binary Security Evaluation

Go binaries may retain runtime metadata even when debug symbols are stripped. Review available type data, pclntab structures and security logic.

Available Metadata & Security Analysis Report

Rust Native Binary Analysis & Audit

Review native code, available symbols and relevant behaviour in Rust executables. Optimization and inlining can limit source-level reconstruction.

Agreed Binary Analysis & Technical Report

Android APK / AAB Deobfuscation & Reverse

Scoped review of Android APK/AAB packages, available DEX output, JNI native libraries and runtime behaviour on an agreed test device.

Agreed App Artifacts & Technical Report

iOS / IPA Binary Security Audit & Mach-O Reverse

Scoped review of supplied iOS IPA artifacts, Mach-O code, available Objective-C or Swift metadata, and device-dependent runtime behaviour.

Available Metadata & Security Report

Scope, price and timing are agreed after review. See service details