Opportunities › Reverse engineering and decompilation tools › Proposed app
Cutaway
Browser-based reverse engineering workspace with a clear decompiler view
- Score
- 40
- confidence 56
- Evidence
- 5
- items on the page
- Rivals
- 2
- named in sources
- First version
- 70 d
- estimate
- Type
- Desktop app
- PWA: runs in the browser, installs on Mac and Windows
- Market since
- 1991
- Mature market · AI estimate
ScreensConcept
Desktop app: Reverse engineers spend long sessions reading decompiled code, renaming functions, and analyzing architecture at a workstation. Sample screens on a computer, in the proposed brand. Their numbers are sample data.
Functions
Analysis done locally412
About this appAI proposal
Cutaway is a reverse engineering workspace that runs in the browser and installs as an app. Open a binary and see functions, strings and decompiled code side by side, then rename and annotate as you go. Analysis runs on your own machine, so samples stay with you unless you choose to share them.
It is for hobbyists, small security teams and malware analysts who find IDA Pro's pricing hard to justify and Ghidra slow to learn. It aims to keep Ghidra's reach to unusual processors through user-written architecture definitions, with a cleaner interface and sensible defaults.
Pricing sits between a free tier and a yearly licence, and analysis needs no cloud account. Any finding can be exported as a read-only link or report for a colleague or client.
- Tagline
- See inside the binary without paying for a seat you barely use.
- Voice
- PlainPreciseCalm
- Why this name
- A cutaway drawing shows the inside of a machine without taking it apart. That is what the tool does for compiled code. It is one plain word that is easy to say.
In the first version
Members say which features they would use. It tells PWAS what people want; it changes no score.
Linked disassembly and decompiler views
Click a line in one pane and the matching lines light up in the others. Rename a variable once and it updates everywhere.
No member yet
Custom architecture definitions
Import SLEIGH-style processor definitions to decompile rare chips, with a checker that points to the line where a definition fails.
No member yet
Local-first analysis
Binaries are parsed and decompiled on your device. Nothing is uploaded unless you publish a share link.
No member yet
Guided first hour
A short walkthrough covers loading, finding entry points, naming functions and following cross-references.
No member yet
Brand identityAI proposal
Check the name against trademark registers before using it.
Palette
#1C2420Slate Ink · text and icon background#F4F1EAPaper · surface#0F5C5ADeep Teal · primary#D9822BAmber · accent#3A4E8CIndigo Dust · data
Typography
Aa
Cutaway
ABCDEFGHIJKLMNOPQRSTUVWXYZ 0123456789
See inside the binary without paying for a seat you barely use.
PricingAI proposal
IDA Pro's pricing page (verified) lists paid plans from €299 to €8,599 a year plus a free plan. These tiers aim below its entry price and are a starting point to test. No Ghidra price applies, as it is free.
Hobby
Free
- Small binaries
- Local analysis
- Basic architectures
- Public share links
Solo
$149 a year
- All supported architectures
- Custom architecture definitions
- Annotation history
- Private share links
Team
$299 a year
- Per seat
- Shared annotation projects
- Team report templates
- Priority support
What it could be worthEstimate
What a software business making this much sells for today, from real deals. Pick a monthly revenue.
If it makes
Worth about
$194,000
Sale range $132,000 to $263,000
$120,000 a year in revenue
From 87 software businesses listed and sold on Empire Flippers in the last year, revenue vetted by the broker: they sell for about 19× their monthly revenue, most between 13× and 26×.
Measured on profit, the middle deal is 32× monthly net profit: about 2.7 years of profit.
An estimate, not an offer or financial advice. A real price depends on profit, growth, churn, how much of the work is the owner's, and the buyer.
How it would growAI proposal
How the product would reach new customers through its own use, and how the first ones would be found. A plan to test, not a result.
- Built-in loop
- Shared outputs. Researchers publish read-only function views and reports as links. Readers open them in a browser and see the Cutaway interface, with a prompt to open the same project.
- Do they become customers?
- Readers are often other researchers and could become paying users, but many are clients who only read. Test how many link viewers start a free account and how many go on to pay.
- First customers
- Independent malware analysts and small security consultancies of 1 to 5 people who work on ARM and x86 and currently use Ghidra or an old IDA licence.
- Where to reach them
- Hacker News and Reddit: Post a free browser demo with a worked malware-triage example in security and reverse engineering forums.
- Security Discord and CTF groups: Offer the free tier to CTF teams and ask for feedback on usability.
- Technical blog posts: Publish write-ups made with Cutaway, each linking to its shared read-only report.
- First milestone
- Ten paying Solo users in 90 days, from at least three consultancies or independent analysts.
Why people already pay for this
- Public claimIDA Pro's high cost makes it economically unattractive for hobbyists, especially after the shift to cloud-based subscription pricing.
- Public claimGhidra provides unique value for exotic architectures by supporting user-implemented custom architecture definitions.
- Public claimBoth IDA Pro and Ghidra have significant usability and learning curve problems.
- Public claimIDA Pro is preferred for mainstream security and malware research work that pays for the tool.
- Verified
Tech stack
Every proposal builds on the same PWA base, installable from the browser on any phone or computer. Dashed boxes are what this app adds.
- AppNext.js and TypeScript
- PWAManifest and service worker
- UITailwind CSS
- Data and authSupabase Postgres
- PaymentsStripe
- EmailResend
- HostingVercel
- This app · Analysis engineOpen-source decompiler core compiled to WebAssemblyDecompilation must run in the browser on the user's device so samples never leave it.
- This app · Local storageBrowser file storage for binaries and projectsLarge binaries and analysis databases need more room than normal app data.
RisksAI inference
- TechnicalDecompilation quality is the product. Matching IDA Pro on ARM and x86 in a browser is hard, and a weak first result would lose the users we want.
- TechnicalLarge binaries may exceed browser memory and speed limits, especially on phones and low-end laptops.
- Intellectual propertyReusing open-source decompiler code brings licence terms and attribution duties, which must be reviewed before launch.
- CommercialHobbyists may keep using free Ghidra. Willingness to pay for better usability is only a public claim and must be tested.
- RegulatoryShared reports might contain malware samples or copyrighted code. Terms of use and takedown handling are needed.
Everything marked AI proposal or AI inference was written by a model from the evidence on the opportunity page. The proposed name must be checked against trademark registers before it is used.