What is the difference between RHEXA, REA and Ghidra?
REA (morluto/rea, MIT) is the original of the agent layer, Ghidra (NSA, Apache 2.0) the original of
the analysis engine. RHEXA combines both into one product: the agent layer is developed further, and
Ghidra is built in as the independently maintained, headless Rhexa Engine. RHEXA is
independent and not supported by the original projects.
Wasn't the project called RHEA?
Yes, until October 2026. Because similar trademarks exist, it is now called RHEXA (Retargetable
Headless EXecutable Analyzer, the long form stays). The old address rhea.janda.io redirects here.
Do I need to install Ghidra separately?
No. rhexa engine install downloads the Rhexa Engine as a verified archive; you only
bring a JDK 25. Your own Ghidra through GHIDRA_INSTALL_DIR is only an option for
developers.
Why is there no graphical user interface?
RHEXA is built for AI agents that need answers and evidence, not windows. Ghidra's Swing UI has
therefore been removed, which saves start-up time, memory and attack surface. A lean web
interface is planned for phase 5.
Which agents does RHEXA work with?
With MCP-capable agents such as Claude Code, Codex, Cursor or Gemini CLI. Ongoing testing uses
Claude Code.
Are my programs sent to the cloud?
RHEXA analyses locally and transmits nothing. The AI agent, however, sends your questions and the
results it reads to its model provider. Check whether that is acceptable for your targets.
Is the examined program executed?
Never during static analysis. Only explicit runtime tools execute code; the tool contract says so.
May I analyse any program?
Reverse engineering is regulated, for example by licence terms and copyright law. Only analyse
software you are entitled to, and seek advice if in doubt. This page is not legal advice.
Why Java 25?
Java 25 is the current long-term support release. The engine is built and tested on it; older
versions are no longer supported.
What does RHEXA cost?
RHEXA is based on open source software. Costs arise from the AI agent and its model usage.
When will the first installable version be released?
Distribution as a package with engine installation is planned for roadmap phase 2 (February to
March 2027). The roadmap shows the current status.
RHEXA