Assist
An AI agent inside IDA. Interactive work at your desk, with you in the loop on every change.
In the IDBHuman in the loop
Assist is a real AI harness built into IDA. It reads the IDB, reasons like a reverse engineer, drives IDA’s own analysis engines, and proposes changes you approve. Not a chatbot bolted onto a sidebar.
Get started
sample.bin · IDA + Assist
you › what does sub_401A20 do?
assist · reading pseudocode, xrefs, strings
assist · tracking esi with IDA’s register tracker
assist · emulating 0x401A20–0x401B40 with RAX
assist · Z3: loop bound proven ≤ 64
Decrypts the embedded C2 config (RC4). Key @ 0x403000.
Rename sub_401A20 → decrypt_c2_config ?
✓ memory saved: “RC4 config @ 0x401A20”
How a question becomes an answer
-
01
Ask in plain terms
Point at a function or a selection and ask. Assist pulls the relevant context for you — no prompt engineering required.
-
02
Reason like an RE
Built-in workflows walk the model through real reverse-engineering steps, in IDA’s own terms.
-
03
Run real tools
It drives IDA’s engines, emulation and the Z3 solver, instead of leaning on the model’s memory.
-
04
You approve
Every proposed rename, type or comment waits for your yes before it touches the IDB.
More than a model
A lone model guesses. Assist orchestrates deterministic analysis and reserves the model for meaning, so the results are explainable and reproducible.
The model
Handles meaning
- Explains what code actually does
- Proposes sensible names and types
- Summarizes intent across functions
- Decides which tool to reach for next
Deterministic
Does the provable work
IDA disassembler and decompiler- Register trackers and microcode
- Hex-Rays RAX speculative emulation
- Z3 SMT solver for symbolic reasoning
- FRIDA, when it’s installed
Assist decides which to reach for, and when.
It remembers what you figure out
Findings don’t evaporate when you close the session. Memories capture what you learn and resurface automatically when you return to the code they describe. Entities lift analysis above raw addresses, to the functions, classes and subsystems you actually reason about.
Recalled across sessions and models- Visible in the Assist panel: inspect, edit, build on
MEMORIES
·RC4 config decrypt@ 0x401A20
·Custom PE loader3 stages
·XOR string table@ 0x4041B0
ENTITIES
decrypt_c2_configfunction
StageLoadersubsystem · 7 fn
C2Channelclass
Works with any capable model, online or off
Native integration with any OpenAI-compatible API, plus Grok and Claude Code. Run a frontier model in the cloud or a local one on your own hardware. Nothing locks you in.
As
any OpenAI-compatible API, in the cloud or on your own hardware
Privacy Whatever model you pick, sensitive strings and symbols can be anonymized before they leave your machine.
The agent suggests. You decide.
Read-only
Look, don’t touch
Assist analyzes and explains, but never edits the database.
Default
Ask first
Assist proposes each change and waits for your yes before it applies.
hand-off
Work freely
Study code and data structures to drive signatures and attribution.
From your first disassembly to your hardest target
Students
Learn the craft with an expert explaining each step.
Everyday reversers
Hand off the busywork, keep the interesting parts.
Malware analysts
Reach the real logic faster, and safely.
Vuln researchers
Trace data and test a hypothesis in the IDB.
Where Assist fits
Two ways to put AI on a binary. Pick the one that matches the job.
Hex-Rays IDA MCP
Headless and scriptable. Wire IDA’s analysis into your own agents and automation pipelines.
ProgrammaticAt scale
Built for IDA Pro and IDA Home
Assist installs in minutes with hcli and runs as an add-on to IDA 9.3 and later.
Available
IDA Pro
Drop Assist into your IDA Pro setup and go.
Available
IDA Home
Runs on IDA Home too, for non-commercial work.
Put an agent inside your IDA.
Install in minutes with hcli, bring your own model, and keep every decision yours.
