
angr
angr is a free, open-source binary analysis platform for Python that combines static analysis with dynamic symbolic analysis.
What angr is
angr is a free, open-source binary analysis platform for Python that combines static analysis with dynamic symbolic analysis. Its symbolic execution engine explores program paths and solves constraints on symbolic inputs. The platform can recover control-flow graphs, disassemble machine code, lift it to an intermediate language, and generate angr Intermediate Language or C pseudocode with its decompiler. It supports custom analyses, architectures, platforms, exploration techniques, and hooks. Related project libraries cover architecture information, intermediate representations, binary loading, and constraint solving. angr is a Python 3.10+ library available through PyPI and pip; installation from source and a Docker image are also documented. It runs on Windows, macOS, and Linux, and supports architectures including AArch64, ARM, MIPS, RISC-V 64, and x86. The project presents reversing, vulnerability discovery, and exploitation as example uses. Its GUI, angr-management, is described as being in a very alpha state. Support is available through Discord, GitHub issues and pull requests, or a public mailing list, with potentially long email response times.
Good
- Free and open source under a permissive BSD license
- Combines static and dynamic symbolic analysis
- Includes disassembly, control-flow analysis, and decompilation
- Supports Windows, macOS, and Linux
Watch out
- Requires Python 3.10 or later
- angr-management GUI is in a very alpha state
- Email support may have long response times
Who it suits
angr is suited to developers and security researchers working with binary analysis, reversing, or vulnerability discovery. Users comfortable with Python and command-line installation may find its library-based approach a fit.
Verdict
angr offers a broad set of binary-analysis capabilities as an extensible Python library. Its early-stage GUI and open-source support model are worth considering alongside its analysis features.
Plans and prices
From angr's own pricing page, checked 3 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free and Open Source | Free | BSD license · Python 3.10+ · Windows, macOS, and Linux |
The facts
Each one read from angr's own pages, with the date it was checked.
What it does
- Control-flow analysis
- angr provides techniques for recovering control-flow graphs.checked 3 Oct 2026
- Decompilation
- Its decompiler can produce angr Intermediate Language and C pseudocode from machine code.checked 3 Oct 2026
- Deployment
- The project documents installation from source and provides an angr Docker Hub image.checked 3 Oct 2026
- Disassembly and lifting
- angr can disassemble code and lift it to an intermediate language.checked 3 Oct 2026
- Extensibility
- The platform supports custom analyses, architectures, platforms, exploration techniques, and hooks.checked 3 Oct 2026
- GUI
- The project points users to angr-management as its GUI and describes it as being in a very alpha state.checked 3 Oct 2026
- Installation
- angr is a Python 3.10+ library available through PyPI and can be installed with pip.checked 3 Oct 2026
- Intended use
- The documentation presents reversing, vulnerability discovery, and exploitation as angr example use cases.checked 3 Oct 2026
- Libraries
- The angr project maintains archinfo, pyvex, pypcode, CLE, and Claripy libraries for architecture information, intermediate representations, binary loading, and constraint solving.checked 3 Oct 2026
- License
- The project says angr is free and open-source software under the permissive BSD license.checked 3 Oct 2026
- Product
- angr is an open-source binary analysis platform for Python that combines static and dynamic symbolic analysis.checked 3 Oct 2026
- Security and compliance
- The official pages opened describe a BSD-licensed analysis tool but do not state security certifications or compliance attestations.checked 3 Oct 2026
- Support
- The project directs users to Discord, GitHub issues and pull requests, or a public mailing list, and describes support as a typical open-source model with potentially long email response times.checked 3 Oct 2026
- Symbolic execution
- Its symbolic execution engine explores program paths and solves constraints on symbolic inputs.checked 3 Oct 2026
Where it runs
- Platforms
- The angr site states that it runs on Windows, macOS, and Linux.checked 3 Oct 2026
Alternatives to angr
- 1

Binary Ninja
Free planWebAPILinuxmacOS7.8$199 one-time - 2
Frida
Free planOpen sourceAndroidiOSAPILinux7.7Free plan - 3

rev.ng
Free planOpen sourceWebAPILinuxmacOS7.7Free plan - 4

JEB
Free planAPILinuxmacOSSelf-hosted7.6From $1,200 a year - 5
Ghidra
Free planOpen sourceAPIExtensionLinuxmacOS7.3Free plan - 6

IDA Pro
Free planLinuxmacOSWindows7.0From $1,099 a year
