About Contribute GitHub
Menu

IDA Pro

IDA Pro is the commercial disassembler and decompiler created by Ilfak Guilfanov that became the de facto industry standard for reverse engineering and malware analysis for nearly three decades, shaping how professional researchers read compiled binaries until free alternatives like Ghidra emerged.

IDA (Interactive Disassembler) was created by Ilfak Guilfanov, a mathematician and graduate of Moscow State University, who began developing the tool around 1990 and first released it as shareware on May 21, 1991. In 1996 the Belgian company DataRescue took over development and began commercializing it under the name IDA Pro, and in 1999 the software gained its first graphical user interface with version 4.0.

From Shareware to Industry Standard

Over the following two decades IDA Pro's support for dozens of processor architectures and executable formats, combined with features like the FLIRT library-recognition technology, made it the default tool professional reverse engineers reached for when analyzing unknown or malicious binaries. Security researchers, malware analysts, and vulnerability hunters adopted it as a baseline tool, and it came to be described as the "de facto industry standard" for static binary analysis.

Hex-Rays and the Decompiler

In 2005 Guilfanov founded Hex-Rays as a dedicated company to build the Hex-Rays Decompiler, a plugin that translates disassembled machine code into readable, C-like pseudocode rather than raw assembly, dramatically speeding up analysis of large or complex binaries. In January 2008 Hex-Rays formally assumed development and support of IDA itself from DataRescue, consolidating the disassembler and decompiler under one company. In 2022 the company was acquired by an investor consortium led by the Belgian firm Smartfin, in a deal reported at 81 million euros.

Competitive Pressure from Ghidra

IDA Pro's dominant, largely unchallenged position was disrupted in March 2019 when the U.S. National Security Agency publicly released Ghidra, a free and eventually open-source disassembly and decompilation suite. Ghidra's release gave the reverse-engineering community, including students and smaller security teams who could not afford IDA Pro's licensing costs, a capable no-cost alternative for the first time.

Legacy

Despite the competitive pressure from Ghidra and other newer tools, IDA Pro and its Hex-Rays Decompiler have remained fixtures of professional reverse engineering, malware analysis, and vulnerability research workflows, valued for platform maturity, decompiler quality, and decades of accumulated tooling and plugin ecosystems.

Timeline

  • 1991-05-21IDA is first released as a shareware disassembler.
  • 1996Belgian company DataRescue takes over development and commercializes the tool as IDA Pro.
  • 1999IDA Pro 4.0 ships with the software's first graphical user interface.
  • 2005Ilfak Guilfanov founds Hex-Rays to develop the Hex-Rays Decompiler for IDA.
  • 2008-01Hex-Rays formally takes over development and support of IDA from DataRescue.
  • 2019-03-05The NSA publicly unveils Ghidra, a free alternative to IDA Pro, at the RSA Conference.
  • 2022Hex-Rays is acquired by an investor consortium led by Smartfin for a reported 81 million euros.
IDA Pro
Type
Tool
Era
1991-Present
Key date
1991-05-21
Tags
disassembler, decompiler, reverse engineering, malware analysis, Hex-Rays
Created by Joas A Santos · Something wrong or want it removed? Open an issue.