devirt.re
Create account
Menu

Reverse engineering and devirtualization pricing

The result first.
The commitment second.

Start with one file. Choose a useful result, not a subscription you don’t need.

Help me choose See all prices
  • Prices in USD
  • Cryptocurrency payment route
  • Card payments are not currently offered
  • No automatic overage charges
  • Written quote before any scoped work

Example assessments: Community Triage is $0, General Analysis is $199, and eligible Protected Recovery starts at $399. The assessment confirms eligibility for your exact binary and the final offer.

Find the right plan.

Start with your goal. See what you get, what it costs and where to go next.

Start with Community Triage. Free.

Your starting point

Start with Community Triage

Free

Find out what is inside a binary and which kind of analysis it may need.

  • 5 scans per verified account each month
  • File format, architecture and protection indicators

Triage identifies the file. Recovered code is a separate service.

See Community Triage
FROM INPUT TO OUTPUTILLUSTRATION
Know what you have before going deeper.

Compare scope and pricing before you pay. Create your account to get started

One file. Choose the analysis path.

  • Community Triage

    For a first look at one authorized binary.

    $0/ month

    5 bounded scans per verified account/month in your workspace.

    Create account
    • Format, architecture and import/export inventory
    • Protection and packer indicators
    • Not included: Recovered code or artifact download
    • Not included: VM recovery

    Triage is an assessment, not a devirtualization result.

  • Triage Plus

    For a downloadable evidence summary.

    $29/ sample

    Downloadable JSON summary retained for 30 days.

    Create account
    • Bounded static inventory and protection indicators
    • Structured summary for your records
    • Not included: Recovered code or devirtualized database
    • Not included: Human analyst review

  • General Analysis

    For ordinary binaries and repeatable research.

    $199/ sample

    Eligibility confirmed by assessment; one selected tool or API output.

    Create account
    • Accepted static/behavioral analysis bundle
    • One selected tool or API output
    • Not included: Protected VM recovery
    • Not included: Analyst-reviewed report

  • Protected Recovery Lite

    For an individual or team with an eligible protected family.

    $399/ sample

    One selected tool database plus proof JSON.

    Create account
    • One IDA database
    • Coverage and proof record (JSON)
    • Not included: Annotated pseudocode or LLVM IR
    • Not included: Analyst-reviewed report

    Express, +$500 on eligible recovery work.

  • Protected Recovery Full

    For individuals or teams that need cross-tool work.

    $1,199/ sample

    Assessment confirms eligibility, expected coverage and the outputs offered.

    Create account
    • IDA database
    • Annotated pseudocode and API JSON
    • Coverage ledger and proof summary
    • Not included: LLVM IR or open-ended research

    Express, +$500 on eligible recovery work.

  • Deep Recovery

    For individuals or teams whose binary needs deeper recovery.

    $2,499/ sample

    Assessment confirms eligibility for your exact binary.

    Create account
    • Full protected-recovery output bundle
    • Advanced coverage and proof record
    • Not included: Custom family or open-ended research
    • Not included: Analyst-reviewed report

    Analyst review starts at $3,500 and is quoted separately.

Tool versions are listed with the artifacts; newer databases are not promised to open in older tools.

Evidence decides the path.

Start with evidence.

A free assessment confirms whether your exact binary is eligible for protected recovery and sets out the outputs and price before you decide.

Triage never exposes recovered code. Every recovery result separates proven, runtime-dependent, unresolved and bounded work.

  • Triage only

    $0

    Community Triage

    A bounded inventory and protection summary with no recovered code.

  • Ordinary binary

    $199

    General Analysis

    Accepted static or behavioral analysis with one selected tool or API output.

  • Eligible protected family

    from $399

    Protected Recovery

    Assessment confirms the suitable tier, expected coverage, outputs and price.

A free assessment confirms whether your exact binary is eligible for Protected Recovery and sets out the available outputs and price. The result records proven, runtime-dependent, unresolved and bounded work separately.

Community Triage and General Analysis remain available when recovery is not accepted. No public price implies complete source recovery or an open-ended research engagement.

For an ongoing workload.

Optional plans. Analyses are the allowance, not seats. There are no automatic overage charges.

  • Power

    Individual power users

    $149per month

    Prepaid. No automatic renewal.

    One General Analysis allowance and five Triage Plus scans per month; Protected Recovery is separate

    • 10% off eligible Protected Recovery: $359.10 Lite / $1,079.10 Full / $2,249.10 Deep
    • One analysis running at a time
    Choose Power

  • Team

    Small research teams

    $699per month

    Prepaid. No automatic renewal.

    Four General Analysis allowances, 3 seats and API access

    • Priority queue
    • 30-day result retention
    • 2x rollover cap
    • Protected Recovery ordered separately
    Choose Team

  • Professional

    Private recurring research workflows

    $1,799per month

    Prepaid. No automatic renewal.

    Ten General Analysis allowances and 10 seats each month

    • API and delta reports
    • Private queue
    • 2x rollover cap
    • Protected Recovery ordered separately

    Organisation verification required.

    Choose Professional

  • Enterprise

    Reserved capacity and governance

    From $7,50090-day pilot

    Core from $36,000/year; private from $90,000

    Capacity and unit mix reserved for your organisation

    • A bounded private evaluation
    • Security review and an agreed analysis mix
    • A pilot acceptance report
    • Annual governance and SLA terms quoted separately

    Confidentiality and other contract-specific terms are separately agreed.

    Discuss enterprise requirements

Rollover: after each monthly grant, the total balance is capped at twice the monthly allowance. Remaining allowance expires when the subscription ends. When it runs out, you choose whether to buy another analysis. Terminal processing failures restore the consumed allowance.

Other ways to buy.

For consultancies, a fixed batch of work, or permanent access to the library.

Custom VM or layered protection?

Create an account and upload for a free feasibility review. We review the file and email a quote before paid work begins. See a sample assessment.

Create account

Before you submit.

How the service works. These policies do not replace current terms or a written engagement. See the billing and refund terms for payment confirmation and refund requests.

Which files are eligible?
The automated pay-per-file path starts with VMProtect 2.x and 3.x. All seven Themida VM profiles are supported on subscription plans. Other builds start with an account and upload for free feasibility review. We email the scope and quote; naming a protector is not a recovery guarantee.
What if my project needs research?
Create an account, verify your email and upload for a free feasibility assessment in your workspace. We handle manual review and email a written quote covering scope, deliverables, price and timing. You approve before paid work begins. Analyst-reviewed reports and LLVM IR may need a separately agreed scope.
Can an individual order devirtualization?
Yes. Individuals can order eligible Protected Recovery Lite ($399), Full ($1,199) or Deep ($2,499) separately. Power gets a 10% discount on eligible protected-recovery orders in your workspace. A General Analysis allowance never includes devirtualization; assessment confirms eligibility for the exact binary and the outputs we can offer.
How long can I access a result?
Triage Plus summaries are available for 30 days after release. Other paid results are available for 72 hours by default or 30 days on Team, starting at release. Inputs are deleted after artifact generation and verification. Payment verification has its own disclosed payment window; expiry goes to refund review, not automatic release.
How do team seats work?
Team includes three seats and Professional ten, counting the owner. Invite colleagues from Team & seats in your workspace. Members use their own verified accounts, share the plan allowance and can access analyses submitted in the team workspace. Personal analyses stay private. The owner manages paid purchases and refunds. Pending invitations reserve a seat for 72 hours.
How does payment work?
Pay in cryptocurrency using the coins and networks offered at checkout. Card payments are coming later and are not currently available. Subscriptions are prepaid fixed terms, not automatically renewed; every scope or surcharge is accepted before payment.
Who may submit?
Only people authorised to analyse the file. Devirt may request evidence or decline an engagement. Read the acceptable-use policy and current privacy terms. Enterprise confidentiality and deletion evidence require a written agreement.

Have a file in mind?

Create an account and upload in your workspace. If the file needs manual work, we review it and email your quote.

Create your workspace

Create an account, verify your email and upload your file. We review custom work and email your scope and quote.

Create account

See how it works