Pharos
Pharos: A research framework for binary analysis, C++ recovery and function similarity work. Ranked #30 of 72 in Reverse Engineering Tools by our editors (5.7/10); pricing: Free plan; best for linux C++ recovery and binary similarity.
At a glance
- Editor score5.7 / 10
- PricingFree plan
- Best forLinux C++ recovery and binary similarity
- Free planYes
- Paid fromFree
- DecompilerNo
- Founded2015
- Facts checked23 Sep 2026
Where it wins
- Analyzes disassembly, control flow, instruction semantics and API-call relationships
- OOAnalyzer recovers C++ classes, methods, layouts and inheritance
- Generates YARA signatures and function hashes for similarity analysis
Where it doesn't
- OOAnalyzer is primarily limited to 32-bit x86 Microsoft Visual C++ executables
- Project documentation says portability has not been extensively tested
- Experimental symbolic path analysis may not suit established production workflows
Our verdict on Pharos
Pharos is an open-source research framework for automating static analysis of executable binaries, developed by Carnegie Mellon University's Software Engineering Institute. Linux-based analysts and researchers working on binary recovery, API behavior or similarity analysis are its clearest audience. Built on the ROSE compiler infrastructure, it provides disassembly, control-flow analysis and instruction semantics rather than a decompiler; its focus is analysis of binaries, not broad reverse-engineering workflow coverage.
Its standout breadth lies in several specialized analysis tasks. Pharos can examine API-call sequences and their data and control relationships, report static parameters passed to API calls, and create YARA signatures for executable functions. Function hashing and descriptive properties support binary similarity work. OOAnalyzer targets object-oriented recovery, identifying C++ classes, methods, layouts and inheritance. That recovery has an important boundary: documentation describes OOAnalyzer as primarily limited to 32-bit x86 executables built with Microsoft Visual C++. This specific constraint should not be generalized to every Pharos component, but buyers focused on other executable formats or architectures should assess their target before committing to the framework.
Pharos is self-hosted and Linux-oriented, with Ghidra and IDA Pro listed as integrations. The project cautions that portability has not been extensively tested, which matters for teams expecting a supported, predictable deployment across varied environments. Experimental symbolic path analysis is also available, though its experimental status may make it a poor fit where that capability must be dependable. Choose Pharos for research and analyst workflows that value static binary analysis, C++ structure recovery or function similarity; look elsewhere if you need a decompiler, broad platform assurance or a production-oriented turnkey tool.
Your product? Our editors can test Pharos in depth and publish a review, labelled as paid · from $149/mo →
Pharos pricing
Pharos fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Decompiler | No |
| Firmware analysis | Not verified |
| Analysis mode | Static |
| Plugin API | Not verified |
| Supported platforms | Linux |
| Supported architectures | 32-bit x86 for OOAnalyzer; broader Pharos architecture support not verified |
| Deployment | Self-hosted |
| Platforms | Linux |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 2 integrations: Ghidra, IDA Pro |
| Pricing | Free plan |
| Website | github.com |
| Facts checked | 23 Sep 2026 |
Pharos integrations
Pharos lists 2 integrations on its own site.
- Ghidra
- IDA Pro
Alternatives to Pharos
- GhidraA broad, free toolkit for native-code and bytecode reverse engineering.9.4
- IDA ProA comprehensive native reverse-engineering suite with substantial annual licensing costs.9.2
- ImHexA desktop binary inspection workbench with editing, patterns, comparison, and disassembly.8.7
Used Pharos? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Pharos for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Pharos is listed in our Reverse Engineering Tools directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/pharos/"><img src="https://www.itechguides.com/best/badge/pharos.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update