Cutter is a free, open-source binary analysis workbench for macOS, Linux, and Windows that wraps the Rizin reverse engineering framework in a polished, navigable graphical interface.
What is Cutter?
Cutter is a GUI-driven reverse engineering environment that lets you disassemble, decompile, and debug compiled binaries without touching a command line. Drop in a Mach-O, ELF, PE, or raw firmware image and you get an annotated disassembly listing, an interactive graph view, a hex editor, strings panel, and cross-reference browser — all wired to the same engine that powers serious security research.
The project is built on Rizin, a community-maintained fork of the radare2 framework, which means every low-level analysis primitive is battle-tested. Cutter's job is to remove the CLI friction that has historically made radare2 brutally inaccessible to anyone who hadn't memorised its terse command language. After spending weeks with it, I'd say it largely succeeds.
What does Cutter do best?
Cutter shines brightest in its graph and decompilation views. The control-flow graph turns spaghetti assembly into a visually traversable flowchart — genuinely useful when you're tracing branches through an obfuscated binary. The integrated decompiler is powered by r2ghidra, which embeds Ghidra's decompiler engine directly inside Cutter; you get pseudo-C output on demand, right next to your disassembly, without needing to open a second tool.
- Multi-architecture support — x86, x86-64, ARM, ARM64, MIPS, RISC-V, and more, including Apple Silicon Mach-O binaries natively
- Integrated debugger — set breakpoints, inspect registers and memory, and step through execution without leaving the window
- Scripting engine — automate repetitive analysis tasks in Python or JavaScript via the Rizin scripting API
- Annotated hex editor — edit bytes in-place with struct-aware highlighting
- Strings, imports, exports, and symbols — every standard panel a reverse engineer reaches for is one click away
The dark-themed interface is well-considered and the panel layout is flexible — detach, rearrange, or collapse views to suit your workflow. It's the kind of setup you configure once and forget about.
Is Cutter free?
Yes — Cutter is entirely free and open-source, released under the LGPL-3.0 licence. There are no paid tiers, no nag screens, and no feature paywalls. You can grab the latest build directly from cutter.re or install it on macOS via Homebrew Cask. The project is actively maintained with frequent releases, which matters in a security tooling ecosystem where stale builds are a liability.
Who should use Cutter?
Cutter is the right tool for security researchers, CTF competitors, malware analysts, and developers who need to audit compiled code they don't have source for. If you're staring at a suspicious macOS dylib, a closed-source binary you need to understand before shipping an integration, or a piece of embedded firmware, Cutter is a credible starting point that won't cost you anything.
It's also genuinely useful for students learning assembly and reverse engineering fundamentals. The graph view in particular makes the relationship between source-level constructs and compiled output far more intuitive than a flat disassembly listing ever does. If your work demands enterprise-grade symbol servers, team collaboration features, or scripted batch analysis across thousands of samples, you'll eventually hit Cutter's limits — but at that point you're likely already budgeting for a commercial platform.
How does Cutter compare to Ghidra and IDA Pro?
The reverse engineering landscape is surprisingly rich. IDA Pro remains the industry gold standard — its analysis depth and remote debugging capabilities are exceptional — but it costs thousands of dollars per licence, which puts it out of reach for individuals and small teams. Ghidra, released by the NSA as open-source, is genuinely powerful and free, but its Java-based interface feels sluggish on macOS and its project management model adds more ceremony than most one-off analysis jobs need. Binary Ninja is a well-engineered commercial option with excellent scripting and a cleaner Mac-native feel, though it carries a licence fee. Hopper Disassembler is the long-standing Mac-native favourite for quick work — lightweight and approachable — but it lacks a full decompiler in its free tier.
Cutter occupies a practical middle ground: more capable than Hopper for deep analysis, more approachable than Ghidra's learning curve, and free in a way that IDA Pro never will be. The r2ghidra decompiler integration is particularly clever — you get Ghidra's decompilation quality without the Java overhead. The trade-offs are real: UI polish and analysis automation still lag behind the commercial tier, and some plugin installations require command-line comfort. But for the price of nothing, it's a remarkable amount of tool.
