What is Eleven?
Eleven, by Chiziaruhoma Ogbonda, is a desktop app for macOS, Windows and Linux that puts a coding agent beside a disassembler. You drop in a Mach-O, ELF or PE binary, an Android APK, a CUDA or HIP fat binary, a Metal shader or a model file, and any agent that speaks the Agent Client Protocol (ACP), such as Claude, Codex, Gemini, Cursor, Copilot or OpenCode, reads the code with you, renames functions, leaves notes and proposes byte patches that you accept or decline.
It has no decompiler of its own. Native code goes through Ghidra 12.x with Java 21, by way of REA, the reverse-engineering MCP server, or through Rizin when a file should open in seconds; Android apps use jadx, with apktool optional for smali; debugging runs under LLDB, and Hopper or IDA can be used if installed. Each agent gets Eleven's own MCP tools, such as open_function, rename_function and propose_patch, plus a filtered copy of REA's analysis tools. The interface is React rendered natively on GPUI.
The repository was created on 13 October 2026, is Apache 2.0-licensed and has about 945 GitHub stars and 142 forks; v0.1.13, the 14th release, shipped on 22 October 2026. The app is free and built by one person. GitHub Sponsors is the only paid route, and eleven.chizi.app is a download and FAQ page with no paid tier.
Is Eleven worth it?
Eleven's contribution is the interface, not the analysis. REA already lets an agent drive Ghidra over MCP from a terminal; Eleven puts the same engine in a window where the agent's renames, notes and patches appear beside the pseudocode, are logged under the agent's name and can be undone with ⌘Z. For someone learning a binary with an agent, that shared view and audit trail is the difference between watching tool calls scroll past and reviewing changes like a pull request.
Because it speaks ACP, Eleven does not choose your model. It finds the agents already installed, adds ACP adapters where they are needed and lets several agents work on one project in separate chats. Every tool call maps to a permission row set to Allow, Ask or Never, from reading the open file to patching bytes to running commands on your Mac. Byte patches are always suggestions, and accepted ones are written to a copy in Downloads, never over the original.
The security posture is good for reading and weaker for running. Static reading with Ghidra, Rizin or jadx does not execute the target, but the LLDB debugger and the GPU profiler do, with your user permissions, and the catch-all permission row covers REA tools that write or run code. A hostile sample still belongs in a virtual machine. The code also leaves your computer: the FAQ says plainly that whatever the agent reads goes to the agent's provider, so pseudocode and strings from a proprietary binary become part of your Anthropic or OpenAI traffic. A setting that asks before a whole file is sent, and another that hides your home path, help at the edges. The installers pipe a script from eleven.chizi.app into a shell; the macOS app is signed and notarised by Apple.
The law is left to you. Many software licences forbid reverse engineering, and the rules on decompiling and circumventing protection differ by country, with narrow exceptions for interoperability or security research in some places. REA's documentation says it is meant for software you own or are authorised to examine; Eleven's README carries no such note, which matters more in an app with a patching feature.
The pace is a single developer's sprint: 14 releases in ten days, with Android, GPU kernels, model files, diffing and a debugger already in, all resting on REA, which moves just as quickly. Against REA used directly from Claude Code, Eleven adds the visual workbench and per-tool permissions; against a bare Ghidra bridge, it adds Rizin, jadx and the agent chat. Whether one maintainer can keep up with two fast upstreams is the open question.
Where it earns its place
A malware analyst at a small incident-response firm
Triage an unknown Windows DLL before writing it up
Open it in Eleven inside an isolated VM with Rizin for a fast first look, run the first-look playbook with Claude, and leave the debugger off unless the VM is disposable. The app is free; the cost is agent tokens, and the sample's pseudocode goes to the agent's provider.
An Android developer checking what a third-party SDK inside their own app does
Find which endpoints a bundled library calls
Drop the APK in; jadx decompiles it to Java, the network-map playbook traces the calls, and renames and notes save into one .eleven project file a teammate can open. Check the SDK's licence terms before sharing decompiled code.
A GPU engineer at an inference startup comparing two builds of a CUDA library they ship
See which kernels changed between releases
Open both builds, compare them by function in the diff view and read each kernel as PTX; the agent can rewrite one in CUDA C++ next to the PTX for checking. The kernels the agent reads go to its provider, so this suits code you own.
Before you commit
- Setup
- curl -fsSL https://eleven.chizi.app/install.sh | bash on macOS 14+ with Apple Silicon, a PowerShell one-liner on Windows x64, or an AppImage on Linux x64. The first run downloads Java 21 and Ghidra 12.x in the background and offers Rizin for an instant start; then you sign in to an agent.
- Integrations
- Any ACP agent (Claude, Codex, Gemini, Cursor, Copilot, OpenCode, Aster); its own eleven MCP server plus a filtered REA server, an optional IDA MCP plugin and custom MCP servers; Ghidra, Rizin, jadx, apktool, LLDB, Hopper and IDA.
- Data and privacy
- Eleven runs locally, but whatever the agent reads goes to the agent's provider. Settings can hide your home path and ask before a tool reads a whole file. A saved .eleven project contains the binary, notes, patches and chats, so sharing one shares the binary.
- Cost at scale
- Free; GitHub Sponsors is optional. The real costs are agent tokens on long sessions and licences for Hopper or IDA if you use them.
- Limits
- macOS on Apple Silicon only, Windows and Linux on x64 only (Ubuntu 24.04 or Fedora 40 and newer); asking the agent needs a connection; long REA calls can run for up to 30 minutes; source builds need a REA 6.x checkout alongside.
What’s good
- Agent edits are logged, attributed and undoable
- Patches go to a copy, never the original binary
- Works with any ACP agent: Claude, Codex, Gemini, Cursor, OpenCode
- Ghidra or Rizin for native code, jadx for Android, PTX for CUDA and HIP
What’s not
- Three weeks old with one maintainer
- Debugger and GPU profiler run the target with your permissions
- Code the agent reads goes to your model provider
- No guidance on the legal limits of reverse engineering
Best for
Security researchers and developers who already reverse-engineer software they are authorised to examine and want an agent working in the same window.
Eleven alternatives
Eleven: common questions
- Is Eleven worth it?
- Eleven turns Ghidra and REA into a workbench you share with an agent, a real gain in usability from a three-week-old app that one person builds. We rate it 3.8 out of 5.
- How much does Eleven cost?
- Free and open source (Apache 2.0), with optional GitHub Sponsors. You need your own agent subscription, and Hopper or IDA need their own licences if used.
- What are the downsides of Eleven?
- Three weeks old with one maintainer; debugger and GPU profiler run the target with your permissions; code the agent reads goes to your model provider; no guidance on the legal limits of reverse engineering.
- Who is Eleven best for?
- Security researchers and developers who already reverse-engineer software they are authorised to examine and want an agent working in the same window.
- How much does Eleven cost for a team or in production?
- Free; GitHub Sponsors is optional. The real costs are agent tokens on long sessions and licences for Hopper or IDA if you use them.
- Is Eleven safe for company data?
- Eleven runs locally, but whatever the agent reads goes to the agent's provider. Settings can hide your home path and ask before a tool reads a whole file. A saved .eleven project contains the binary, notes, patches and chats, so sharing one shares the binary.
- What are the best Eleven alternatives?
- The closest alternatives we have reviewed are universal-modder.
Answers checked Oct 31, 2026.