Sunday, October 25, 2026 4,350 lists 78,100 records on file
List your app or device

  1. Home
  2. Reverse Engineering Tools
  3. FACT

FACT

Plans and prices

FACT

Free

GPL-3.0 software · self-hosted installation · requires Linux

Every plan, in full

On the record

Analysis
It identifies software, versions, boot services, known CVEs, hard-coded credentials, cryptographic material, CPU architecture, and potential implementation flaws.fkie-cad.github.io · read 8 Oct 2026
Authentication
FACT offers optional basic authentication, roles, and user management.github.com · read 8 Oct 2026
Comparison
FACT can identify changed or equal files and changed software versions between firmware images.fkie-cad.github.io · read 8 Oct 2026
Extensibility
Extractors, analysis features, and comparison functions are implemented as plugins, and additional plugins can be added to a local installation.fkie-cad.github.io · read 8 Oct 2026
Firmware extraction
FACT automates identifying firmware container formats and unpacking firmware layers.fkie-cad.github.io · read 8 Oct 2026
Integration
FACT provides a REST API covering almost all of its features.fkie-cad.github.io · read 8 Oct 2026
Interface
The product provides a browser-based interface for browsing firmware components and navigating analysis results.github.com · read 8 Oct 2026
License
FACT is free software under GPL version 3 or, at the user's option, any later version; some plugins may use different licenses.github.com · read 8 Oct 2026
Limitations
The repository describes FACT as a research prototype, and says its Dockerized version is currently unmaintained.github.com · read 8 Oct 2026
Maker and funding
FACT is developed by Fraunhofer FKIE and the FACT community, with partial funding from Germany's Federal Office for Information Security and others.fkie-cad.github.io · read 8 Oct 2026
Purpose
FACT automates firmware security analysis for devices such as routers, IoT equipment, UEFI systems, webcams, and drones.fkie-cad.github.io · read 8 Oct 2026
Requirements
The documented minimum system requirements are 4 CPU cores, 8 GB RAM, and 10 GB disk space, with additional disk space needed for extracted files and analysis results.github.com · read 8 Oct 2026
Search
FACT stores firmware files and analysis results in a searchable database that supports searching byte patterns in unpacked files.fkie-cad.github.io · read 8 Oct 2026
Security
The maintainers caution that FACT is not intended as a public internet service and that its web interface is not hardened; they recommend resetting passwords before use on networks that are not fully trusted.github.com · read 8 Oct 2026
Supported systems
The installer lists Debian 13 and Ubuntu 22.04, 24.04, and 26.04 as stable, with Kali support marked experimental.github.com · read 8 Oct 2026

Alternatives to FACT

Every alternative, ranked