Gepetto is a free, open-source plugin for IDA Pro that brings large language models directly into the reverse-engineering workflow. Instead of staring at raw decompiled pseudocode, analysts can ask a model to explain what a function does in plain English, suggest meaningful variable and function names, and help make sense of unfamiliar code โ dramatically speeding up malware analysis and binary auditing.
Developed by security researcher JusticeRage, Gepetto is an open-source project on GitHub with about 3,500 stars, actively maintained with recent updates in 2026. The plugin integrates with IDA Pro’s decompiler view: select a function, invoke Gepetto, and the plugin sends the decompiled code to a language model and displays its explanation inside IDA. It supports a wide range of providers and models, including OpenAI’s GPT family and other compatible APIs, so you can use the model you already have access to. Because it works through the model’s API, analysis quality scales with the underlying model while the plugin itself stays lightweight.
Gepetto is completely free and open source under the GPL-3.0 license. You only need your own API key for the language model you choose to use, and any API usage costs are paid to that provider.
Gepetto is for reverse engineers, malware analysts and security researchers who work in IDA Pro and want LLM assistance to understand binaries faster, especially when facing large, stripped or poorly documented codebases.