Static + dynamic · offense + defense

Take apps apart. Fast.

Find real flaws across Android and native binaries, then prove them live on the device.

See pricing Download

Community will be free, with no account required.

              $ rutken app.apk rules
              ▸ parsed app.apk  ·  classes.dex ×3  ·  4,812 methods
              ▸ lifted to IR · built CFG + call graph
              ▸ running SAST rules + taint analysis…
              
              High  hardcoded-crypto-key    Crypto.kt:88
              High  cleartext-traffic       AndroidManifest.xml
              Med  webview-file-access     WebActivity.java:142
              Low  exported-receiver       BootReceiver
              
              ↳ taint UserInput → OkHttp.newCall()  2 flows
              ✓ 7 findings · 4,812 methods in 1.34s
              $ 
            

Blazingly fast Analyze everything, not a sample, at CI and corpus scale.

SAST + DAST One engine, one findings model, not two tools you reconcile.

No-repack hooking Bespoke, on-device instrumentation, with no resigning the target.

Capabilities

One engine, the whole kill chain

Static analysis

Decompile, trace data flow, surface real flaws.

Dynamic analysis

Capture traffic, unpin TLS, intervene live.

No-repack hooking

Instrument on-device. Never resign the target.

Beyond Android

Linux ELF, container images, and CI/CD today. Windows building, macOS coming soon.

Platforms

Android-first, and expanding

Android is the deepest, most battle-tested surface, with full static analysis and on-device dynamic testing. The binary and supply-chain surfaces run on the same engine and grow from there.

Flagship

Android

SAST, DAST, and no-repack on-device hooking. The most complete path.

Actively building

Linux

ELF binary analysis: symbols, data flow, and findings.

Actively building

Containers

Image scanning across layers: what ships, and what's vulnerable.

Actively building

CI/CD

Gate pull requests on new and escalated findings, with severity thresholds.

Actively building

Windows

PE binary analysis. The full workspace compiles today; validation is underway.

Coming soon

macOS

Mach-O support is on the roadmap.

Get Rutken

Download

Rutken ships for Linux x86_64 (signed 0.4.1) and Windows x86-64 (signed 0.3.9) today. The installer verifies a pinned Ed25519 release key before anything runs. The trust root is the key, not the download host. macOS is coming soon.

●Install (recommended)

Two lines. The installer verifies a pinned Ed25519 release key before anything runs (fail-closed), then the launcher starts so you pick an edition (Community is free, no sign-in).

curl -fsSL https://www.rutken.com/install.sh | bash

Then reload your shell so rutken is on your PATH (use ~/.zshrc for zsh):

source ~/.bashrc

Now run rutken --help to see everything you can do, or launch rutken-gui.

●Windows

Download for Windows

v0.3.9 · x86-64

●macOS

Desktop & CLI

Coming soon