ReversingLabs

ReversingLabs
Name	ReversingLabs
Type	Private
Industry	Cybersecurity
Founded	2009
Headquarters	Boston, Massachusetts
Products	Threat intelligence, malware analysis, file reputation

ReversingLabs ReversingLabs is a cybersecurity company specializing in static and dynamic file analysis, malware intelligence, and threat detection platforms. The company provides threat intelligence and file reputation services used by enterprises, security vendors, and government agencies. Its platforms integrate with incident response, endpoint protection, and security orchestration tools to support malware hunting, digital forensics, and automated remediation.

Overview

ReversingLabs offers a suite of malware analysis and threat intelligence products that operate at the intersection of file analysis, software supply chain protection, and incident response. The firm competes and interoperates with vendors such as Fingerprint Cards, CrowdStrike, Palo Alto Networks, FireEye, and Microsoft products while serving customers in sectors represented by Department of Defense (United States), Department of Homeland Security, NATO, European Commission, and multinational corporations. Its technology emphasizes static analysis of binaries, file reputation databases, and integration with orchestration platforms like Splunk, IBM QRadar, ServiceNow, and VMware.

History

Founded in 2009, the company emerged during a period of growing attention to advanced persistent threats highlighted by incidents involving actors linked to events such as the Stuxnet campaign and disclosures related to Edward Snowden. Over time it evolved alongside developments in endpoint detection exemplified by products from Symantec, McAfee, and research from institutions like MIT and Carnegie Mellon University. The firm expanded its global footprint amid shifts in cybersecurity driven by legislation such as the General Data Protection Regulation and supply chain concerns following high-profile breaches including SolarWinds.

Products and Services

ReversingLabs provides commercial offerings for malware analysis, file reputation, and threat intelligence feeds. Key services align with capabilities found in solutions from Cisco Systems, Check Point Software Technologies, Trend Micro, and Sophos; they include bulk file ingestion, YARA rule support used by analysts familiar with work from VirusTotal, and automated risk scoring similar to services from Recorded Future. Customers use the platform for digital forensics in contexts involving investigations by organizations like Interpol and Europol and compliance functions tied to standards such as ISO/IEC 27001.

Technology and Research

The company leverages static analysis, code signing analysis, and metadata extraction techniques related to academic work at Stanford University and University of California, Berkeley. Its analytic engines parse executable formats associated with ecosystems run by Intel, AMD, and ARM architectures, and it correlates indicators of compromise with intelligence from providers comparable to Mandiant and Kaspersky Lab. Research outputs and threat reports have paralleled community contributions from labs such as Google Project Zero, Microsoft Research, and the SANS Institute, and the platform supports formats like ELF and PE used in software developed by Red Hat and Microsoft Windows.

Partnerships and Customers

ReversingLabs has partnered with technology and security companies to integrate its file reputation and analysis capabilities into broader security stacks. Integrations include orchestration and SIEM vendors such as Splunk, Elastic NV, and platform providers like AWS and Microsoft Azure. Its customer base spans large enterprises, financial institutions akin to JPMorgan Chase, Goldman Sachs, and HSBC, as well as telecommunications operators comparable to AT&T and Verizon. Collaboration with research organizations mirrors interactions with entities such as CISA and academic cybersecurity centers at Georgia Tech.

Legal and Security Incidents

Like many cybersecurity firms, the company has navigated legal and operational issues in the context of incident response, data handling, and cross-border intelligence sharing that echo policy debates involving European Court of Human Rights and regulatory scrutiny from bodies like the Federal Trade Commission. The landscape of software supply chain attacks and disclosure practices shaped by events tied to SolarWinds and vulnerability disclosure norms championed by forums such as FIRST influence operational governance. Public reporting and incident summaries draw on casework methodologies used by responders at Mandiant and CrowdStrike.

Recognition and Industry Impact

The firm's technology has been cited in collaboration and threat research contexts alongside contributions from organizations such as VirusTotal, Google Project Zero, Kaspersky Lab, Mandiant, and FireEye. Its impact is evident in integration patterns with SIEM vendors like Splunk and enterprise security strategies promoted by firms such as Palo Alto Networks and CrowdStrike. Industry recognition aligns with analyst coverage from firms similar to Gartner, Forrester Research, and IDC and with standards and best practices advocated by groups like OWASP and the SANS Institute.

Category:Cybersecurity companies