Dexcalibur is a mobile app reverse engineering tool from Reversense. It combines static, dynamic and symbolic analysis, with Dalvik bytecode emulation, deobfuscation support and automatically generated hooks for Java methods and native functions. It traces system calls, the file system and network traffic, including HTTPS without bypassing SSL pinning. Reversense also offers automated privacy assessments for Android and iOS apps, checked against frameworks such as the GDPR, CRA, PCI and CCPA. The target groups are evaluators, CERT and SOC teams and law enforcement. The vendor describes it as reverse engineering as a service; part of the source is a separate GitHub project.
Reversense is a French simplified joint-stock company (SAS) with its registered office in Cazères and a single shareholder; no parent company is named. According to its privacy policy, data is hosted in France by the company itself, with the possibility of providers elsewhere in Europe; the wording is not entirely unambiguous on this point. The vendor does not state where the product runs or whether local installation is possible; ask, especially for confidential applications.