Hex-Rays adds HexAI’s agent workflows to its security research tools
Hex-Rays, the developer of software-analysis tool IDA Pro, is acquiring Israeli startup HexAI and its six-person team. HexAI develops AI-agent workflows for examining source code and compiled software for vulnerabilities. The buyer plans to expand its Israeli operations and involve its reverse-engineering specialists in developing further research tools.
Artificial Intelligence··Night
Six-person team joins IDA Pro’s developer
Belgium-based software-analysis company Hex-Rays is acquiring Israeli startup HexAI, previously called Ventris. Its six employees are joining the buyer, which plans to expand the operation in Israel. Founded by Elon Gliksberg in 2025, the startup developed its product without raising outside capital. Amit Schendel later joined as chief technology officer. The acquisition brings its security-research workflow platform into the company behind IDA Pro, a reverse-engineering tool that allows specialists to examine software when its source code is unavailable. Hex-Rays plans to involve its own specialists in developing the platform and additional research tools.[1], [2]
Researchers can test and revise agent workflows
HexAI’s platform lets security researchers create and run workflows using AI agents, software systems that carry out assigned tasks. Researchers can customise those workflows, measure their performance and validate findings. The system examines both source code and compiled binary files for known vulnerabilities, previously unknown flaws, malware and backdoors. This covers work where source code is available as well as analysis of executable software. The company also provides prebuilt workflows that its research teams test against benchmarks and common security targets. It describes further workflows designed to improve other research workflows automatically, alongside tools researchers can adjust to their own requirements. Known flaws can carry Common Vulnerabilities and Exposures identifiers, or CVE, which provide labels for the established vulnerabilities examined alongside previously unknown security problems.[1], [2]
Platform can work outside external networks
The company says its platform is not tied to a particular AI model and can operate in air-gapped environments, where computers are isolated from external networks. That is a feature intended for sensitive security research that organisations cannot transfer to external services. HexAI describes government and commercial customers in Israel and other countries. Its workflow tools include checks on findings and allow researchers to refine their processes rather than relying on a generic agent working alone. The buyer plans to combine that platform with its reverse-engineering expertise as it expands into AI-powered security research and develops further tools for researchers.[1], [2]
