Software X-Ray
Upload any executable and get a plain-English report — written for an executive or lawyer — explaining what the software actually does: what data it sends, what files it modifies, what it talks to, and what suspicious behaviors it hides.
compliance officers and M&A lawyers doing software due diligence who can't read decompiled code
- Plain-English behavioral summary covering network calls, file system activity, and persistence mechanisms
- Side-by-side comparison against a baseline of common apps so unusual behavior stands out visually
- Risk-rated findings with citations to the specific function that triggered each flag
- Exportable PDF report formatted for an audit binder or board memo
Kuna shows LLMs can now rival IDA Pro on control flow structuring — the bottleneck is no longer the reverse engineering, it's translating the output for humans.
Software supply chain risk is a real legal and compliance concern with established budget lines.Due Diligence Software: Tools, Features, and How to Choose ↗
Few tools serve the lawyer/compliance reader directly — most target engineers.Due Diligence Software: Tools, Features, and How to Choose ↗
Compliance and M&A budgets are large; per-report fees of $500-5000 are routine.Due Diligence Software: Tools, Features, and How to Choose ↗
Software supply chain risk is a permanent regulatory concern tied to NIS2, DORA, and similar frameworks.
Needs careful sandboxed execution and reliable LLM orchestration; not trivial but achievable.