> For the complete documentation index, see [llms.txt](https://devirt.gitbook.io/devirt/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://devirt.gitbook.io/devirt/use-cases.md).

# Use cases

Who uses Devirt: reverse engineering consultancies, malware analysts, vulnerability researchers, software owners, interoperability teams, supply-chain security teams and trust and safety teams.

| Team                                                                                               | Why they use Devirt                                                                          |
| -------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- |
| [Reverse engineering consultancies](https://devirt.re/use-cases/reverse-engineering-consultancies) | To hand off the devirtualization when VM-protected functions hold up a client engagement     |
| [Malware analysts](https://devirt.re/use-cases/malware-analysts)                                   | To get back the logic that VM protection keeps from the decompiler in a malware sample       |
| [Vulnerability researchers](https://devirt.re/use-cases/vulnerability-researchers)                 | To research VMProtect- or Themida-protected software inside an authorized scope              |
| [Software owners](https://devirt.re/use-cases/software-owners)                                     | To get readable logic out of a protected binary they own once the source is lost             |
| [Interoperability teams](https://devirt.re/use-cases/interoperability-teams)                       | To uncover the protocol or file format inside a protected component                          |
| [Supply-chain security teams](https://devirt.re/use-cases/supply-chain-security-teams)             | To learn what a vendor's protected code actually does, not only which components it contains |
| [Trust and safety teams](https://devirt.re/use-cases/trust-and-safety-teams)                       | To triage protected executables that users upload, with the bounds of the analysis stated    |

In practice this covers work such as investigating a protected malware sample, studying VM-protected code for vulnerability research, vetting a protected third-party component before release, and checking compatibility or compliance behavior in software the customer is allowed to inspect.

Every audience page is linked from [devirt.re/use-cases](https://devirt.re/use-cases).