All organizations · GSoC 2026 · Security, Artificial Intelligence

FLARE

Industry leading malware analysis

The Mandiant FLARE team is a collection of about 40 reverse engineers that analyze malware in support of threat intel, incident response, and computer forensic investigations. We spend our days using disassemblers, debuggers, decompilers, and emulators to figure out what malware does and how we can contain it. We’re known for delivering training sessions that share our experience and releasing open source software that automates the boring things. If you have even a passing interest in reverse engineering or malware analysis, reach out so that we can chat!

python
Sandbox
ida-pro

emulation
disassembly
decompilation
malware-analysis
reverse-engineering

Project ideas

8 ideas on its 2026 ideas page; of the 1 that state a difficulty: 1 easy. 2 mentors named.

capa: Native Script Analysis Support
capa: Automated Rule Generation Agent
capa: Enhance Static Analysis
capa: Enhance Dynamic Analysis
FLOSS: Extract Language Specific Strings (.NET, Swift, Zig, ...)
GoReSym: Recover Golang Structure Tags and Interface Methods in GoReSym easy
XRefer: Backend Expansion (Radare2 or Vivisect)
XRefer: Native Frontend Development (Binary Ninja or Ghidra)

Read the ideas page. Ideas are for scope reference; never copy one into a proposal.

History

In GSoC since 2023, 4 years. Projects per year: '23: 4, '24: 1, '25: 2, '26: 4.

On GitHub

28 repositories pushed to in the last year. Main languages: Python (13), Go (3), C++ (2), PowerShell (2), Shell (2), C (1).

Links and channels

Website: https://cloud.google.com/security/flare
Ideas page: https://github.com/mandiant/flare-gsoc/blob/2026/doc/project-ideas.md
Contributor guide: https://github.com/mandiant/flare-gsoc/blob/2026/doc/contributor-guidance.md
Source code: https://github.com/search?q=topic%3Agsoc-2026+org%3Amandiant&type=Repositories
Mailing list: https://github.com/mandiant/flare-gsoc/discussions

go deeper in your terminal

git-into-gsoc org "FLARE" --shortlist
git-into-gsoc repos "FLARE"
git-into-gsoc issues --org "FLARE"

or ask your assistant:
"Which FLARE repositories merge
newcomers' pull requests, and which beginner
issues are still free?"

Those commands read live data: which repositories merge outside pull requests, and which beginner issues nobody has claimed. Install in two minutes.