head to head · open source
GDA-android-reversing-Tool vs find-sec-bugs
GDA-android-reversing-Tool has 4,878 GitHub stars, 574 forks, 62 open issues and last shipped 7 months ago. find-sec-bugs has 2,453 stars, 485 forks, 115 open issues and last shipped 4 days ago. GDA-android-reversing-Tool leads on adoption by 99% (4,878 vs 2,453 stars). GDA-android-reversing-Tool is written in Python under Apache-2.0; find-sec-bugs is written in Java under LGPL-3.0. GDA-android-reversing-Tool has attracted 12% as many forks as stars, find-sec-bugs 20%. find-sec-bugs was the more recently maintained of the two, and both are self-hostable with no licence fee. The two share 1 topic tag (security-audit), so they are genuine substitutes rather than adjacent tools.
Two open source projects, one decision. Both are free and self-hostable — the differences are community size, license terms, language stack and release pace.
← all 20902 open source comparisons
Side by side
| GDA-android-reversing-Tool | find-sec-bugs | |
|---|---|---|
| GitHub stars | ★ 4.9K | ★ 2.5K |
| License | Apache-2.0 | LGPL-3.0 |
| Written in | Python | Java |
| Last push | 2026-04-10 | 2026-11-03 |
| Forks | ⑂ 574 | ⑂ 485 |
| Self-hosting | Yes | Yes |
| Data ownership | Your server | Your server |
pick GDA-android-reversing-Tool if
- You weight community size — 4.9K stars and counting
- You want the Apache-2.0 license terms
- Your stack matches Python
- You value the larger contributor base for long-term maintenance
pick find-sec-bugs if
- You want the find-sec-bugs feature set and don't need the biggest community
- You prefer the LGPL-3.0 license terms
- Your stack matches Java
- You evaluated both and find-sec-bugs fits your workflow better
About GDA-android-reversing-Tool
ˇ GDA(GJoy Dex Analyzer) GDA, an powerful Dalvik bytecode decompiler implemented in C++, which has the advantages of fast analysis and low memory&disk consumption and an stronger ability to decompiling the apk, dex, odex, oat, jar, class, aar files. GDA is completely native software and works without any Setup and Java VM, it works well in any new windows system and virtual machine system without additional configuration. GDA Decompiler project started in 2013 and its first version 1.0 released in 2015 at GDA website . GDA is also a powerful and fast reverse analysis platform. Which does not only supports the…
read the full GDA-android-reversing-Tool overview →
About find-sec-bugs
OWASP Find Security Bugs Find Security Bugs is the SpotBugs plugin for security audits of Java web applications. Website : Main developers Philippe Arteau David Formánek Tomáš Polešovský from Liferay Notable contributions David Formánek Major improvements and refactoring on the taint analysis for injections. The creation of a detector for hard coded passwords and cryptographic keys. Tomáš Polešovský Improvements and bug fixes related to the taint analysis. Maxime Nadeau New detectors surrounding the Play Framework and improvements related to Scala. Naoki Kimura Detector for injection in custom API Translation of…
read the full find-sec-bugs overview →
More in Security & Privacy
Related comparisons
More Threat Detection & Response projects
Compare either of these against the rest of the Threat Detection & Response field.
Frequently asked questions
Is GDA-android-reversing-Tool or find-sec-bugs more popular?
GDA-android-reversing-Tool has 4,878 GitHub stars and find-sec-bugs has 2,453. GDA-android-reversing-Tool has the larger community by that measure.
Are GDA-android-reversing-Tool and find-sec-bugs free?
Both are open source. GDA-android-reversing-Tool is licensed under Apache-2.0 and find-sec-bugs under LGPL-3.0. Neither carries a licence fee.
What is the difference between GDA-android-reversing-Tool and find-sec-bugs?
GDA-android-reversing-Tool is written in Python and find-sec-bugs in Java. The practical differences are community size, licence terms, language stack and release cadence — all compared in the table above.
Which should I choose, GDA-android-reversing-Tool or find-sec-bugs?
Choose GDA-android-reversing-Tool if you want the larger community (4,878 stars) or its Apache-2.0 licence terms. Choose find-sec-bugs if its feature set, stack or LGPL-3.0 licence fits better. Both are self-hostable.