Products We Could Rebuild

Fourteen real products whose core money-making feature is reverse-engineering-powered analysis — each with verified pricing, the clone case for REA, and the moat that doesn't dissolve. Ranked by clone-ability × revenue potential.

The thesis: every product below employs (or employed) reverse engineers as its moat. REA — an AI agent that reads binaries, extracts behavior, and writes reports — commoditizes exactly that labor. The question for each target isn't "could AI do this" but "what's left that AI can't clone" — distribution, corpus, brand, certification. Clone where the moat is labor; avoid where the moat is network.

📊 The Ranking

Click column headers to sort. Clone-ability: 1 = labor isn't the moat, 5 = REA replicates the core. Revenue: price umbrella per customer.

Rank ⬍	Target ⬍	Category ⬍	Their pricing ⬍	Clone-ability ⬍	Revenue ⬍

🎯 The Targets

💡 Bonus: Don't Clone It — Join It

PolySwarm polyswarm.io — decentralized threat-intel marketplace

Marketplace

What it is — Security experts run competing detection "microengines"; customers bounty artifacts (files/URLs), engines stake the Nectar (NCT) token on verdicts, correct engines get paid. Enterprise customers have included Microsoft, Verizon, eBay.

The play — instead of cloning the marketplace, become a microengine. REA already does file verdicts, IOC extraction, and family classification — wrap it as a PolySwarm engine and earn per-verdict. Zero sales, zero marketing; the marketplace brings the demand.

Hard part: engine accuracy has to beat incumbents (CrowdStrike, SentinelOne run engines there); NCT token economics are crypto-volatile.

🔬 Method & Honesty Notes

Pricing figures come from vendor pages, vendor-published press, and third-party comparison tables found via web search in October 2026. Where pricing is not public, it says so — no numbers were invented.
Third-party pricing tables (review aggregators) can lag or conflict; figures marked "third-party" should be re-verified against the vendor before any business decision.
Clone-ability scores judge the core analysis feature only — not the whole company. A score of 5 doesn't mean "easy business," it means the technical moat is labor REA replaces.
Moats listed are the ones REA does not dissolve: corpora, network effects, brand trust, sales channels, certifications, and community gravity.
All analysis is informational. Building competing products is legal; scraping or misusing these vendors' data to do it may not be — build on open corpora and your own analysis.