---
title: "Romain Thomas | Security Engineer \u0026 Reverse Engineer"
description: "Software obfuscation, reverse engineering, program analysis, and open-source binary tooling by Romain Thomas."
canonical_url: "https://www.romainthomas.fr/"
authors: ["Romain Thomas"]
language: "en-US"
---

# Romain Thomas

> Software obfuscation, reverse engineering, program analysis, and open-source binary tooling by Romain Thomas.

I work in a continuous loop: breaking protections to build better, automated
solutions. To achieve this, I balance my time between reverse engineering and
software protection engineering. On the defensive side, I created the
[open-obfuscator](https://obfuscator.re) projects, including tools like O-MVLL
and dProtect. On the offensive side, I reverse-engineer commercial protection
stacks to uncover their underlying architectures, assumptions, and limitations.

Research areas: obfuscation engineering, deobfuscation and reversing, mobile
RASP, and agentic binary tooling.

Security engineer based in Paris, France.

## Contact and profiles

- Email: [me@romainthomas.fr](mailto:me@romainthomas.fr)
- GPG key: [EF86C95E](https://www.romainthomas.fr/EF86C95E.asc) (fingerprint `15E3 4637 48FE 6F81 D8EE B0CE 1CD1 ECED EF86 C95E`)
- GitHub: [github.com/romainthomas](https://github.com/romainthomas)
- Bluesky: [rh0main.bsky.social](https://bsky.app/profile/rh0main.bsky.social)
- Mastodon: [@rh0main@infosec.exchange](https://infosec.exchange/@rh0main)
- X/Twitter: [@rh0main](https://x.com/rh0main)
- LinkedIn: [linkedin.com/in/romain-t-3b202174](https://www.linkedin.com/in/romain-t-3b202174)

## Content


- [Articles](https://www.romainthomas.fr/post/): Long-form technical research into software obfuscation, reverse engineering, program analysis, mobile security, and binary tooling. ([Markdown index](https://www.romainthomas.fr/post/index.md))
- [Publications](https://www.romainthomas.fr/publication/): Conference talks, white papers, and technical publications on program analysis, executable formats, software protection, and mobile security. ([Markdown index](https://www.romainthomas.fr/publication/index.md))
- [Projects](https://www.romainthomas.fr/project/): Open-source projects, private components, and the systems behind an agentic reverse-engineering workflow. ([Markdown index](https://www.romainthomas.fr/project/index.md))
- [Training](https://www.romainthomas.fr/training/): Hands-on reverse-engineering workshops and practical security training by Romain Thomas. ([Markdown index](https://www.romainthomas.fr/training/index.md))

Every article, publication, project, and training page also publishes a clean
Markdown alternative at its own `index.md` URL.

## Machine-readable indexes

- [llms.txt](https://www.romainthomas.fr/llms.txt): Curated map of this site for language models.
- [Full content dump](https://www.romainthomas.fr/llms-full.txt): Every published page concatenated as Markdown for one-shot ingestion.
- [XML sitemap](https://www.romainthomas.fr/sitemap.xml): Canonical crawlable URLs and modification dates.
- [JSON content index](https://www.romainthomas.fr/index.json): Full text and metadata for published pages.
- [Heading-level retrieval index](https://www.romainthomas.fr/index.chunks.json): Versioned, anchored Markdown and plain-text chunks with content hashes.
- [Site RSS feed](https://www.romainthomas.fr/index.xml): Every published page across all sections.