macOS · Forensic Binary & Hex EditorEvery byte, fully decoded.

Open multi-gigabyte binaries instantly. Diff, patch and export them byte by byte — entirely offline, with Zero Telemetry.

Download on the Mac App Store See it work
FREE TO DOWNLOAD ZERO TELEMETRY NATIVE MACOS · APP IN 15 LANGUAGES
HexWrite on macOS: the hex grid beside the Data Inspector decoding integers, floats and a Mac timestamp, with live ARM64 disassembly and MD5 and SHA-256 digests in the status bar
01Built for the days that matter

The file won't explain itself.
Open it anyway.

The 40 GB disk image. HexWrite opens very large files — multi-gigabyte binaries, disk images and memory dumps — through block-mapped stream indexing, so scrubbing a 40 GB image costs no more memory than scrubbing a 40 KB one.
The header that doesn't match. HexWrite compares a file's magic bytes against its extension and tells you when they disagree — then repairs the header at offset 0x0 in one click.
The edit you have to prove. Edits are held in a virtual buffer; the original file is never touched until you choose to save in place or export a patched copy — with fresh digests of what changed.
02The instrument panel

Friendly on the surface.
Forensic underneath.

Data Inspector & Live Disassembly

Integers, floats, and live ARM64 disassembly under the cursor — both endiannesses, Mac timestamps, and an interactive bit visualizer.

// ARM64 · ARM32 · x86 · x86_64

Split View & Byte Diffing

Compare two binary files side by side. Differing bytes are highlighted in both panes as you work.

// mount a comparison target

YARA-style Pattern Scanning

Write a rule and get every offset where its bytes match. The pattern engine matches contiguous literal bytes — regular expressions, hex wildcards and jumps are not supported.

// $mz = { 4D 5A }

Lua Scripting

Automate with embedded Lua. Scripts read and patch bytes through a restricted API, inside a sandboxed engine.

// read_bytes(offset, length)

Surgical Byte Patching & Delta Export

Patch bytes, prove what changed. The original is untouched until you export, with fresh digests. Inject values as hex or Base64.

// MD5 + SHA-256, pre and post

File Header Verification & Repair

Magic bytes are checked against the extension the file claims; when they disagree, HexWrite flags it — and one click repairs the header at offset 0x0.

// magic-byte analysis
Entropy Overview — a sampled overview (100 samples) drawn onto the scrollbar to guide where you look. Native macOS UI — Light and Dark, and the app is localized in 15 languages.
03The instrument itself

Watch it read, compare, and prove.

HexWrite Split View diffing two binary files side by side with differing bytes highlighted in both panes
Split View — differing bytes highlighted in both panes
HexWrite after a byte patch and Surgical Export: one patched cell, with pre- and post-export MD5 and SHA-256 digests in the status bar
Surgical Export — patch a byte, export with fresh digests
HexWrite Pattern Scan finding four matches of a literal byte rule across a disk image, each with its offset and matched bytes
Pattern Scan — every offset where the bytes match
04Zero Telemetry
FORENSIC SANDBOX & OFFLINE SECURITY ARCHITECTURE

Zero Telemetry.

The only network traffic HexWrite generates is Apple's StoreKit connection to the App Store. No crash logs, usage data, or file metadata are ever transmitted to ProfWorkBench — we operate no servers that could receive them.

HexWrite runs inside the macOS App Sandbox with no network entitlement.

HexWrite uses Apple's StoreKit framework to communicate with the App Store solely to validate and manage licenses and subscriptions. That traffic goes to Apple, not to ProfWorkBench, and is governed by Apple's privacy policy.

HexWrite's Zero Telemetry panel describing its forensic sandbox and offline security architecture
APP SANDBOX NO NETWORK ENTITLEMENT NO ACCOUNTS
05Pricing

Reading is free. Changing bytes is Pro.

The hex grid, the Data Inspector's decoders and the disassembler are free. Byte editing, Surgical Export, and the Parser, Lua and Pattern Scan workspaces are part of HexWrite Pro.

View-Only Mode
$0
A free hex viewer — mount any binary, read every byte.
  • Full hex grid, any file size
  • Data Inspector decoders
  • Live disassembly
  • Split View byte diffing
  • Byte editing & export
Download free
HexWrite Pro Annual Pass
$9.99 / year
Annual access to all Pro forensic features.
  • Everything in View-Only Mode, plus:
  • Byte editing & injection
  • Surgical Export with digests
  • Parser, Lua & Pattern Scan
  • Renews annually unless cancelled
Get the app → unlock inside
PAY ONCE
HexWrite Pro Lifetime
$39.99 one-time
Unlock unlimited byte patching & exports.
  • All Pro features, forever
  • One purchase, never renews
  • Byte editing, export, all workspaces
  • All future updates included
Get the app → unlock inside

TRY IT FREE, UNLOCK WHEN READY — HexWrite is free to download. Mount any binary, read the full hex grid, decode bytes in the Data Inspector, disassemble instructions, and diff two files side by side — no purchase required. Editing bytes, Surgical Export, and the Parser, Lua and Pattern Scan workspaces are HexWrite Pro: an in-app purchase, available as an annual subscription or a one-time lifetime unlock. Subscriptions renew annually unless cancelled in Settings.

US PRICING — THE APP STORE SHOWS YOUR LOCAL PRICE · ALL PURCHASES ARE HANDLED SECURELY BY APPLE THROUGH THE MAC APP STORE

06Common questions

Before you ask —

Is HexWrite free?
Free to download. Reading is free — the hex grid, the Data Inspector's decoders and the disassembler. Byte editing, Surgical Export, and the Parser, Lua and Pattern Scan workspaces are part of HexWrite Pro, an in-app purchase available as an annual subscription or a one-time lifetime unlock.
Does HexWrite support YARA rules?
It's YARA-style, deliberately. The pattern engine matches contiguous literal bytes — regular expressions, hex wildcards (??), jumps ([n]) and modifiers are not supported. Write a rule of literal bytes and get every offset where they match.
What does HexWrite send over the network?
The only network traffic HexWrite generates is Apple's StoreKit connection to the App Store. No crash logs, usage data, or file metadata are ever transmitted to ProfWorkBench — we operate no servers that could receive them. That StoreKit traffic goes to Apple, not to ProfWorkBench, and is governed by Apple's privacy policy.
Can it really open a 40 GB image?
Yes. Files are opened through block-mapped stream indexing, so scrubbing a 40 GB image costs no more memory than scrubbing a 40 KB one.
Does patching modify my original file?
Not until you say so. Edits are held in a virtual buffer; the original file is never touched until you choose to save in place or export a patched copy — with fresh digests so you can prove what changed.
How does the annual subscription work?
HexWrite Pro Annual Pass renews annually unless cancelled in Settings, and you can cancel anytime. The one-time HexWrite Pro Lifetime unlock never renews. All purchases are handled by Apple.
HexWrite app icon

See what the bytes actually say.

Free to download. Reading is free. Pro opens the editing bench — as an annual subscription or a one-time lifetime unlock.

Download on the Mac App Store
NATIVE MACOS · ZERO TELEMETRY · APP SANDBOX · APP IN 15 LANGUAGES