RC Flash
The AI lab for machine firmware

Custom ECU tuning, built on our own software

We read, map and safely rewrite the software inside engine and machine controllers — on a stack we own from the cable to the checksum — and use it to make American agriculture, and the fleets around it, stronger.

Tune your car

Custom calibration from your stock read, revisions included. From $399.

All platforms →

Who we make stronger

Focus

Agriculture

Tractors, combines, sprayers and the Bosch, Cummins and Denso controllers inside them, on J1939. Calibration within compliance, module programming for replacement parts, derate diagnosis, and fleet programs — in the field, in season.

Commercial

Fleet pickups, vocational trucks, Class 8. One versioned calibration standard across a mixed fleet, governors and idle control, and engineering for controllers that need to do something the OEM never shipped.

Personal

Send a stock read, get a calibration built for your hardware and your fuel, and revise it from your logs. VAG, Subaru, Ford, GM, Mercedes, Hyundai/Kia, Toyota — petrol and diesel.

rcflash: one stack, owned end to end

Most shops rent their capability from closed-source tool vendors and can only sell what those vendors support. rcflash is ours — one Rust codebase from the USB descriptor to the checksum stamp — so the question for any controller is engineering time, not a vendor's roadmap.

Cables
Any J2534 PassThruTactrix OpenPort 2.0 (native)Scanmatik Pro 3SocketCANPEAK PCANMacchina M2ELM327 · USB / BLE / Wi-FiRC Flash ESP32 dongle
Protocols
ISO-TPUDSKWP2000SAE J1939GMLANSubaru SSMVAG SA2
Serviceapp.rcflash.ioAPIagents work the queueIntelligenceGhidra pipelineA2L corpus indexmap inferenceModificationcalpatch · datashims · codechecksum repairFlashmodule recipesseed-keybootloadersProtocolUDSKWP2000J1939GMLANTransportevery cableown dongleremote relayOwned end to end

The lab

Our research is automatically understanding embedded binaries: finding the maps, the code that reads them, the checksums that guard them and what every value means — in a binary we have never seen. Analysis runs on Ghidra, the reverse-engineering suite the NSA released as open source, extended with our own tooling. The ground truth is a corpus of real, labelled ECU descriptions.

  • EDC173,031diesel · ag, truck, commercial
  • ME7.x339petrol · C167
  • MED9.x320petrol GDI · PowerPC
  • MED17 / MEV17254petrol · TriCore
  • other64
5,665
ECU variants, labelled
901,201
distinct map & signal names
99.4%
of 12,943 real files parsed
216/216
ME7 sector checksum, solved

Bosch ME7's sector checksum: worked around by the community for years, solved here on every sector of every sample.

We can make it work

Not a slogan about effort. A statement about the stack.

If it speaks a bus, we have the transport — 8 cable backends, including our own dongle and a remote relay.

If it has an unlock, we derive it, rather than buy it.

If it has a checksum, we solve it — including ones the industry had worked around for years.

If the feature isn't there, we add it as code: a Rust shim in free flash, with a byte-exact revert.

If nobody has documented it, our tooling maps it.

If it's three states away, our tuner works on your cable over the relay.

Bosch
EDC7 · EDC15 · EDC16 · EDC17 · ME7 · MED9 · MED17 · MG1
Continental / Siemens
Simos 8 · 16 · 18 · SID · PPD · SIM2K
Delphi
DCM3 · DCM6.2 · Multec
Denso · Hitachi
Toyota · Subaru · Mazda · Nissan
Marelli
MJD · IAW
Heavy duty & ag
J1939 · EDC17CV · EDC7 · Cummins · Denso HD

Emissions systems stay in

We don't sell deletes or defeat devices — on road vehicles or on farm equipment. Every change we make is versioned against the machine with a full diff and a byte-exact revert, so you can always show what was changed and what wasn't.

File service

  1. 01

    Send your read

    Pull a stock file with your tool of choice and upload it. We take the raw bin — no proprietary container required.

  2. 02

    We build the calibration

    Identified, mapped and patched on our own stack, against your actual hardware and fuel, with checksums repaired.

  3. 03

    Flash and log

    Write the file, send the logs back. Revisions run in the same thread until it is right.

Stage 1

$399

Stock or bolt-ons. One revision included.

  • /Full calibration
  • /1 revision
  • /3 business day turnaround
Most common

Stage 2

$599

Downpipe, intake, intercooler. Your fuel target.

  • /Full calibration
  • /2 revisions
  • /5 business day turnaround

Custom / E85

$899

Built from your logs against your exact hardware.

  • /Iterative calibration
  • /4 revisions
  • /Direct tuner thread

Personal-vehicle starting prices, charged through Stripe. Ag, fleet, repair and engineering work is quoted in a ticket before any payment is taken. Shops: see the file service.

From the lab

All articles →

Questions

›Do you do emissions deletes?

No. Not on road vehicles and not on farm or nonroad equipment. Tampering law covers both, and it isn't the business — we make machines stronger, more efficient and more repairable with the emissions systems in place.

›My equipment isn't on your list.

Open a ticket with the controller part number. Supporting a new controller is engineering time on our own stack, not a request to a tool vendor.

›Do I need a particular flashing tool?

No. We deliver a plain binary, and for ag and fleet work we can flash remotely with your cable or ours.

›How do ag and fleet programs work?

Each machine is registered, its stock read archived, and every calibration versioned against it with logs and a full diff. Talk to us about a design-partner program for this season.

›Is this safe for a daily driver?

That is most of what we do. Safety strategies stay in; we calibrate for the long run rather than a number on a graph.

Bring us the one nobody else can do.

Sign in with your email — a six-digit code, no password — and open a job.