Malwagon is a cloud-based malware analysis sandbox for examining suspicious files and activity.
Alternatives to ANY.RUN
ANY.RUN gives security teams a browser-based virtual machine for examining suspicious files and links in real time. Analysts can review sample behavior, indicators of compromise, tactics, techniques, and triggered detection rules, while its threat intelligence draws on sandbox investigations. API and SDK access, network traffic analysis, IOC extraction, and integrations with security platforms support team workflows. Its free Community plan has a 60-second VM timeout and a…
CAPE Sandbox is a free, open-source malware analysis tool that runs suspicious files in isolated virtual machines while recording behavior and forensic artifacts.
Detonate runs software dependencies in isolated micro-virtual machines and observes their runtime behavior for supply chain security.
- 4
CrowdStrike Falcon Pro
CrowdStrike Falcon Pro is endpoint protection that combines antivirus prevention, threat visibility, built-in intelligence and response.
AndroidiOSWebAPI7.1From $99.99 a year - 5
Retrace
Retrace is an AI-powered malware analysis platform built around interactive sandboxes for Windows, macOS, Linux, and Android virtual machines.
Free planAndroidWebAPILinux6.9Free plan - 6

Symantec IT Management Suite
Symantec IT Management Suite manages, patches, and remediates application and operating system configurations across desktops, laptops, and servers…
WebAPILinuxmacOS6.8 - 7
ThreatLab
ThreatLab is a paid, on-premises malware analysis sandbox for security teams, with analysis running on hardware they control.
WebWindows6.3From $84 a month - 8
Cisco Catalyst Center
Cisco Catalyst Center is a centralized controller and management dashboard for enterprise network operations.
WebAPILinuxmacOS6.2 - 9
Hatching Triage
Hatching Triage is a cloud-based malware sandbox for automated analysis of suspicious files and URLs.
AndroidWebAPILinux6.1 - 10
SorbSecurity Cloud Sandbox
SorbSecurity Cloud Sandbox (SCS) analyzes suspicious files in isolated environments to help identify threats.
AndroidWebAPISelf-hosted6.1 - 11

Hybrid Analysis
Hybrid Analysis is a community malware analysis service for examining unknown files and URLs.
Free planWebAPI6.0Free plan - 12

ReversingLabs Cloud Sandbox
ReversingLabs Cloud Sandbox runs submitted files in isolated environments to observe what they do, complementing static analysis.
AndroidWebAPILinux6.0 - 13
Kaspersky Research Sandbox
Kaspersky Research Sandbox analyzes suspicious objects to investigate their origins, gather behavior-based indicators of compromise and identify…
AndroidWebAPILinux5.9 - 14
DRAKVUF Sandbox
DRAKVUF Sandbox is a free, open-source system for automated black-box malware analysis powered by the DRAKVUF engine.
WebAPILinuxSelf-hosted5.8 - 15
FortiSandbox
FortiSandbox detects and classifies emerging or unknown threats, including zero-days, ransomware, malware, and AI-based attacks.
WebSelf-hosted5.3 - 16
VirusTotal Intelligence
VirusTotal Intelligence is a paid search service for examining files and related threat data in VirusTotal’s dataset.
WebAPI5.3 - 17
ThreatAnalyzer
ThreatAnalyzer is an automated malware analysis sandbox from VIPRE Security Group, the provider identified as a Ziff Davis subsidiary.
APISelf-hosted5.2 - 18
Trellix Intelligent Sandbox
Trellix Intelligent Sandbox is a threat analysis product designed to detect advanced, evasive malware and turn threat information into protective action.
WebAPISelf-hosted5.2 - 195.1
- 205.0
- 214.8
- 22
AhnLab MDS
LinuxWindows4.7 - 234.7
- 24
Palo Alto Networks WildFire
Palo Alto Networks WildFire is paid web software for examining URLs, files, and network traffic.
Web4.7 - 254.6
- 264.6
