
Hybrid Analysis
Hybrid Analysis is a community malware analysis service for examining unknown files and URLs.
What Hybrid Analysis is
Hybrid Analysis is a community malware analysis service for examining unknown files and URLs. It accepts files for static and dynamic analysis and offers searches across reports, YARA rules, strings, and indicators of compromise. File analysis can include Falcon Static Analysis, reputation lookups, antivirus engines, and static analysis. The free community service allows 30 file uploads per month, with a maximum file size of 100 MB. Registered users can create a restricted free Public API key for file and URL submissions, searches, report retrieval, and data erasure, subject to privileges. It supports hybrid static and runtime analysis for Windows 7 and Windows 10, and extensive static analysis for Android APKs. Integrations listed include VirusTotal, OPSWAT Metadefender, and SIEM systems. Submitted content may be retained, used, or shared at the service’s discretion, including screenshots and metadata from samples marked not to share. Use is limited to internal business security or legitimate research. A paid Falcon Sandbox option starts at 250 files per month, with an on-premises option described for keeping files in a customer environment.
Good
- Free community service allows 30 uploads monthly.
- Analyzes files and URLs.
- Searches reports, YARA, strings, and IOCs.
- Offers a restricted free API key.
- Includes Windows and Android analysis support.
Watch out
- Uploads are limited to 30 files monthly.
- Maximum file size is 100 MB.
- Submitted content and metadata may be shared.
- Use is restricted to business security or legitimate research.
Who it suits
It suits security teams and legitimate researchers who need file or URL analysis, search, or API access. Organizations that need submitted samples kept within their own environment can consider the described on-premises option.
Verdict
Hybrid Analysis offers multiple ways to examine and search malware samples, with API access available to registered users. Review its monthly upload limit, sharing practices, and permitted-use terms before submitting content.
Plans and prices
From Hybrid Analysis's own pricing page, checked 30 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Hybrid Analysis community service | Free | 30 file uploads per month · 100 MB maximum upload size |
The facts
Each one read from Hybrid Analysis's own pages, with the date it was checked.
What it does
- Analysis
- The service accepts files for in-depth static and dynamic analysis.checked 30 Sep 2026
- API
- Registered users can generate a restricted free Public API key, and the API supports file and URL submissions, search, report retrieval, and data erasure subject to privileges.checked 30 Sep 2026
- File analysis
- The homepage says file collections receive Falcon Static Analysis (ML), reputation lookups, AV engines, and static analysis.checked 30 Sep 2026
- Integrations
- The FAQ lists integrations including VirusTotal, OPSWAT Metadefender, SIEM systems such as HP ArcSight, Suricata, and Phantom.checked 30 Sep 2026
- Intended use
- The terms limit use of the service and its content to internal business security or legitimate research purposes.checked 30 Sep 2026
- Monthly limit
- CrowdStrike says Hybrid Analysis limits file uploads to 30 per month.checked 30 Sep 2026
- Paid option
- CrowdStrike offers Falcon Sandbox licenses starting at 250 files per month and describes an on-premises option for keeping files within the customer's environment.checked 30 Sep 2026
- Privacy
- Submitted content may be retained, used, and distributed at Hybrid Analysis’s discretion; even samples marked not to share may have screenshots and associated metadata shared with the community.checked 30 Sep 2026
- Purpose
- Hybrid Analysis is a free community malware analysis service that detects and analyzes unknown threats.checked 30 Sep 2026
- Search
- The site offers report, YARA, and string searches, plus IOC search.checked 30 Sep 2026
- Supported analysis systems
- The FAQ says hybrid static and runtime analysis is supported on Windows 7 and Windows 10, with extensive static analysis for Android APK files.checked 30 Sep 2026
- Upload limit
- The homepage states a maximum upload size of 100 MB.checked 30 Sep 2026
The company
- Headquarters
- Frankfurt, Germanychecked 28 Sep 2026
Money
- Trial
- CrowdStrike’s Hybrid Analysis page invites users to request a Falcon Sandbox free trial.checked 30 Sep 2026
Alternatives to Hybrid Analysis
- 1
Malwagon
Free planWebAPILinuxmacOS7.7From $79 a month - 2

ANY.RUN
Free planAndroidiOSWebAPI7.5Free plan - 3
CAPE Sandbox
Free planOpen sourceWebAPILinuxSelf-hosted7.4Free plan - 4

Detonate
Free planWebAPILinuxSelf-hosted7.3From $4,990 a year - 5
CrowdStrike Falcon Pro
AndroidiOSWebAPI7.1From $99.99 a year - 6
Retrace
Free planAndroidWebAPILinux6.9Free plan
