ANY.RUN is a cloud-based malware analysis and threat intelligence service for security teams.
Alternatives to Malwagon
Malwagon gives incident responders, detection engineers, SOC analysts and threat researchers a cloud sandbox for files, URLs, commands, documents, packages and Windows kernel drivers. It combines static inspection with ETW telemetry, memory forensics, hypervisor introspection, network capture and scored verdicts. Reports can map activity to MITRE ATT&CK, extract indicators, generate YARA, Sigma and Suricata rules, and export to several formats. A free plan is available,…
CAPE Sandbox is a free, open-source malware analysis tool that runs suspicious files in isolated virtual machines while recording behavior and forensic artifacts.
Detonate runs software dependencies in isolated micro-virtual machines and observes their runtime behavior for supply chain security.
- 4
CrowdStrike Falcon Pro
CrowdStrike Falcon Pro is endpoint protection that combines antivirus prevention, threat visibility, built-in intelligence and response.
AndroidiOSWebAPI7.1From $99.99 a year - 5
Retrace
Retrace is an AI-powered malware analysis platform built around interactive sandboxes for Windows, macOS, Linux, and Android virtual machines.
Free planAndroidWebAPILinux6.9Free plan - 6

Symantec IT Management Suite
Symantec IT Management Suite manages, patches, and remediates application and operating system configurations across desktops, laptops, and servers…
WebAPILinuxmacOS6.8 - 7
ThreatLab
ThreatLab is a paid, on-premises malware analysis sandbox for security teams, with analysis running on hardware they control.
WebWindows6.3From $84 a month - 8
Cisco Catalyst Center
Cisco Catalyst Center is a centralized controller and management dashboard for enterprise network operations.
WebAPILinuxmacOS6.2 - 9
Hatching Triage
Hatching Triage is a cloud-based malware sandbox for automated analysis of suspicious files and URLs.
AndroidWebAPILinux6.1 - 10
SorbSecurity Cloud Sandbox
SorbSecurity Cloud Sandbox (SCS) analyzes suspicious files in isolated environments to help identify threats.
AndroidWebAPISelf-hosted6.1 - 11

Hybrid Analysis
Hybrid Analysis is a community malware analysis service for examining unknown files and URLs.
Free planWebAPI6.0Free plan - 12

ReversingLabs Cloud Sandbox
ReversingLabs Cloud Sandbox runs submitted files in isolated environments to observe what they do, complementing static analysis.
AndroidWebAPILinux6.0 - 13
Kaspersky Research Sandbox
Kaspersky Research Sandbox analyzes suspicious objects to investigate their origins, gather behavior-based indicators of compromise and identify…
AndroidWebAPILinux5.9 - 14
DRAKVUF Sandbox
DRAKVUF Sandbox is a free, open-source system for automated black-box malware analysis powered by the DRAKVUF engine.
WebAPILinuxSelf-hosted5.8 - 15
FortiSandbox
FortiSandbox detects and classifies emerging or unknown threats, including zero-days, ransomware, malware, and AI-based attacks.
WebSelf-hosted5.3 - 16
VirusTotal Intelligence
VirusTotal Intelligence is a paid search service for examining files and related threat data in VirusTotal’s dataset.
WebAPI5.3 - 17
ThreatAnalyzer
ThreatAnalyzer is an automated malware analysis sandbox from VIPRE Security Group, the provider identified as a Ziff Davis subsidiary.
APISelf-hosted5.2 - 18
Trellix Intelligent Sandbox
Trellix Intelligent Sandbox is a threat analysis product designed to detect advanced, evasive malware and turn threat information into protective action.
WebAPISelf-hosted5.2 - 195.1
- 205.0
- 214.8
- 22
AhnLab MDS
LinuxWindows4.7 - 234.7
- 24
Palo Alto Networks WildFire
Palo Alto Networks WildFire is paid web software for examining URLs, files, and network traffic.
Web4.7 - 254.6
- 264.6

