Malwagon is a cloud-based malware analysis sandbox for examining suspicious files and activity.
Alternatives to Palo Alto Networks WildFire
ANY.RUN is a cloud-based malware analysis and threat intelligence service for security teams.
CAPE Sandbox is a free, open-source malware analysis tool that runs suspicious files in isolated virtual machines while recording behavior and forensic artifacts.
- 4
CrowdStrike Falcon Pro
CrowdStrike Falcon Pro is endpoint protection that combines antivirus prevention, threat visibility, built-in intelligence and response.
AndroidiOSWebAPI7.1From $8.33 a month - 5
Retrace
Retrace is an AI-powered malware analysis platform built around interactive sandboxes for Windows, macOS, Linux, and Android virtual machines.
Free planAndroidWebAPILinux6.9Free plan - 6

Detonate
Detonate runs software dependencies in isolated micro-virtual machines and observes their runtime behavior for supply chain security.
Free planWebAPILinuxSelf-hosted6.6From $415.83 a month - 7
ThreatLab
ThreatLab is a paid, on-premises malware analysis sandbox for security teams, with analysis running on hardware they control.
WebWindows6.3From $84 a month - 8

ReversingLabs Cloud Sandbox
ReversingLabs Cloud Sandbox runs submitted files in isolated environments to observe what they do, complementing static analysis.
AndroidWebAPILinux6.2 - 9
Hatching Triage
Hatching Triage is a cloud-based malware sandbox for automated analysis of suspicious files and URLs.
AndroidWebAPILinux6.1 - 10
Kaspersky Research Sandbox
Kaspersky Research Sandbox analyzes suspicious objects to investigate their origins, gather behavior-based indicators of compromise and identify…
AndroidWebAPILinux6.1 - 11
SorbSecurity Cloud Sandbox
SorbSecurity Cloud Sandbox (SCS) analyzes suspicious files in isolated environments to help identify threats.
AndroidWebAPISelf-hosted6.1 - 12

Hybrid Analysis
Hybrid Analysis is a community malware analysis service for examining unknown files and URLs.
Free planWebAPI6.0Free plan - 13

AppRemover
AppRemover is a module in OPSWAT’s OESIS Framework for developers and technology vendors embedding endpoint protection into their products.
LinuxmacOSWindows5.8 - 14
DRAKVUF Sandbox
DRAKVUF Sandbox is a free, open-source system for automated black-box malware analysis powered by the DRAKVUF engine.
WebAPILinuxSelf-hosted5.8 - 15
FortiSandbox
FortiSandbox detects and classifies emerging or unknown threats, including zero-days, ransomware, malware, and AI-based attacks.
WebSelf-hosted5.3 - 16
VirusTotal Intelligence
VirusTotal Intelligence is a paid search service for examining files and related threat data in VirusTotal’s dataset.
WebAPI5.3 - 17
ThreatAnalyzer
ThreatAnalyzer is an automated malware analysis sandbox from VIPRE Security Group, the provider identified as a Ziff Davis subsidiary.
APISelf-hosted5.2 - 18
Trellix Intelligent Sandbox
Trellix Intelligent Sandbox is a threat analysis product designed to detect advanced, evasive malware and turn threat information into protective action.
WebAPISelf-hosted5.2 - 19
5.0 - 204.6
