17.7
Malwagon is a cloud-based malware analysis sandbox for examining suspicious files and activity.
Free planWebAPILinux
Alternatives to Retrace
Retrace examines suspicious software in interactive, disposable virtual machines for Windows, macOS, Linux, and Android. It records file writes, registry activity, network packets, and process launches, then lets an AI copilot answer questions with references to events, techniques, and captured files. Corpus matching adds similarity and family evidence, while answers export to Markdown, PDF, or STIX 2.1. Its free Community plan includes web access and basic report export;…
27.5
ANY.RUN is a cloud-based malware analysis and threat intelligence service for security teams.
Free planAndroidiOSWeb
37.4
CAPE Sandbox is a free, open-source malware analysis tool that runs suspicious files in isolated virtual machines while recording behavior and forensic artifacts.
Free planOpen sourceWebAPILinux
- 4
Detonate
Detonate runs software dependencies in isolated micro-virtual machines and observes their runtime behavior for supply chain security.
Free planWebAPILinuxSelf-hosted7.3From $4,990 a year - 5
CrowdStrike Falcon Pro
CrowdStrike Falcon Pro is endpoint protection that combines antivirus prevention, threat visibility, built-in intelligence and response.
AndroidiOSWebAPI7.1From $99.99 a year - 6
Symantec IT Management Suite
Symantec IT Management Suite manages, patches, and remediates application and operating system configurations across desktops, laptops, and servers…
WebAPILinuxmacOS6.8 - 7
ThreatLab
ThreatLab is a paid, on-premises malware analysis sandbox for security teams, with analysis running on hardware they control.
WebWindows6.3From $84 a month - 8
Cisco Catalyst Center
Cisco Catalyst Center is a centralized controller and management dashboard for enterprise network operations.
WebAPILinuxmacOS6.2 - 9
Hatching Triage
Hatching Triage is a cloud-based malware sandbox for automated analysis of suspicious files and URLs.
AndroidWebAPILinux6.1 - 10
SorbSecurity Cloud Sandbox
SorbSecurity Cloud Sandbox (SCS) analyzes suspicious files in isolated environments to help identify threats.
AndroidWebAPISelf-hosted6.1 - 11
Hybrid Analysis
Hybrid Analysis is a community malware analysis service for examining unknown files and URLs.
Free planWebAPI6.0Free plan - 12
ReversingLabs Cloud Sandbox
ReversingLabs Cloud Sandbox runs submitted files in isolated environments to observe what they do, complementing static analysis.
AndroidWebAPILinux6.0 - 13
Kaspersky Research Sandbox
Kaspersky Research Sandbox analyzes suspicious objects to investigate their origins, gather behavior-based indicators of compromise and identify…
AndroidWebAPILinux5.9 - 14
DRAKVUF Sandbox
DRAKVUF Sandbox is a free, open-source system for automated black-box malware analysis powered by the DRAKVUF engine.
WebAPILinuxSelf-hosted5.8 - 15
FortiSandbox
FortiSandbox detects and classifies emerging or unknown threats, including zero-days, ransomware, malware, and AI-based attacks.
WebSelf-hosted5.3 - 16
VirusTotal Intelligence
VirusTotal Intelligence is a paid search service for examining files and related threat data in VirusTotal’s dataset.
WebAPI5.3 - 17
ThreatAnalyzer
ThreatAnalyzer is an automated malware analysis sandbox from VIPRE Security Group, the provider identified as a Ziff Davis subsidiary.
APISelf-hosted5.2 - 18
Trellix Intelligent Sandbox
Trellix Intelligent Sandbox is a threat analysis product designed to detect advanced, evasive malware and turn threat information into protective action.
WebAPISelf-hosted5.2 - 195.1
- 205.0
- 214.8
- 22
AhnLab MDS
LinuxWindows4.7 - 234.7
- 24
Palo Alto Networks WildFire
Palo Alto Networks WildFire is paid web software for examining URLs, files, and network traffic.
Web4.7 - 254.6
- 264.6