ANY.RUN
7.5#2 in malware analysis sandboxesFree planFree planAndroidiOSWebAPI
VisitANY.RUN vs Kaspersky Research Sandbox
Kaspersky Research Sandbox
5.9#14 in malware analysis sandboxesAndroidWebAPILinux
VisitWhat both publish
| Fact | ANY.RUN | Kaspersky Research Sandbox |
|---|---|---|
| Founded | 2016 | 1997 |
| Integrations | Connectors are offered for Microsoft Defender, Microsoft Sentinel, OpenCTI, SentinelOne, Splunk SOAR, Splunk Enterprise, Cortex XSOAR, Elastic Security, FortiSIEM, FortiSOAR, Google SecOps, and IBM QRadar SOAR. | The product has an API for sending suspicious files for analysis and exporting results to a SOC task management system, and it can integrate with Kaspersky Private Security Network. |
| Intended users | The Enterprise Suite is presented for SMBs, enterprise companies, MSSPs, and government agencies. | Kaspersky describes version 3.0 as designed for security teams and threat researchers. |
| Interactive analysis | Users can control a virtual machine in the browser, click files, open archives, and browse websites during detonation. | Version 3.0 adds VNC visual interaction so analysts can interact with a sample’s execution environment in real time. |
ANY.RUN plans
- CommunityFree
- Enterprise Suite—
- Hunter—
Kaspersky Research Sandbox plans
- Kaspersky Research SandboxPriced on request
Pick ANY.RUN if…
ANY.RUN is aimed at security teams that need to inspect suspicious files or links in an interactive sandbox. Its Enterprise Suite is presented for SMBs, large companies, MSSPs, and government agencies.
Pick Kaspersky Research Sandbox if…
It suits security teams and threat researchers who need to investigate suspicious files and objects. Cloud, on-premise and air-gapped deployment options are listed.