ANY.RUN is unclaimed —

ANY.RUN

Interactive Online Malware Sandbox·any.run

ANY.RUN is a cloud-based interactive malware sandbox and threat intelligence service that lets security teams safely detonate and interact with suspicious files, URLs, and phishing samples in real time. It provides SOC-ready reports, IOC/IOA/IOB extraction, network and memory analysis, and a Threat Intelligence Lookup/Feeds database sourced from millions of sandbox sessions. It is used to speed up malware analysis, phishing detection, alert triage, and incident response for security operations teams.

What it's for

Phishing detectionMalware analysisAlert & IOC enrichmentAlert triageIncident responseThreat monitoring & detection engineeringThreat huntingSecurity ROI optimization

Features 19

AI Threat Summary
Automated Interactivity (ML) to trigger evasive threats automatically
Interactive browser-based VM for live malware detonation
Malware configuration extraction and decryption
Memory analysis of threats
MITRE ATT&CK mapping
Multiple guest OS support: Windows, macOS, Linux, Android
Network traffic monitoring (HTTP/S, DNS requests, C2 detection)
Process behavior graph visualization
QR code analysis
Real-time interaction with samples (click, type, scroll, drag-and-drop)
Residential proxy and TOR routing options
REST API, SDK, and STIX/MISP export integrations
Script tracer
Single Sign-On (SSO) for Enterprise Suite
SOC-ready Tier 1 reports with defense action plan
Team management and workspace analytics
Threat Intelligence Feeds from sandbox session data
Threat Intelligence Lookup (TI Lookup) for IOC/IOA/IOB search

At a glance

free tierfree trialAPI

TypeWeb app

DeploymentCloud

PlatformsWeb

ForEnterprise security teams, MSSPs, CISOs, SOC analysts

CompanyANYRUN-FZCO · 2016

Integrations

IBM QRadar SOARMISPSTIX

Complianceself-reported

SOC 2 Type II

Resources

Docs

Pricing

Only the Community plan has a published price (free forever); Hunter and Enterprise Suite are billed yearly with pricing available only by contacting sales. Volume, multi-year, and annual discounts are available by request.

CommunityFree

Free forever plan for individuals getting started.

20% of sandbox functionality, 60 sec VM timeout, 16 MB max file size

HunterQuote

Individual price, billed yearly; pricing available by contacting sales.

70% of sandbox functionality, 660 sec VM timeout, 100 MB max file size

Enterprise SuiteQuote

For SMBs, Enterprise companies, MSSP, and government agencies; individual price billed yearly, contact sales for pricing.

100% of sandbox functionality, 1,200 sec VM timeout, 1,500+ API tasks/month

Multi-year plan rates available. [raw type: other]