ANY.RUN Sandbox Pricing Overview

edit

Free Trial

ENTERPRISE

For teams and organizations

Windows 7 32/64-bit

Windows 10 32/64-bit

Windows 11 64-bit

Android 14

Linux Ubuntu 22.04.2 64 bit

Linux Debian 12.2 64-bit (ARM)

Interactive access

Unlimited analyses

Malware configuration

Timeout: 1200 sec

Max input file size: 100MB

Export samples and PCAP (manual only): 20 requests/min

Text reports

URL analysis in different browsers

MITRE ATT&CK mapping

Process behavior graph

Script tracer

QR code analysis

Uploading files to active analysis sessions

Private analyses

Video record

MITM proxy for HTTPS

Commercial usage

Monitoring of system processes

Locale selection

Reboot support

Priority in queue

Various software presets

Tools collection

Custom OpenVPN configuration

Routing via TOR

Residential proxy

Automated interactivity (ML)

Access to IDS rule content

License center

Team privacy

Common analysis history

Productivity tracking

Single Sign-On (SSO)

REST API

JSON summary

Export to MISP format

HTML Document

Browser extension

Common analysis history via API

Integration with SDK

Premium support

Detonation Actions

TI Statistics

TI Lookup Requests: max 100 per team (Trial)

YARA Search Requests: max 100 per team (Trial)

HUNTER

For individuals

Windows 7 32-bit

Windows 10 64-bit

Android 14

Linux Ubuntu 22.04.2 64-bit

Interactive access

Unlimited public analyses

Malware configuration

Timeout: 660 sec

Max input file size: 100MB

Export samples and PCAP (manual only): 20 requests/ min

Text reports

URL analysis in different browsers

MITRE ATT&CK mapping

Process behavior graph

Script tracer

QR code analysis

Detonation Actions

Uploading files to active analysis sessions

Private analyses

Video record

MITM proxy for HTTPS

Commercial usage

Windows 11 64-bit

Monitoring of system processes

Locale selection

Reboot support

Priority in queue

Various software presets

Tools collection

Custom OpenVPN configuration

Routing via TOR

Residential proxy

Access to IDS rule content

JSON summary

Export to MISP format

HTML Document

TI Statistics

TI Lookup Requests: 20 (Trial)

YARA Search Requests: 20 (Trial)

The service has 3 types of plans that meet users’ demands: Community, Hunter, and Enterprise. The main benefit of ANY.RUN is a Community plan without monthly payment that has all the necessary features for a proper analysis. We do our best to make our community exchange information as much as possible and get access to the new malware samples for free.

The paid subscriptions let malware analysts not worry about the privacy of their investigations at all. Users can also get extended functionalities, such as different versions of operating systems, video recording, and the team management feature.
Learn more on the pricing page https://app.any.run/plans/

ANY.RUN Sandbox has 2 pricing editions. A free trial of ANY.RUN Sandbox is also available. Look at different pricing editions below and see what edition and features meet your budget and needs.

Pricing information for ANY.RUN Sandbox is supplied by the software provider or retrieved from publicly accessible pricing materials. Final cost negotiations to purchase ANY.RUN Sandbox must be conducted with the seller.

For corporate users, you can request a trial version of the full functionality of the service.

Pricing information was last updated on January 29, 2026

Pricing Insights

Averages based on real user reviews.

Time to Implement

1 month

Return on Investment

6 months

Average Discount

16%

Perceived Cost

$$$$$

How much does ANY.RUN Sandbox cost?

Data powered by BetterCloud.

Estimated Price

$$k - $$k

Per Year

Based on data from 4 purchases.

Top-Rated Alternatives

View All Alternatives

ANY.RUN Sandbox Pricing Reviews

(2)

Tara D.

Cybersecurity Analyst

Mid-Market (51-1000 emp.)

11/13/2025

"Any.RUN is a crital tool in my arsenal"

5/5

What do you like best about ANY.RUN Sandbox?

I am able to watch as I safely detonate suspected malware. The report options, even for free users, is amazing, as are the TI Feeds which is critical to my work as a Cybersec Analyst. Any.Run is a tool I use to gather intel about emerging threats which while not affecting me directly, may, and I need to prepare for that. Lastly, the MITRE TTP IOCs are also important so I can perform adversary emulation more quickly. Review collected by and hosted on G2.com.

What do you dislike about ANY.RUN Sandbox?

I wish there were more lower cost paid options, around $50 a month, but I understand why the price is so high given I work in this field and how important this data is. Review collected by and hosted on G2.com.

Response from Thomas Harris of ANY.RUN Sandbox

edit

Thank you for sharing your insights and experiences! We truly appreciate your feedback, as it helps us continuously improve ANY.RUN and make it even better for our users.

Your thoughts and suggestions are invaluable to us—we take note of every detail and are always working on enhancements. Stay tuned for updates, and thank you for being a part of our community!

Mahmoud M.

Cybersecurity Researcher

Small-Business (50 or fewer emp.)

7/15/2025

"Powerful and intuitive malware analysis platform for professionals"

4/5

What do you like best about ANY.RUN Sandbox?

The existent-clip synergistic analysis is perfectly game-modified. Can supervise malware conduct measure-by-measure, track web connection, register changes, and register system adjustment. The envision procedure tree and elaborated account make it easy to understand even complex menace. To appreciate the velocity and simpleness of the interface. Review collected by and hosted on G2.com.

What do you dislike about ANY.RUN Sandbox?

Sometimes the free level have limitations with runtime or register size‚ and certain advanced malware circumvent analysis by find the sandbox. It would be great if more OS option or furtive environment were add in the hereafter. Review collected by and hosted on G2.com.

What problems is ANY.RUN Sandbox solving and how is that benefiting you?

ANY.RUN help me safely canvas and understand malicious package without infect my local system. It solve the job of postulate procure‚ insulate environment to discover malware doings in real clip. This hold significantly meliorate my efficiency in malware analysis‚ incident response‚ and turn technology undertaking‚ relieve clip and cut endangerment. Review collected by and hosted on G2.com.

Response from Thomas Harris of ANY.RUN Sandbox

edit

Thank you for sharing your insights and experiences! We truly appreciate your feedback, as it helps us continuously improve ANY.RUN and make it even better for our users.

New platforms are already in our roadmap! Stay tuned for updates, and thank you for staying with us!