I appreciate the ANY.RUN sandbox system because it functions like an online system, similar to a Docker or TryHackMe machine. This provides a valuable platform for IT security research, education, and the safe handling of suspicious and harmful content. One of the outstanding features is the detailed listing of reactions and triggered processes, which allows me to delve deeper into the analysis. The initial setup of ANY.RUN Sandbox was simple, enabling a smooth start with the tool. Overall, I find the service so beneficial that I would give it an unreserved recommendation with the highest rating of 10 out of 10. Review collected by and hosted on G2.com.

I use the free version of ANY.RUN Sandbox, where a 'detonation' is only available for a short time. This limitation means that I cannot always interact in time and may miss some activities that should be observed. Review collected by and hosted on G2.com.

I am able to watch as I safely detonate suspected malware. The report options, even for free users, is amazing, as are the TI Feeds which is critical to my work as a Cybersec Analyst. Any.Run is a tool I use to gather intel about emerging threats which while not affecting me directly, may, and I need to prepare for that. Lastly, the MITRE TTP IOCs are also important so I can perform adversary emulation more quickly. Review collected by and hosted on G2.com.

I wish there were more lower cost paid options, around $50 a month, but I understand why the price is so high given I work in this field and how important this data is. Review collected by and hosted on G2.com.

I find ANY.RUN Sandbox exceptionally effective for dealing with malicious files and malware, thanks to its advanced sandbox environment. The speed and efficiency with which it generates reports are remarkable, allowing me to rapidly finish my work without delays. I regard ANY.RUN Sandbox as the number one sandbox in the world due to its outstanding capabilities. The initial setup was incredibly easy, making it straightforward to integrate into my workflow. It's my main sandbox tool, and I find immense value in its ability to provide comprehensive public reports that detail the intentions, connections, and threats associated with malicious files, enhancing my ability to safely analyze potentially dangerous content. Review collected by and hosted on G2.com.

I find that while EVERYTHING works well overall, ANY.RUN Sandbox could improve by adding a feature that identifies whether any Command and Control (C2) activity is connected to the malicious file. Review collected by and hosted on G2.com.

I use ANY.RUN Sandbox to analyze samples of malware and network traffic and to see the indicators of compromise. I really like the 'tree of process' feature because it shows the command arguments of malware, which is very helpful. The initial setup was easy, and I'm so satisfied with the tool that I'd recommend it to others. Review collected by and hosted on G2.com.

I find the subscription of ANY.RUN Sandbox to be the just problem. Review collected by and hosted on G2.com.

I love how ANY.RUN Sandbox provides a detailed breakdown of information during the sandboxing of an Indicator of Compromise (IoC), which includes revealing the domains a suspicious site or file connects to and the processes that are run. This feature is incredibly valuable for analyzing potentially malicious sites and files. Additionally, I find it remarkably easy to extract the information as it is nicely collected and easy to view, which makes the analysis more efficient and less cumbersome. Moreover, the fact that ANY.RUN Sandbox is a web app is super convenient. It eliminates the need for testing malicious sites or files on my own hardware, ensuring safety and ease of use. These aspects make ANY.RUN Sandbox an essential tool in my work, significantly easing the evaluation and understanding of potential threats. Review collected by and hosted on G2.com.

I find the free version's 5-minute time limit to be quite short. Another issue is how the platform behaves when resizing the window. These are relatively minor faults, but they do impact the overall experience. Review collected by and hosted on G2.com.

The sandbox options are robust.

The cover all the basics.

The UI is easy to understand.

The price was right for us (small team that needs a few monthly reviews).

The training was good.

The performance is good. Review collected by and hosted on G2.com.

The theme of the UI could use some updating (color, size, etc.).

When results are in, notices could be highlighted more. Review collected by and hosted on G2.com.

I rely on ANY.RUN Sandbox to safely analyze malware, which is incredibly important for maintaining security. It provides easy accessibility, allowing me to swiftly use the sandbox without any hassle. The speed and reliability of the platform stand out, enabling me to analyze threats quickly and consistently. I particularly value how ANY.RUN Sandbox aids users in safely understanding and handling threats, ensuring I can dissect and interpret potential risks effectively. It breaks down complex elements such as traffic analysis and process analysis in a way that is straightforward and accessible. This ease of breakdown means I can delve into detailed analyses without getting lost in complicated data. Overall, I find ANY.RUN Sandbox to be a valuable tool that serves my needs excellently and is a nice tool to have in my security toolkit. The seamless initial setup process further enhances its appeal, and I fully trust its capabilities, giving it a perfect 10 in terms of how likely I am to recommend it to others. Review collected by and hosted on G2.com.

I dislike the time limit for non-premium users; 5 minutes is too low. Review collected by and hosted on G2.com.

I genuinely appreciate ANY.RUN Sandbox for its easy accessibility and the fact that it's free to use. This makes it a highly valuable tool for gathering information on Indicators of Compromise (IOCs). The capability to run IOCs directly and efficiently gather information is significant for my research needs. I find ANY.RUN Sandbox to be one of the best sandboxes available, particularly because of how straightforward it is to use. Transitioning from Hybrid Analysis to ANY.RUN was remarkably easy, mainly due to the straightforward setup and the cost-free advantage. This makes ANY.RUN an especially appealing choice, and its ease of use stands out as a major advantage. Review collected by and hosted on G2.com.

I feel that integrating information from other Threat Intelligence (TI) sources into ANY.RUN Sandbox could significantly enhance its capabilities. Having a feature that merges data with ongoing research would provide a more comprehensive insight into Indicators of Compromise (IOCs) and improve the overall value of the tool. Review collected by and hosted on G2.com.

I love using ANY.RUN Sandbox for its capability to analyze suspicious links and attachments in a secure environment. It allows me to interact with files within the sandbox, which adds tremendous value by enabling me to safely execute files and observe any potential threats they might contain. This interactive feature helps me to thoroughly assess the behavior of a file in a controlled setting, enhancing my ability to detect threats. Additionally, the ease of the initial setup stands out, making it straightforward to get started with the tool. The overall design allows me to thoroughly test and diagnose without fear of risk to my system, ultimately offering peace of mind in threat analysis. Review collected by and hosted on G2.com.

I find it sometimes confusing to look at all the output from ANY.RUN Sandbox to determine if there was anything malicious or not. Review collected by and hosted on G2.com.

the type of sandbox that allows you to interact with the virtual machine, its processes, connections, and everything else it does, enabling a more thorough analysis of malware or suspicious files Review collected by and hosted on G2.com.

the limitations of licenses—for example, operating systems—the basic version gives you two Review collected by and hosted on G2.com.