


ANY.RUN Sandbox is an interactive online malware analysis service created for dynamic as well as static research of multiple types of cyber threats.

ANY.RUN provides cybersecurity products to organizations and individual researchers that strengthen their ability to analyze, investigate, and understand emerging and evolving threats. The company has a suite of Threat Intelligence Feeds, Threat Intelligence Lookup, and YARA Search. Threat Intelligence Lookup is an online tool that lets users query IOCs against a large database. The software provides context and actionable insights on events, IP addresses, domains, file hashes, URLs, and more, allowing you to quickly evaluate the risk of IOCs during incident response or cyber threat hunting. A threat intelligence feed provides a near real-time stream of threat data from external sources. Organizations leverage these feeds to keep security defenses like SIEMs up-to-date against new attacks. Keep your solutions up-to-date with the latest malicious IPs, URLs, and domains, available in JSON and STIX.



ANY.RUN delivers essential solutions for SOC and MSSP teams, enabling threat monitoring, early detection, as well as confident triage and incident response. Used by over 15,000 organizations and 600,000 security professionals worldwide, it seamlessly integrates into existing workflows to supports the full SOC cycle with in-depth malware analysis and enterprise-grade threat intelligence. ANY.RUN’s Interactive Sandbox, Threat Intelligence Lookup, and Threat Intelligence Feeds enhance security operations in enterprises by accelerating investigations, enriching indicators with actionable intelligence, and reducing manual effort across workflows.