G2

Dave P.

Member of Board of Directors: APWG and APWG EU

Small-Business (50 or fewer emp.)

3/12/2026

"Extremely Valuable Malware Metadata for Large-Scale Threat Research"

4.5/5

What do you like best about ANY.RUN Sandbox?

We submit URLs and file samples as part of our phishing, malware, and spam research at the Cybercrime Information Center, where we study how criminals acquire resources for cybercrimes. Using ANY.RUN we can augment the metadata that we gather for millions of domain names and IP addresses that we use to (1) identify resources associated with an attack or campaign, (2) identify which domain registry (TLD) operators, domain registrars, or hosting providers are exploited by cybercriminals. Review collected by and hosted on G2.com.

What do you dislike about ANY.RUN Sandbox?

We haven't attempted to integrate the service into our analysis because of the sheer scale of our data sets and the potential cost or overhead. Review collected by and hosted on G2.com.

What problems is ANY.RUN Sandbox solving and how is that benefiting you?

We collect millions of spam, malware, or phishing attack reports monthly. Some of our feeds do not provide sufficient metadata to investigate as thoroughly as we would like. The additional metadata that we get by submitting samples to ANY.RUN is extremely valuable and hard to obtain elsewhere. Review collected by and hosted on G2.com.

Response from Thomas Harris of ANY.RUN Sandbox

edit

Thank you for sharing your insights and experiences! We truly appreciate your feedback, as it helps us continuously improve ANY.RUN and make it even better for our users.

Your thoughts and suggestions are invaluable to us—we take note of every detail and are always working on enhancements. Stay tuned for updates, and thank you for being a part of our community!