MetaDefender Cloud scans files, URLs, IPs, and hashes for malware using antivirus engines, CDR, and sandbox detection.
ANY.RUN
ANY.RUN offers a cloud-based malware analysis sandbox and threat intelligence for examining suspicious and malicious activity.
About ANY.RUN
ANY.RUN is a cloud-based malware analysis sandbox. Users submit a suspicious file or link, and the service runs it in an online virtual machine that is configured on the website, so no local hardware setup is needed. The homepage describes the output as reports on observed behavior, indicators of compromise (IOCs), tactics, techniques and procedures (TTPs), and triggered detection rules. The service also offers threat intelligence drawn from shared investigation data, which the homepage says comes from 16,000 companies.
According to the homepage, a free account can be created with a short sign-up form. Analyses can be shared publicly or kept private, but the homepage ties the private option to the Hunter and Enterprise Suite plans. Pricing for each plan is not stated in the source material. The speed and cost figures on the homepage, such as analysis in under two minutes and a reduction in mean time to respond, are vendor claims and are not independently verified here.
Key features
- Interactive sandbox where users can type, scroll, use the clipboard and drag-and-drop files
- Analysis of uploaded files or shared links with behavior, IOCs and TTPs reported
- Real-time flagging of malicious behavior during an analysis session
- Network inspection that identifies C2 addresses and inspects HTTP/S and DNS requests
- In-memory analysis that extracts and decrypts malware configurations
- Standardized Tier 1 reports with verdicts and AI-generated action plan suggestions
Best for: Security operations center (SOC) teams, malware analysts and managed security service providers who need to examine suspicious files and links.
Good for
- Virtual machines are configured online, so no local hardware setup is needed, according to the homepage
- Free account sign-up is described on the homepage
- Standardized reports are described as suitable for sharing within SOC teams
Watch out for
- Keeping analyses private is tied to the Hunter and Enterprise Suite plans, according to the homepage
- Plan pricing is not stated in the source material
- Speed and cost figures on the homepage are vendor claims and are not independently verified
ANY.RUN at a glance
- Website
- any.run
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
ANY.RUN alternatives
Tools and sites you could use instead, ranked by how closely they match.
Triage provides a malware analysis sandbox for sample submissions, with detections, configuration extraction, and public reports.
Hybrid Analysis offers automated malware analysis for submitted files and URLs, using CrowdStrike Falcon Sandbox.
BleepingComputer hosts a malware removal help forum where users can request assistance from authorized responders.
Filescan.io provides malware assessment with a focus on extracting indicators of compromise at scale.
Grype scans container images and filesystems for vulnerabilities; its repository lists container and security topics.
Open source
5 alternativesPopular in Antivirus & Malware Protection
Well-known listings from the same topic.
Microsoft Safety Scannerlearn.microsoft.com/en-us/defender-endpoint/sa…Sandboxie Plussandboxie-plus.comMalwarebytesmalwarebytes.comSandboxsandbox.pikker.eeID Ransomwareid-ransomware.malwarehunterteam.comCuckoocuckoo.cert.ee
ANY.RUN FAQ
Is there a free way to start using ANY.RUN?
The homepage says users can create an account for free by completing a short sign-up form, and then start an analysis.
Can analyses be kept private?
The homepage says analyses can be shared publicly or kept private, with the private option listed for the Hunter and Enterprise Suite plans.
How does an analysis begin?
The homepage says a user can upload a file or share a link to start the analysis.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.