• HOME
  • CATEGORIES

    • CATEGORIES

    • Browse All Categories
  • FOR VENDORS

    • FOR VENDORS

    • Log In to Vendor Portal
    • Get Started
  • REVIEWS

    • REVIEWS

    • Write a Review
    • Product Reviews
    • Vendor Directory
    • Product Comparisons
  • GARTNER PEER COMMUNITY™
  • GARTNER.COM
  • Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQPrivacyTerms of Service
    ©2026 Gartner, Inc. and/or its affiliates.
    All rights reserved.
  • Categories

    • Loading categories...

      Browse All Categories

      Loading markets...

  • For Vendors

    • Log In to Vendor Portal 

    • Get Started 

  • Write a Review

Join / Sign In
  1. Home
  2. /
  3. ANY.RUN Sandbox
Logo of ANY.RUN Sandbox

ANY.RUN Sandbox

byANY.RUN
in Intrusion Detection and Prevention Systems
4.9

Overview

Product Information on ANY.RUN Sandbox

Updated 2nd April 2025

What is ANY.RUN Sandbox?

ANY.RUN provides an interactive sandbox for malware analysis, offering deep visibility into threat behavior in a secure, cloud-based environment with Windows, Linux, and Android support. It helps SOC teams accelerate monitoring, triage, DFIR, and threat hunting —enabling them to analyze more threats in a team and process more alerts in less time.

ANY.RUN Sandbox Pricing

ANY.RUN Sandbox Product Images

ANY.RUN Malware Sandbox
ANY.RUN Malware Sandbox
ANY.RUN Malware configuration
ANY.RUN Malware configuration
ANY.RUN MITRE ATT&CK Matrix
ANY.RUN MITRE ATT&CK Matrix

Overall experience with ANY.RUN Sandbox

Manager, IT Security and Risk Management
1B - 3B USD, Transportation
FAVORABLE

“Interactive sandbox that fits day to day SOC/Security work”

5.0
Feb 11, 2026
We originally came across ANY.RUN because we genuinely loved their interactive sandbox. From the start it just worked. The interface is intuitive, the detonation process is smooth, and the ability to actively interact with malware during analysis instead of just receiving static results makes a huge difference for real world investigations. Being able to click through processes, inspect network activity, and pivot in real time gives us far better context than traditional automated sandboxes.
There are no reviews in this category.
CRITICAL

About Company

Company Description

Updated 7th December 2023

ANY.RUN serves as a sophisticated online malware analysis service, designed to research dynamic and static aspects of diverse cyber threats. It operates primarily as an interactive tool for assessment, purposed to present exhaustive information through task execution. The prime goal of ANY.RUN is to offer a full-fledged panorama of the process creation in real time during simulation, boosting research accuracy. Understanding the limitations of automated analysis, often susceptible to deception by advanced malicious applications, ANY.RUN offers a more reliable method of interactive examination, enabling real-time access to the sandbox simulation.

Company Details

Updated 26th February 2025
Company type
Private
Year Founded
2015
Head office location
Dubai Silicon Oasis, United Arab Emirates
Number of employees
51 - 200
Website
https://any.run/

Do You Manage Peer Insights at ANY.RUN?

Access Vendor Portal to update and manage your profile.

Key Insights

A Snapshot of What Matters - Based on Validated User Reviews

Reviewer Insights for: ANY.RUN Sandbox
Deciding Factors: ANY.RUN Sandbox Vs. Market Average
Performance of ANY.RUN Sandbox Across Market Features

ANY.RUN Sandbox Likes & Dislikes

Like

One of the biggest strengths of our team has been the flexibility. The ability to choose different operating systems, browsers, and even mobile environments allowed us to accurately emulate user scenarios instead of guessing. That flexibility has helped us replicate suspicious behavior much more precisely. Sharing sessions internally within the team's licensed account has also been incredibly useful. We can keep investigations private when needed while still collaborating internally, which strikes the right balance between control and teamwork.

Like

Sandbox experience, reporting functionality, and the ability to customize the VM. Support seems very friendly and available.

Like

Looking at the analysis unfolds live in real time

Dislike

The biggest downside is tied to the free tier. While the free version is great for testing the product and understanding its capabilities, everything runs publicly. That creates risk. If someone uploads a PDF or email that contains information not intended for public view, it becomes part of a publicly accessible session. For organizations handling sensitive data, that is a gamble we simply cannot take. The private team license resolves that issue, but it is something customers should clearly understand before using the free option in a business context.

Dislike

The only thing that comes to mind is the plan side of the service, maybe more options could be better.

Dislike

copy and paste feature.. duration of the investigation should be longer than 60 sec default mark having the option on the alaysis screen interface bigger clearer

Top ANY.RUN Sandbox Alternatives

Logo of Trend Micro TippingPoint Threat Protection System
1. Trend Micro TippingPoint Threat Protection System
4.8
(176 Ratings)
Logo of Cisco Secure Firewall
2. Cisco Secure Firewall
4.1
(79 Ratings)
Logo of Trellix Intrusion Prevention System
3. Trellix Intrusion Prevention System
4.4
(77 Ratings)
View All Alternatives

Peer Discussions

ANY.RUN Sandbox Reviews and Ratings

4.9

(35 Ratings)

Rating Distribution

5 Star
89%
4 Star
11%
3 Star
0%
2 Star
0%
1 Star
0%
Why ratings and reviews count differ?

Customer Experience

Evaluation & Contracting

4.7

Integration & Deployment

4.7

Service & Support

4.8

Product Capabilities

4.8

Filter Reviews
Sort By:
Most helpful
Last 12 Months
Star Rating
Reviewer Type
Reviewer's Company Size
Reviewer's Industry
Reviewer's Region
Reviewer's Job Function
  • Manager, IT Security and Risk Management
    1B-10B USD
    Transportation
    Review Source

    Interactive sandbox that fits day to day SOC/Security work

    5.0
    Feb 11, 2026
    We originally came across ANY.RUN because we genuinely loved their interactive sandbox. From the start it just worked. The interface is intuitive, the detonation process is smooth, and the ability to actively interact with malware during analysis instead of just receiving static results makes a huge difference for real world investigations. Being able to click through processes, inspect network activity, and pivot in real time gives us far better context than traditional automated sandboxes.
  • IT Security & Risk Management Associate
    50M-1B USD
    Manufacturing
    Review Source

    In-Depth Sandbox Analysis and Helpful Team Consistently Noted by Product Users

    5.0
    Dec 19, 2025
    The product is very reliable and gives a very deep analysis for url and malicious programs. The reporting functionality is super-useful. The OS choice is very important for different types of analysis, also the process and internet tracking of the VM is fantastic. The team is also very experienced and helpful.
  • IT Security & Risk Management Associate
    50M-1B USD
    Construction
    Review Source

    Attachment Review and URL Link Features Stand Out in This Sandbox Tool

    4.0
    Jan 26, 2026
    so far any run is a great sandbox comapare to whats out there. what works is the attachment reviewal and the url link. what could be improve maybe is the way we copy paste to get the link outside of the platform
  • IT Security & Risk Management Associate
    1B-10B USD
    IT Services
    Review Source

    Sandbox Environment Offers Seamless Testing Without Notable Disadvantages

    5.0
    Jan 27, 2026
    I use any run sandbox environment very often for my work. I find the tool very convenient to run my tests.
  • Manager, IT Security and Risk Management
    50M-1B USD
    Construction
    Review Source

    Customizable Analysis Supported but Advanced Tools Locked Behind Higher Tiers

    5.0
    Jan 27, 2026
    It is one of the best and more versatile tools for malware analysis, their analysis is quick and generates multiple insights in a short period of time
...
Showing Result 1-5 of 37

Recommended Gartner Research

  • Market Guide for Intrusion Detection and Prevention Systems

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

This site is protected by hCaptcha and its Privacy Policy and Terms of Use apply.


Software reviews and ratings for EMMS, BI, CRM, MDM, analytics, security and other platforms - Peer Insights by Gartner
Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQsPrivacyTerms of Use

©2026 Gartner, Inc. and/or its affiliates.

All rights reserved.