Cisco – Secure Malware Analytics
Cisco Secure Malware Analytics, formerly Threat Grid, combines dynamic and static sandboxing with a large malware knowledge base to give security teams context-rich behavioral reports on suspicious files and URLs.
Compare MA tools
The same fields, shown the same way, for every MA listing — so you can compare across vendors at a glance.
| Pricing | Not provided |
| Deployment | Not specified |
| Support | Not specified |
| Compliance | SOC 2 Type II |
Cisco Secure Malware Analytics, formerly known as Threat Grid, is a malware sandbox that pairs dynamic and static file analysis with a large knowledge base of malware behavior and threat intelligence. Security teams submit suspicious files and URLs and receive a behavioral report that explains what a sample does, how severe the threat is and which campaigns it relates to. Analysts can interact with live samples through Glovebox, search historical results, and pivot across correlated indicators to speed up investigations. A powerful API lets the platform feed detonation results into existing security products and automated workflows, and it is integrated across the Cisco Secure portfolio and many third-party tools. Deployment is flexible: a cloud subscription adds global and historical context, API access and a set of specialized threat intelligence feeds, while on-premises appliances keep sample data inside the organization for teams with strict data-handling needs. Sample packs let buyers scale the number of daily submissions. Cisco has announced end-of-sale for the M6 appliance hardware, so buyers considering an on-premises deployment should confirm current availability with Cisco. The product suits security operations, incident response and threat hunting teams that want context-rich verdicts rather than a simple pass or fail result. Cisco reports SOC 2 Type 2 compliance for the service.
Capabilities
| Dynamic malware sandboxing | |
| Static file analysis | |
| Malware knowledge base with global and historical context | |
| Behavioral indicators & campaign mapping | |
| Glovebox interactive sample analysis | |
| Search & correlation across past samples | |
| URL detonation | |
| API for automation & integration | |
| Cloud subscription with threat intelligence feeds | |
| On-premises appliance option | |
| Sample packs to scale daily submissions | |
| Cisco Secure portfolio integrations | |
| Third-party security integrations |
Reviews
No reviews yet.
Similar MA tools
See allANY.RUN is a cloud-based interactive malware sandbox where analysts detonate files and links in a browser VM, interact in real time and get fast verdicts, IOCs and SOC-ready reports for Windows, Linux, macOS and Android.
CrowdStrike Falcon Sandbox is an automated malware analysis product that combines kernel-level behavioral monitoring, static and memory analysis and malware search to expose evasive threats and extract IOCs.
Recorded Future Malware Intelligence pairs a cloud malware sandbox, formerly Hatching Triage, with natural language hunting, Auto YARA rules and Intelligence Graph context inside its Threat Intelligence module.
Spectra Analyze is ReversingLabs' malware analysis and threat hunting workbench for SOC teams, pairing high-speed static binary decomposition with a built-in private cloud sandbox and large-scale file and network intelligence.