VMRay – VMRay Platform

The VMRay Platform is a malware and phishing analysis suite built around a hypervisor-based sandbox that observes samples from outside the analysis environment, so evasive malware has little chance of noticing it. Since 2023 the platform has been sold as separate products rather than the legacy Analyzer: DeepResponse for analysts who submit samples manually and want granular reports, FinalVerdict for large enterprises and MSSPs that automate triage of EDR, XDR, SIEM and SOAR alerts, and TotalInsight for teams that curate their own threat intelligence, with a newer UniqueSignal threat intelligence feed alongside. Analysis covers files, emails, URLs and attachments, supported by machine learning and browser simulation that clicks through phishing flows, and results include verdicts, IOCs, MITRE ATT&CK mapping and exportable reports. A REST API and connectors link the platform to EDR, XDR, SIEM, SOAR and threat intelligence tools. Deployment options include VMRay Cloud, a European sovereign cloud, on-premises and fully air-gapped installations, with the vendor promising feature parity across them, and customers can choose German or US hosting and set how long analysis data is kept. The vendor states that submitted samples and reports are never shared with third parties.