Skip to content
SPECIFICTION
Get listed

Retrace

retrace.cloud

Free plan WebWindowsmacOSLinuxAndroidAPI
Visit retrace.cloud
Spec score 7.9 #6 of 27 in Malware Analysis Sandboxes

Spec sheet

Intended users
The service is designed for legitimate security research, malware analysis, incident response, and threat intelligence.Read 1 Oct 2026 · retrace.cloud
Support
Support is provided according to the user's plan tier.Read 1 Oct 2026 · retrace.cloud
Headquarters
London, United KingdomRead 28 Sep 2026 · retrace.cloud
AI copilot
Retrace's AI copilot answers questions using the sandbox trace and cites specific events, techniques, or captured files.Read 1 Oct 2026 · retrace.cloud
API and limits
API keys must remain confidential, documented rate limits apply, and automated bulk submissions must follow fair-use guidelines.Read 1 Oct 2026 · retrace.cloud
Core purpose
Retrace is an AI-powered malware analysis platform using fully interactive multi-OS sandboxes.Read 1 Oct 2026 · retrace.cloud
Corpus matching
Every detonation is pattern-matched against the user's full sandbox corpus to provide similarity and family evidence.Read 1 Oct 2026 · retrace.cloud
Enterprise capabilities
Enterprise includes dedicated hardware with no shared services, optional UK, EU, or US data residency, SSO/SAML, and custom retention.Read 1 Oct 2026 · retrace.cloud
Enterprise inference
Inference runs on-premises for Enterprise deployments.Read 1 Oct 2026 · retrace.cloud
Operating systems
The sandbox supports Windows, macOS, Linux, and Android virtual machines.Read 1 Oct 2026 · retrace.cloud
Public analyses
Analyses marked public expose their results, events, behavioral data, screenshots, and detection results to all service users.Read 1 Oct 2026 · retrace.cloud
Report exports
AI answers can be exported as Markdown, PDF, or STIX 2.1 bundles for MISP or threat-intelligence platforms.Read 1 Oct 2026 · retrace.cloud
Sandbox isolation
Each sample runs inside a disposable virtual machine that does not touch the user's laptop.Read 1 Oct 2026 · retrace.cloud
Sovereign deployment
Sovereign deployments are fully air-gapped and keep sample bytes, IOCs, and tool calls inside the customer's infrastructure.Read 1 Oct 2026 · retrace.cloud
Team capabilities
The Team tier includes private submissions, priority queueing, REST API access, team management, and audit logging.Read 1 Oct 2026 · retrace.cloud
Telemetry capture
The platform captures file writes, registry activity, network packets, and process spawns for each virtual machine.Read 1 Oct 2026 · retrace.cloud

Plans and prices

Community Free Community feed access · Standard execution queue · Web interface · Basic report export · Unlimited public analyses Read 1 Oct 2026 · retrace.cloud
Enterprise Priced on request Multi-tenant workspace · UK, EU or US data residency on request · Dedicated hardware · SSO/SAML · Custom data retention Read 1 Oct 2026 · retrace.cloud
Sovereign Priced on request Air-gap compatible · Unlimited throughput · Full data sovereignty · Custom hardware support · Dedicated account manager Read 1 Oct 2026 · retrace.cloud
Team Priced on request Private submissions · Priority queueing · REST API access · Team management · Audit logging Read 1 Oct 2026 · retrace.cloud

Every Retrace plan and price →

Where Specifiction places it

Alternatives to RetraceAll alternatives →