ReversingLabs Cloud Sandbox
reversinglabs.com
What it is
ReversingLabs Cloud Sandbox executes files in isolated environments to observe runtime behavior and complement static analysis. It offers automatic analysis as well as interactive sessions where analysts can engage with a sample while it runs. Analysis supports Windows, macOS, Linux, and Android; Android is available for file submissions, not URL analysis.
Reports include network and behavioral indicators, process activity, registry and file changes, and downloadable artifacts. Files can be submitted through the Dynamic Analysis Submission API. The feature preview permits five samples per day, while full access is available at additional cost through ReversingLabs Sales Support. Individual samples can be up to 400 MB, and artifacts are available for download for one year. For private samples, other ReversingLabs customers may see results but not sample contents, dropped files, PCAP files, or memory string dumps. VPN routing is used when samples may connect to the internet. The service is intended for security operations teams handling incident response and threat hunting. ReversingLabs is headquartered in Cambridge, Massachusetts, and was founded in 2009.
Spec sheet
- Intended users
- ReversingLabs describes Spectra Analyze as a malware analysis workbench for security operations teams handling incident response and threat hunting.Read 3 Oct 2026 · reversinglabs.com
- API
- Files can be submitted directly to the Cloud Sandbox through the Dynamic Analysis Submission API.Read 3 Oct 2026 · docs.reversinglabs.com
- Integrations
- ReversingLabs says its Malware Analysis and Threat Hunting portfolio supports integrations with TIP/SIEM/SOAR platforms, sandboxes, storage systems, email gateways, and web proxies, with APIs and SDKs for customization.Read 3 Oct 2026 · reversinglabs.com
- Privacy
- For private samples, other ReversingLabs customers can access analysis results but not the sample contents, dropped files, PCAP files, or memory string dumps.Read 3 Oct 2026 · docs.reversinglabs.com
- Support
- ReversingLabs says each Malware Analysis and Threat Hunting product includes standard 9x5 support, with a premium 24x7 option available.Read 3 Oct 2026 · reversinglabs.com
- Headquarters
- Cambridge, Massachusetts, USARead 28 Sep 2026 · reversinglabs.com
- Founded
- 2009Read 28 Sep 2026 · reversinglabs.com
- Analysis modes
- It supports automatic analysis and interactive analysis, in which analysts can interact with a sample during a live session.Read 3 Oct 2026 · docs.reversinglabs.com
- Artifact retention
- Dynamic analysis artifacts are available for download for one year, the stated standard retention period for the Cloud Sandbox.Read 3 Oct 2026 · docs.reversinglabs.com
- Dynamic analysis
- The Cloud Sandbox executes files in isolated environments to observe runtime behavior and complement static analysis.Read 3 Oct 2026 · docs.reversinglabs.com
- Feature preview limit
- The documentation says dynamic analysis submissions in the feature preview are limited to five samples per day; full access is available at additional cost through ReversingLabs Sales Support.Read 3 Oct 2026 · docs.reversinglabs.com
- File size limit
- The maximum supported size for an individual sample submitted to the Cloud Sandbox is 400 MB.Read 3 Oct 2026 · docs.reversinglabs.com
- Integration prerequisite
- For the service to be available in Spectra Analyze, the appliance must be connected to Spectra Intelligence.Read 3 Oct 2026 · docs.reversinglabs.com
- Network protection
- When samples may connect to the internet, the service uses VPN routing to mask the origin of network requests and protect its analysis infrastructure.Read 3 Oct 2026 · docs.reversinglabs.com
- Reports
- Completed analyses produce behavior reports with network and behavioral indicators, process activity, registry and file changes, and downloadable artifacts.Read 3 Oct 2026 · docs.reversinglabs.com
- Supported systems
- The sandbox supports analysis on Windows, macOS, Linux, and Android, with Android supported for file submissions rather than URL analysis.Read 3 Oct 2026 · docs.reversinglabs.com
Plans and prices
Strong points and limits
Strong points
- Automatic and interactive analysis modes.
- Reports include network indicators and process activity.
- Files can be submitted through an API.
- Artifacts remain downloadable for one year.
- VPN routing masks the origin of sample network requests.
Limits
- Feature preview is limited to five samples per day.
- Full access is available at additional cost.
- Individual samples are limited to 400 MB.
- Android support excludes URL analysis.
Who it suits
The sandbox suits security operations teams handling incident response or threat hunting who need to examine file behavior. Analysts can choose automatic analysis or interact with samples in live sessions.
Verdict
Cloud Sandbox provides isolated file analysis with reports and API submission. Consider the preview limit, sample-size cap, and additional cost for full access.
Where Specifiction places it
- Malware Analysis Sandboxes#14 of 277.4