Skip to content
SPECIFICTION
Get listed

SorbSecurity Cloud Sandbox

sorbsecurity.com

WebWindowsAndroidAPISelf-hosted
Visit sorbsecurity.com
Spec score 7.5 #12 of 27 in Malware Analysis Sandboxes

What it is

SorbSecurity Cloud Sandbox analyzes suspicious files in isolated environments using static and dynamic evaluation. Dynamic analysis simulates real-world scenarios to examine file behavior, while behavioral analytics seek threats that may exploit unknown vulnerabilities. The product provides visual reports covering identified threats, behavior, and response actions. Listed analysis environments include Windows and Android virtual systems, with anti-evasion methods, callback detection, interactive sandbox mode, and capture of packets, original files, tracer logs, and screenshots. Supported file types include APK, DOC/DOCX, EML, EXE, ISO, PDF, PowerPoint, scripts, and archives; the customer agreement sets a 100M maximum file size. A REST API handles file and URL analysis, task searches, reports, indicators of compromise, screenshots, and PCAP downloads. Request-rate and total-request limits apply under the terms of service. SCS integrates with firewalls, antivirus, endpoint protection, and named Fortinet products. On-premise deployment supports high-availability clustering and GUI or CLI configuration. The listed price starts at $3/user/mo with a 30-day trial.

Spec sheet

Purpose
SorbSecurity Cloud Sandbox (SCS) analyzes suspicious files in an isolated environment to identify threats.Read 7 Oct 2026 · sorbsecurity.com
Intended users
The datasheet says SCS is scalable for large organizations and can enrich custom applications and existing security tools.Read 7 Oct 2026 · sorbsecurity.com
Deployment
The datasheet describes high-availability clustering and GUI and CLI configuration for on-premise deployments.Read 7 Oct 2026 · sorbsecurity.com
API
SCS exposes a REST API for file and URL analysis, task searches, reports, indicators of compromise, screenshots, and PCAP downloads.Read 7 Oct 2026 · doc.sorbsecurity.com
Integrations
The datasheet names FortiGate, FortiMail, FortiWeb, FortiADC, FortiProxy, and FortiClient ATP agent integrations.Read 7 Oct 2026 · sorbsecurity.com
Support
The maker directs SCS inquiries to [email protected] and lists a contact address in Singapore.Read 7 Oct 2026 · sorbsecurity.com
Headquarters
SingaporeRead 28 Sep 2026 · sorbsecurity.com
Maker
The product datasheet identifies SorbSecurity Cloud Sandbox as a SorbSecurity product; the maker's site footer names Sorb Security Pte Ltd.Read 7 Oct 2026 · sorbsecurity.com
Additional analysis features
The datasheet lists anti-evasion techniques, callback detection, interactive sandbox mode, and capture of packets, original files, tracer logs, and screenshots.Read 7 Oct 2026 · sorbsecurity.com
AI analysis
The product datasheet lists AI-powered sandbox malware analysis and machine-learning-powered static code analysis.Read 7 Oct 2026 · sorbsecurity.com
Analysis
SCS runs static and dynamic evaluations of suspect file attachments in secure isolated environments.Read 7 Oct 2026 · sorbsecurity.com
Analysis environments
The datasheet lists Windows and Android as supported virtual OS sandbox types.Read 7 Oct 2026 · sorbsecurity.com
API limits
Organizations have request-rate and total-request limits defined by their terms of service, with separate limits for report and run requests unless otherwise specified.Read 7 Oct 2026 · doc.sorbsecurity.com
Deployment options
The datasheet describes high-availability clustering and GUI and CLI configuration for on-premise deployments.Read 7 Oct 2026 · sorbsecurity.com
Dynamic detection
Its dynamic analysis engine simulates real-world scenarios to examine suspicious file behavior.Read 7 Oct 2026 · sorbsecurity.com
File coverage
The datasheet lists support for file types including APK, DOC/DOCX, EML, EXE, ISO, PDF, PowerPoint, scripts, and archives.Read 7 Oct 2026 · sorbsecurity.com
File size limit
The customer agreement lists a 100M maximum file size for SorbSecurity Cloud Sandbox.Read 7 Oct 2026 · doc.sorbsecurity.com
Product purpose
SorbSecurity Cloud Sandbox (SCS) runs static and dynamic evaluation of suspicious file attachments in isolated environments.Read 7 Oct 2026 · sorbsecurity.com
Reporting
SCS provides detailed analysis reports intended to give security teams context about analyzed threats.Read 7 Oct 2026 · sorbsecurity.com
Status
The maker's service-status page lists the Cloud Sandbox API service as operational.Read 7 Oct 2026 · sorbsecurity.com
Third-party integrations
The datasheet names FortiGate, FortiMail, FortiWeb, FortiADC, FortiProxy, and FortiClient among supported system integrations.Read 7 Oct 2026 · sorbsecurity.com
Threat detection
The sandbox uses multiple layers of dynamic, behavior-driven analysis to detect challenging threats, including zero-day threats.Read 7 Oct 2026 · sorbsecurity.com
Threat intelligence
The datasheet describes dynamic threat database updates with file checksums and malicious URL data.Read 7 Oct 2026 · sorbsecurity.com
Zero-day protection
SCS uses behavioral analytics to identify and block threats that may exploit unknown vulnerabilities.Read 7 Oct 2026 · sorbsecurity.com

Strong points and limits

Strong points

  • Static and dynamic isolated analysis
  • Windows and Android sandbox environments
  • REST API for files and URLs
  • Visual threat and response reports
  • 30-day trial listed

Limits

  • 100M maximum file size
  • API requests have terms-based limits
  • Price starts at $3/user/mo
  • On-premise configuration requires GUI or CLI

Who it suits

SCS suits large organizations and security tools needing isolated file or URL analysis. Its hybrid deployment, API, and listed integrations support custom applications and existing defenses.

Verdict

SCS combines behavior-focused sandboxing, broad file coverage, reporting, and an analysis API. Buyers should account for the file-size ceiling and request limits alongside the starting subscription price.

Where Specifiction places it

Alternatives to SorbSecurity Cloud SandboxAll alternatives →