Hatching Triage vs ThreatAnalyzer
Hatching Triage
hatching.ioThreatAnalyzer
threatsecure.aiSide by side
| Figure | Hatching Triage | ThreatAnalyzer |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| Android | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Malware Analysis Sandboxes | 7.6 (#10) | 7.1 (#16) |
| Integrations | Hatching documents a Cortex XSOAR integration that uses the Triage API to submit samples, fetch results, and perform account and profile management tasks. | The page identifies a REST API and Python and C-based SDKs, but does not name third-party integrations. |
| Product | Hatching Triage is a malware sandbox for automated malware analysis. | ThreatAnalyzer is an automated malware analysis sandbox described as a next-generation product from the makers of CWSandbox. |
Plans
In their own words
Hatching Triage
Hatching Triage is a malware sandbox for automated analysis of files and URLs. It supports Windows 7 and 10, Linux, Android, and macOS analysis environments, and accepts more than 100 file types and archives. After unpacking and static analysis, it chooses a dynamic environment for detonation. Users can watch the analysis live and take control of its virtual machine. Reports surface relevant results, including extracted configurations for a growing number of malware families. Profiles preserve settings such as timeouts and internet configuration, and can specify a custom virtual machine. A REST API supports access to analysis data and workflow automation; a documented Cortex XSOAR integration can submit samples, retrieve results, and manage accounts and profiles. Individual users and researchers can use the public cloud for free. Hatching offers a private cloud demo on request, and says Triage can scale to 500,000 analyses per day. Its privacy policy says data is stored in the Netherlands and personal data is encrypted. Active-account data is retained indefinitely; after account deletion, submissions and reports remain, while uploader-linking fields are removed. Deleted data may remain in backups for up to 30 days.
ThreatAnalyzer
ThreatAnalyzer has no write-up on Specifiction yet; its figures are above.