SorbSecurity Cloud Sandbox vs ThreatLab
SorbSecurity Cloud Sandbox
sorbsecurity.comThreatLab
threatlabsandbox.comSide by side
| Figure | SorbSecurity Cloud Sandbox | ThreatLab |
|---|---|---|
| Price from | — | $84/mo |
| Free plan | — | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| Android | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | — |
| Plans published | 0 | 2 |
| Spec score · Malware Analysis Sandboxes | 7.5 (#12) | 7.5 (#13) |
| Maker | The product datasheet identifies SorbSecurity Cloud Sandbox as a SorbSecurity product; the maker's site footer names Sorb Security Pte Ltd. | The site identifies the maker as BrightByte Labs LLC. |
| Purpose | SorbSecurity Cloud Sandbox (SCS) analyzes suspicious files in an isolated environment to identify threats. | ThreatLab is a local malware analysis sandbox for security teams, with analysis running on hardware they control. |
| Reporting | SCS provides detailed analysis reports intended to give security teams context about analyzed threats. | It generates PDF reports with executive summaries, indicators of compromise, severity distribution, and technical details, with custom branding. |
| Threat detection | The sandbox uses multiple layers of dynamic, behavior-driven analysis to detect challenging threats, including zero-day threats. | The product includes DLL injection, credential access, scheduled task, service, ransomware canary, and certificate store monitoring. |
Plans
In their own words
SorbSecurity Cloud Sandbox
SorbSecurity Cloud Sandbox analyzes suspicious files in isolated environments using static and dynamic evaluation. Dynamic analysis simulates real-world scenarios to examine file behavior, while behavioral analytics seek threats that may exploit unknown vulnerabilities. The product provides visual reports covering identified threats, behavior, and response actions. Listed analysis environments include Windows and Android virtual systems, with anti-evasion methods, callback detection, interactive sandbox mode, and capture of packets, original files, tracer logs, and screenshots. Supported file types include APK, DOC/DOCX, EML, EXE, ISO, PDF, PowerPoint, scripts, and archives; the customer agreement sets a 100M maximum file size. A REST API handles file and URL analysis, task searches, reports, indicators of compromise, screenshots, and PCAP downloads. Request-rate and total-request limits apply under the terms of service. SCS integrates with firewalls, antivirus, endpoint protection, and named Fortinet products. On-premise deployment supports high-availability clustering and GUI or CLI configuration. The listed price starts at $3/user/mo with a 30-day trial.
ThreatLab
ThreatLab has no write-up on Specifiction yet; its figures are above.