Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Joe Sandbox by Joe Sandbox View product | VirusTotal by VirusTotal View product |
|---|---|---|
| Overview | ||
| What it is | Joe Sandbox: deep behavioral analysis, anti-evasion and bare-metal detonation and multi-OS support. Built for YARA rule generation. Compare Malware Analysis alternatives. | See what VirusTotal offers: live YARA hunting. It is built for SOC alert triage enrichment, supports cloud deployment and competes with other Threat Intelligence tools. |
| Product type | Deep Behavioral Malware Analysis & Evasion Detection Sandbox | Crowdsourced Threat Intelligence & Multi-Engine File Analysis |
| Best for | Cybersecurity, Incident Response, Defense, Financial Services, Government | Cybersecurity, SOC Teams, Incident Response, Threat Hunting, Financial Services |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudHybridOn-Premise | SaaSCloud |
| Deployment details | Cloud SaaS; On-premises; Virtual Appliance; Cloud SaaS; On-premises Server; Hardware Appliance; Hybrid | Cloud SaaS; API Service; Cloud SaaS; High-Throughput REST API |
| Data residency | Switzerland; European Union; Customer On-Premises Enclave | United States; European Union; Google Cloud Infrastructure |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Executable BinariesOffice DocumentsScriptsURLsAPKsFirmware | Suspicious ExecutablesDocumentsScriptsURLsDomainsIP Addresses |
| Compliance | ISO 27001GDPRSwiss Data Protection Act | SOC 2 Type IIISO 27001GDPRGoogle Cloud Security Standards |
| Integrations & coverage | ||
| Integrations | SplunkMicrosoft SentinelIBM QRadarMISPThreatConnectREST APIs | Google CloudSplunkMicrosoft SentinelMISPCortex XSOARREST APIs |
| Industries | CybersecurityIncident ResponseDefenseFinancial ServicesGovernment | CybersecuritySOC TeamsIncident ResponseThreat HuntingFinancial Services |
| Regions | Global | Global |
| Vendor | ||
| Company | Joe Sandbox | VirusTotal |
| Headquarters | Zurich, Switzerland | Malaga, Spain |
| Company size | 11-50 | 100,000+ (parent: Google) |
| Founded | 2011 | 2004 |
Overview
What it is
Joe Sandbox
Joe Sandbox: deep behavioral analysis, anti-evasion and bare-metal detonation and multi-OS support. Built for YARA rule generation. Compare Malware Analysis alternatives.VirusTotal
See what VirusTotal offers: live YARA hunting. It is built for SOC alert triage enrichment, supports cloud deployment and competes with other Threat Intelligence tools.Product type
Joe Sandbox
Deep Behavioral Malware Analysis & Evasion Detection SandboxVirusTotal
Crowdsourced Threat Intelligence & Multi-Engine File AnalysisBest for
Joe Sandbox
Cybersecurity, Incident Response, Defense, Financial Services, GovernmentVirusTotal
Cybersecurity, SOC Teams, Incident Response, Threat Hunting, Financial ServicesPricing
Pricing model
Joe Sandbox
Contact VendorVirusTotal
Contact VendorFree trial
Joe Sandbox
Free trial: yesVirusTotal
Free trial: yesDeployment
Deployment options
Joe Sandbox
SaaSCloudHybridOn-Premise
VirusTotal
SaaSCloud
Deployment details
Joe Sandbox
Cloud SaaS; On-premises; Virtual Appliance; Cloud SaaS; On-premises Server; Hardware Appliance; HybridVirusTotal
Cloud SaaS; API Service; Cloud SaaS; High-Throughput REST APIData residency
Joe Sandbox
Switzerland; European Union; Customer On-Premises EnclaveVirusTotal
United States; European Union; Google Cloud InfrastructureKey features
What it offers
Joe Sandbox
- Deep behavioral analysis
- Anti-evasion and bare-metal detonation
- multi-OS support (Windows, macOS, Linux, Android)
- MITRE ATT&CK mapping
- IOC extraction
- Deep malware behavioral analysis
- Anti-evasion threat analysis
- Forensic incident investigation
VirusTotal
- Multi-scanning across 70+ antivirus engines
- Dynamic behavioral sandboxing
- VirusTotal Intelligence search
- Live YARA hunting (Livehunt)
- VirusTotal Graph visualization
- Automated multi-engine malware scanning
- Threat hunting with YARA rules
- Adversary infrastructure tracking
Platform & access
API access
Joe Sandbox
API access: yesVirusTotal
API access: yesSingle sign-on (SSO)
Joe Sandbox
SSO: yesVirusTotal
SSO: yesRole-based access (RBAC)
Joe Sandbox
RBAC: yesVirusTotal
RBAC: yesMulti-tenant
Joe Sandbox
Multi-tenant: yesVirusTotal
Multi-tenant: yesMobile app
Joe Sandbox
Mobile app: noVirusTotal
Mobile app: noSupported platforms
Joe Sandbox
Executable BinariesOffice DocumentsScriptsURLsAPKsFirmware
VirusTotal
Suspicious ExecutablesDocumentsScriptsURLsDomainsIP Addresses
Compliance
Joe Sandbox
ISO 27001GDPRSwiss Data Protection Act
VirusTotal
SOC 2 Type IIISO 27001GDPRGoogle Cloud Security Standards
Integrations & coverage
Integrations
Joe Sandbox
SplunkMicrosoft SentinelIBM QRadarMISPThreatConnectREST APIs
VirusTotal
Google CloudSplunkMicrosoft SentinelMISPCortex XSOARREST APIs
Industries
Joe Sandbox
CybersecurityIncident ResponseDefenseFinancial ServicesGovernment
VirusTotal
CybersecuritySOC TeamsIncident ResponseThreat HuntingFinancial Services
Regions
Joe Sandbox
Global
VirusTotal
Global
Vendor
Company
Joe Sandbox
Joe SandboxVirusTotal
VirusTotalHeadquarters
Joe Sandbox
Zurich, SwitzerlandVirusTotal
Malaga, SpainCompany size
Joe Sandbox
11-50VirusTotal
100,000+ (parent: Google)Founded
Joe Sandbox
2011VirusTotal
2004