Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | VirusTotal by VirusTotal View product | Joe Sandbox by Joe Sandbox View product |
|---|---|---|
| Overview | ||
| What it is | See what VirusTotal offers: live YARA hunting. It is built for SOC alert triage enrichment, supports cloud deployment and competes with other Threat Intelligence tools. | Joe Sandbox: deep behavioral analysis, anti-evasion and bare-metal detonation and multi-OS support. Built for YARA rule generation. Compare Malware Analysis alternatives. |
| Product type | Crowdsourced Threat Intelligence & Multi-Engine File Analysis | Deep Behavioral Malware Analysis & Evasion Detection Sandbox |
| Best for | Cybersecurity, SOC Teams, Incident Response, Threat Hunting, Financial Services | Cybersecurity, Incident Response, Defense, Financial Services, Government |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloud | SaaSCloudHybridOn-Premise |
| Deployment details | Cloud SaaS; API Service; Cloud SaaS; High-Throughput REST API | Cloud SaaS; On-premises; Virtual Appliance; Cloud SaaS; On-premises Server; Hardware Appliance; Hybrid |
| Data residency | United States; European Union; Google Cloud Infrastructure | Switzerland; European Union; Customer On-Premises Enclave |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Suspicious ExecutablesDocumentsScriptsURLsDomainsIP Addresses | Executable BinariesOffice DocumentsScriptsURLsAPKsFirmware |
| Compliance | SOC 2 Type IIISO 27001GDPRGoogle Cloud Security Standards | ISO 27001GDPRSwiss Data Protection Act |
| Integrations & coverage | ||
| Integrations | Google CloudSplunkMicrosoft SentinelMISPCortex XSOARREST APIs | SplunkMicrosoft SentinelIBM QRadarMISPThreatConnectREST APIs |
| Industries | CybersecuritySOC TeamsIncident ResponseThreat HuntingFinancial Services | CybersecurityIncident ResponseDefenseFinancial ServicesGovernment |
| Regions | Global | Global |
| Vendor | ||
| Company | VirusTotal | Joe Sandbox |
| Headquarters | Malaga, Spain | Zurich, Switzerland |
| Company size | 100,000+ (parent: Google) | 11-50 |
| Founded | 2004 | 2011 |
Overview
What it is
VirusTotal
See what VirusTotal offers: live YARA hunting. It is built for SOC alert triage enrichment, supports cloud deployment and competes with other Threat Intelligence tools.Joe Sandbox
Joe Sandbox: deep behavioral analysis, anti-evasion and bare-metal detonation and multi-OS support. Built for YARA rule generation. Compare Malware Analysis alternatives.Product type
VirusTotal
Crowdsourced Threat Intelligence & Multi-Engine File AnalysisJoe Sandbox
Deep Behavioral Malware Analysis & Evasion Detection SandboxBest for
VirusTotal
Cybersecurity, SOC Teams, Incident Response, Threat Hunting, Financial ServicesJoe Sandbox
Cybersecurity, Incident Response, Defense, Financial Services, GovernmentPricing
Pricing model
VirusTotal
Contact VendorJoe Sandbox
Contact VendorFree trial
VirusTotal
Free trial: yesJoe Sandbox
Free trial: yesDeployment
Deployment options
VirusTotal
SaaSCloud
Joe Sandbox
SaaSCloudHybridOn-Premise
Deployment details
VirusTotal
Cloud SaaS; API Service; Cloud SaaS; High-Throughput REST APIJoe Sandbox
Cloud SaaS; On-premises; Virtual Appliance; Cloud SaaS; On-premises Server; Hardware Appliance; HybridData residency
VirusTotal
United States; European Union; Google Cloud InfrastructureJoe Sandbox
Switzerland; European Union; Customer On-Premises EnclaveKey features
What it offers
VirusTotal
- Multi-scanning across 70+ antivirus engines
- Dynamic behavioral sandboxing
- VirusTotal Intelligence search
- Live YARA hunting (Livehunt)
- VirusTotal Graph visualization
- Automated multi-engine malware scanning
- Threat hunting with YARA rules
- Adversary infrastructure tracking
Joe Sandbox
- Deep behavioral analysis
- Anti-evasion and bare-metal detonation
- multi-OS support (Windows, macOS, Linux, Android)
- MITRE ATT&CK mapping
- IOC extraction
- Deep malware behavioral analysis
- Anti-evasion threat analysis
- Forensic incident investigation
Platform & access
API access
VirusTotal
API access: yesJoe Sandbox
API access: yesSingle sign-on (SSO)
VirusTotal
SSO: yesJoe Sandbox
SSO: yesRole-based access (RBAC)
VirusTotal
RBAC: yesJoe Sandbox
RBAC: yesMulti-tenant
VirusTotal
Multi-tenant: yesJoe Sandbox
Multi-tenant: yesMobile app
VirusTotal
Mobile app: noJoe Sandbox
Mobile app: noSupported platforms
VirusTotal
Suspicious ExecutablesDocumentsScriptsURLsDomainsIP Addresses
Joe Sandbox
Executable BinariesOffice DocumentsScriptsURLsAPKsFirmware
Compliance
VirusTotal
SOC 2 Type IIISO 27001GDPRGoogle Cloud Security Standards
Joe Sandbox
ISO 27001GDPRSwiss Data Protection Act
Integrations & coverage
Integrations
VirusTotal
Google CloudSplunkMicrosoft SentinelMISPCortex XSOARREST APIs
Joe Sandbox
SplunkMicrosoft SentinelIBM QRadarMISPThreatConnectREST APIs
Industries
VirusTotal
CybersecuritySOC TeamsIncident ResponseThreat HuntingFinancial Services
Joe Sandbox
CybersecurityIncident ResponseDefenseFinancial ServicesGovernment
Regions
VirusTotal
Global
Joe Sandbox
Global
Vendor
Company
VirusTotal
VirusTotalJoe Sandbox
Joe SandboxHeadquarters
VirusTotal
Malaga, SpainJoe Sandbox
Zurich, SwitzerlandCompany size
VirusTotal
100,000+ (parent: Google)Joe Sandbox
11-50Founded
VirusTotal
2004Joe Sandbox
2011