ANY.RUN

RUN is a cybersecurity company focused on interactive malware analysis and threat intelligence. Founded in 2015, the company operates from Dubai, United Arab Emirates, and provides a cloud-based sandbox that lets security professionals investigate suspicious files, URLs and network activity in real time. RUN emphasizes interactive investigation, allowing analysts to observe processes, network connections, registry changes and other behaviors while a sample is running. The platform is used by security operations centers, incident responders, malware researchers and managed security providers. Its capabilities help teams investigate phishing, malware, ransomware and other suspicious activity and turn observations into actionable threat intelligence. RUN supports analysis across multiple operating-system environments and provides searchable intelligence from sandbox activity. The service is designed to shorten investigation time by giving analysts direct visibility into malicious behavior instead of requiring them to wait for a static report. The company also provides threat intelligence feeds and related security research capabilities. RUN has developed a global user base among cybersecurity professionals and is commonly used as an analysis layer alongside SIEM, SOAR and endpoint security platforms. Its interactive model makes it particularly useful when analysts need to understand how a suspicious object behaves and communicate findings quickly.