Malware analysis. Made clear.

See what's
underneath.
Act on it.

MalSight gives security teams a clearer picture of suspicious files. Explore findings and indicators, keep investigations organized, and take downloadable reports and available detection rules into your response workflow.

Start investigating Explore the platform
Open workspace Explore the platform
FIG. 01 / ILLUSTRATIONLOOK CLOSER
A cybersecurity engineer reveals the source code inside a bug An engineer wearing glasses holds a magnifying glass over a black six-legged bug. As the engineer moves the lens, green and orange source code scrolls into view inside the glass. SPECIMEN / ILLUSTRATION // inside the binary function inspect() { const bytes = read(); decode(bytes); if (match(rule)) { flag("suspicious"); } } // inside the binary function inspect() { const bytes = read(); decode(bytes); if (match(rule)) { flag("suspicious"); } } SOURCE CODE REVEALED THE EVIDENCE IS IN THE DETAILS.
QUESTION THE BINARY.UNCOVER THE BEHAVIOR
01 / The intelligence

From unknown file
to informed action.

Understand the findings, identify file patterns, and explore network indicators. Reports and detection outputs help you decide what to investigate next and where to focus your defenses.

01 / UNDERSTAND

Understand the findings.

A downloadable report brings the assessment, observations, and indicators into one readable account. Evidence gaps and limitations help you focus follow-up investigation.

MALWARE REPORT · .MD
02 / DETECT

Recognize the pattern.

YARA rules express distinctive file indicators as detection patterns. Use them as a starting point for finding matching content in other suspicious files.

YARA RULE PACK · .YAR
03 / DEFEND

Watch the network.

Network signatures turn indicators such as domains and addresses into IDS rules. Bring those leads into your monitoring workflow to look for matching traffic.

IDS SIGNATURES · .RULES

Outputs vary with the evidence; detection rules are not included in every analysis and need analyst review before use.

02 / The process

Less manual work.
More understanding.

Keep submissions, progress, and findings together. Return to an investigation with its context intact, then take the results into your team's next steps.

01 — SUBMIT

Bring the binary.

Add a suspicious file up to 50 MiB to your workspace. Follow its analysis status alongside your other submissions.

02 — INVESTIGATE

Follow the evidence.

Explore the assessment and indicators to identify leads, frame questions, and decide where a closer look matters.

03 — APPLY

Take intelligence further.

Download results to share with your team, or retrieve them through the API to connect investigations with your existing tools.

Choose your plan

Free

$0

  • 1 analysis, one time
  • Up to 1 active analysis
  • 128 MiB storage
Start free

Pro

$100 USD / month

  • 10 analyses per billing month
  • Up to 3 active analyses
  • 1 GiB storage
Choose Pro

Ultra

$300 USD / month

  • 50 analyses per billing month
  • Up to 5 active analyses
  • 10 GiB storage
Choose Ultra

Free includes one analysis for the life of the account. Pro and Ultra allowances renew with each Stripe billing period. Retries use your allowance.

Your next investigation starts here.

Start with one free analysis. Upgrade when you need more.

Create your accountOpen workspace