Malwagon
Malwagon: A broad sandbox with free scans, private paid reports, exports and API access. Ranked #10 of 26 in Malware Analysis Sandboxes by our editors (8.4/10); pricing: Free plan; best for budget-conscious teams needing broad exports.
At a glance
- Editor score8.4 / 10
- PricingFree plan
- Best forBudget-conscious teams needing broad exports
- Free planYes
- Paid from$790/yr
- URL analysisYes
- Facts checked20 Sep 2026
Where it wins
- Static and dynamic analysis across isolated virtual machines
- ATT&CK, STIX 2.1, MISP, YARA, Sigma and Suricata exports
- URL detonation, network capture, IOC extraction and API access
Where it doesn't
- Free reports are public and network-isolated
- Private reports and all seven sandboxes require a paid plan
- Concurrency and scan credits vary by plan
Our verdict on Malwagon
Malwagon is a cloud-based malware analysis sandbox for individual researchers, professional analysts and SOC teams. It detonates files, URLs, commands, documents and packages in isolated virtual machines, combining static and dynamic analysis with process, file, registry, network and DNS monitoring. The service also supports browser-based URL analysis, indicator extraction, ATT&CK mapping, threat-intelligence exports and generated detection rules.
The free options make initial analysis accessible. Free scan requires no account, allows 3 scans per source address per day, uses Windows 10 22H2, produces public reports and keeps the network isolated without internet egress. Community adds 20 scan credits per month, Windows 10 and Ubuntu 24.04 sandboxes, one running scan and static and dynamic analysis. Pro costs $79 per month or $790 per year for 200 credits, all 7 sandboxes, 3 concurrent scans, private reports, URL and package analysis, REST API and MCP server access. Business costs $199 per month or $1,990 per year for 500 credits and 5 concurrent scans with the same main paid features. Team / Enterprise adds 5,000 credits, 10 seats, 10 concurrent scans, shared credits, role management and MCP access.
Malwagon stands out when exported intelligence and detection content matter alongside detonation. It can capture browser screenshots, response bodies, packets, network traffic and DNS activity, then extract defanged indicators and export ATT&CK Navigator, STIX 2.1 and MISP data. Generated YARA, Sigma and Suricata rules extend the workflow beyond a single report. Teams needing private analysis, more sandbox images or higher concurrency should choose a paid tier; researchers needing only occasional public scans may find Free scan sufficient. Organizations requiring a different deployment model or retention policy should evaluate alternatives before adopting it.
Questions about Malwagon
Does Malwagon have a free plan? Yes: the Free scan plan is free; paid plans start at $79/mo (Pro).
How much does Malwagon cost? Malwagon lists 2 paid plans; the lowest is Pro at $79/mo.
What does Malwagon run on? Web. It runs in the cloud.
Who is Malwagon built for? Solo users, small businesses, mid-market companies and enterprises (our editorial estimate).
Your product? Our editors can test Malwagon in depth and publish a review, labelled as paid · from $149/mo →
Malwagon pricing
All 5 Malwagon plans and prices →
Malwagon fact sheet
| Free plan | Yes |
|---|---|
| Paid from | $790/yr |
| URL analysis | Yes |
| API access | Yes |
| Network traffic analysis | Yes |
| IOC extraction | Yes |
| File size limit | 128 MB |
| Result retention | Not verified |
| Deployment model | Cloud |
| Deployment | Cloud |
| Platforms | Web |
| Support | Email, Docs |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Free plan (source) |
| Website | malwagon.com |
| Facts checked | 20 Sep 2026 |
Alternatives to Malwagon
- ANY.RUNInteractive browser-based analysis with strong SOC integrations and team controls.9.4
- Joe SandboxA broad sandbox for analysts who need deep evidence, IOC reporting, and flexible exports.9.3
- CAPE SandboxA broad, self-hosted sandbox for dynamic analysis, extraction, debugging, and network evidence.9.1
See all Malwagon alternatives →
Also Ranked In
Malwagon is ranked in 2 of our directories.
Used Malwagon? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Malwagon for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Malwagon is listed in our Malware Analysis Sandboxes directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/malwagon/"><img src="https://www.itechguides.com/best/badge/malwagon.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Nov 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update