Malwagon review
A broad sandbox with free scans, private paid reports, exports and API access.
Reviewed by iTechGuides Editors · Editorial team · Updated Nov 2026
Malwagon is a cloud-based malware analysis sandbox for individual researchers, professional analysts and SOC teams. It detonates files, URLs, commands, documents and packages in isolated virtual machines, combining static and dynamic analysis with process, file, registry, network and DNS monitoring. The service also supports browser-based URL analysis, indicator extraction, ATT&CK mapping, threat-intelligence exports and generated detection rules.
The free options make initial analysis accessible. Free scan requires no account, allows 3 scans per source address per day, uses Windows 10 22H2, produces public reports and keeps the network isolated without internet egress. Community adds 20 scan credits per month, Windows 10 and Ubuntu 24.04 sandboxes, one running scan and static and dynamic analysis. Pro costs $79 per month or $790 per year for 200 credits, all 7 sandboxes, 3 concurrent scans, private reports, URL and package analysis, REST API and MCP server access. Business costs $199 per month or $1,990 per year for 500 credits and 5 concurrent scans with the same main paid features. Team / Enterprise adds 5,000 credits, 10 seats, 10 concurrent scans, shared credits, role management and MCP access.
Malwagon stands out when exported intelligence and detection content matter alongside detonation. It can capture browser screenshots, response bodies, packets, network traffic and DNS activity, then extract defanged indicators and export ATT&CK Navigator, STIX 2.1 and MISP data. Generated YARA, Sigma and Suricata rules extend the workflow beyond a single report. Teams needing private analysis, more sandbox images or higher concurrency should choose a paid tier; researchers needing only occasional public scans may find Free scan sufficient. Organizations requiring a different deployment model or retention policy should evaluate alternatives before adopting it.
Questions about Malwagon
Does Malwagon have a free plan? Yes: the Free scan plan is free; paid plans start at $79/mo (Pro).
How much does Malwagon cost? Malwagon lists 2 paid plans; the lowest is Pro at $79/mo.
What does Malwagon run on? Web. It runs in the cloud.
Who is Malwagon built for? Solo users, small businesses, mid-market companies and enterprises (our editorial estimate).
Malwagon pros and cons
- Where it wins
- Static and dynamic analysis across isolated virtual machines
- ATT&CK, STIX 2.1, MISP, YARA, Sigma and Suricata exports
- URL detonation, network capture, IOC extraction and API access
- Where it doesn't
- Free reports are public and network-isolated
- Private reports and all seven sandboxes require a paid plan
- Concurrency and scan credits vary by plan
Malwagon fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update