CyberIndexBeta

Hybrid Analysis

CrowdStrikeMalware File Scanner (primary)Compare with others in Malware File Scanner

Product

Free public service that runs submitted files and URLs in CrowdStrike Falcon Sandbox and reports the behavioural analysis. It is available as a cloud instance. Delivery is a hosted SaaS service. It is recorded as supporting api integration, hash reputation lookup, sandbox analysis and threat intelligence. Hybrid Analysis is free to use.

Current Version
Cloud service · no version
Product Page
hybrid-analysis.com
Market
SMB
Licence
Free
Price
Free
Record Created
2026-10-10
Last Updated
2026-10-23

Vendor

CrowdStrike was founded in 2011 by George Kurtz and Dmitri Alperovitch on a premise that was contrarian at the time: that the endpoint agent should be thin, the intelligence should live in the cloud, and the important question is not which malware ran but which adversary is behind it. It named the groups it tracked, published on them, and built much of its reputation through incident response on high-profile intrusions. It is listed on Nasdaq and is now one of the largest security companies in the world. Everything is sold on the CrowdStrike Falcon platform, in modules: Falcon Prevent for next-generation antivirus, Falcon Insight for detection and response, Falcon Identity Protection, Falcon Cloud Security, Falcon Exposure Management and Falcon Complete for the fully managed service, with Charlotte AI as the analyst assistant. Falcon Go and Falcon Pro are the packaged tiers for small organisations, which is what appears here. It sells no consumer product. Its agent is also unusual in how it is priced and deployed — per endpoint, cloud-managed, with no on-premise server — which is worth weighing against the appliance-and-console vendors listed beside it. Vendor page →

Website
crowdstrike.com
Country
United States
Headquarters
Austin, United States
Year Established
2011
Customers
29K organisations
Users
250M devices protected
Revenue
$4.8B (2026)

Platforms

Cloudnative

Target Market

SMB primary

Capabilities

Multi-Engine ScanningkeyNot known
Archive ExtractionkeyNot known
True File Type VerificationkeyNot known
Password-Protected Archive HandlingNot known
Hash Reputation Lookupnative
Content Disarm & ReconstructionkeyNot known
Sandbox Analysisnative
Threat Intelligencenative
File-Based Vulnerability AssessmentNot known
File Structure ValidationNot known
DLP IntegrationNot known
API Integrationkeynative
ICAP / Gateway IntegrationkeyNot known
Object Storage ScanningkeyNot known
Managed Upload PortalNot known
Central Management ConsoleNot known

12 of 16 not yet known — not recorded, which is not the same as not supported.

Specifications

Scanning Engines1 engineestimated by LLM: not disclosed by the vendor

2 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryFreenot statedno recurring chargeFree

Versions

A cloud service: the vendor runs it, so there is no version for customers to install or upgrade.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-10-10. Everything below is what has changed since.

  • 2026-10-20Product updatedSold to: SMBevidence
  • 2026-10-10Pricing plan addedPrice: freeevidence
  • 2026-10-10Platform addedRuns on Cloudevidence
  • 2026-10-10Capability addedThreat Intelligence: built inevidence
  • 2026-10-10Capability addedHash Reputation Lookup: built inevidence
  • 2026-10-10Capability addedAPI Integration: built inevidence
  • 2026-10-10Capability addedSandbox Analysis: built inevidence
  • 2026-10-10Product createdNew product, listed in Malware File Scannerevidence
Something wrong? Suggest a correction →

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.