CyberIndexBeta

Product

Standalone subscription to the WildFire cloud malware-analysis service: files are submitted through an API, analysed statically and dynamically, and returned with a verdict and report. It is available as a cloud instance. Delivery is a hosted SaaS service. Recorded capabilities include api integration, hash reputation lookup, sandbox analysis and threat intelligence. WildFire API is sold on subscription.

Current Version
Cloud service · no version
Market
EnterpriseMid-MarketSMB
Licence
Paid
Price
Paid · price unknown
Record Created
2026-10-10
Last Updated
2026-10-23

Vendor

Palo Alto Networks was founded in 2005 by Nir Zuk, who had written the first stateful inspection engine at Check Point, and built the next-generation firewall — an appliance that identifies the application in a flow rather than judging it by port number. That product made the company, and it is now one of the largest security firms in the world, listed on Nasdaq, with around 16,000 employees and over 70,000 customers. Its range is organised under three names: Strata for network security and the PA-Series firewalls, Prisma for cloud and SASE, and Cortex for security operations — Cortex XDR for detection and response, Cortex XSOAR for automation, Cortex Xpanse for attack-surface discovery and Cortex XSIAM as the platform it is steering customers toward. Unit 42 is its threat intelligence and incident response arm. What appears in this index is the endpoint and firewall end of that portfolio. Its endpoint agent is sold as part of a platform rather than on its own, which is worth knowing when comparing its price and its test results with a standalone product's. Vendor page →

Country
United States
Headquarters
Santa Clara, United States
Year Established
2005
Customers
70K organisations
Users
100M users
Revenue
$11.5B (2026)

Platforms

Cloudnative

Target Market

Enterprise primaryMid-Market secondarySMB primary

Capabilities

Multi-Engine ScanningkeyNot known
Archive ExtractionkeyNot known
True File Type VerificationkeyNot known
Password-Protected Archive HandlingNot known
Hash Reputation Lookupnative
Content Disarm & ReconstructionkeyNot known
Sandbox Analysisnative
Threat Intelligencenative
File-Based Vulnerability AssessmentNot known
File Structure ValidationNot known
DLP IntegrationNot known
API Integrationkeynative
ICAP / Gateway IntegrationkeyNot known
Object Storage ScanningkeyNot known
Managed Upload PortalNot known
Central Management ConsoleNot known

12 of 16 not yet known — not recorded, which is not the same as not supported.

Specifications

Scanning Engines1 engineestimated by LLM: not disclosed by the vendor

2 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummarySubscriptionnot statedno recurring chargeNot known

Versions

A cloud service: the vendor runs it, so there is no version for customers to install or upgrade.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

FedRAMPHigh1 activeFR2317253567

Change History

This record was created 2026-10-10. Everything below is what has changed since.

  • 2026-10-20Product updatedSold to: Enterpriseevidence
  • 2026-10-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-10-20Product updatedAlso sold to: Mid-Marketevidence
  • 2026-10-20Product updatedSold to: SMBevidence
  • 2026-10-12Certification addedCertified: FedRAMP (High)evidence
  • 2026-10-10Pricing plan addedPrice: subscriptionevidence
  • 2026-10-10Platform addedRuns on Cloudevidence
  • 2026-10-10Capability addedThreat Intelligence: built inevidence
  • 2026-10-10Capability addedHash Reputation Lookup: built inevidence
  • 2026-10-10Capability addedAPI Integration: built inevidence
  • 2026-10-10Capability addedSandbox Analysis: built inevidence
  • 2026-10-10Product createdNew product, listed in Malware File Scannerevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.