No. 13 of 24 ·Malware Analysis Sandboxes

Trellix Intelligent Sandbox

Web · Self-hosted · API

Freedom report

One barScore 5.3

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

Trellix Intelligent Sandbox is ranked #13 of 24 in malware analysis sandboxes on Freedom251. It runs on API, Self-hosted, Web.

Trellix Intelligent Sandbox plans and pricing

All plans

Trellix Intelligent Sandbox Not published Pricing not stated; request a demo trellix.com · 5 Oct 2026

Compared on malware analysis sandboxes

URL analysis: Yes
API access: Yes
Network traffic analysis: Yes
IOC extraction: Yes
Deployment model: hybrid

Best Trellix Intelligent Sandbox alternatives

See all 20

Two bars ANY.RUN Free tier No. 1Free6.7 Two bars Retrace Free tier No. 2Free6.7 Two bars Malwagon Free tier No. 3$79/mo6.6 Two bars CAPE Sandbox Free tier No. 4Free6.5 One bar Hybrid Analysis Free tier No. 5Free6.3 One bar Bitdefender Total Security Paid plans No. 6$5/mo5.7

The record

Purpose: Detects advanced, evasive malware and turns threat information into action and protection.
Analysis: Combines signatures, reputation, real-time emulation, sandbox behavior analysis, static code analysis, and machine learning.
Unpacking: Its unpacking capabilities remove obfuscation to expose executable code for deeper static analysis.
Reports: Detailed reports can include MITRE ATT&CK mapping, disassembly, memory dumps, function call diagrams, API logs, PCAP data, and threat timelines.
Integrations: Listed integrations include Trellix products, third-party email gateways, Zeek Network Security Monitor, and STIX/TAXII threat-sharing standards.
APIs: The product supports Trellix Data Exchange Layer and REST APIs for product and threat-sharing integrations.
Deployment: It is available as an on-premises appliance or virtual form factor, with private and public cloud support and Azure Marketplace availability.
Supported samples: The datasheet lists PE, Adobe, Microsoft Office, image, archive, Java, Android package, and URL samples.
Specifications: The datasheet lists physical ATD-3200 and ATD-6200 appliances and virtual deployment on ESXi 5.5–6.7 or Hyper-V with Windows Server 2012 R2 or 2016.
Lifecycle: Trellix lists Advanced Threat Defense 5.2.X with an end-of-life date of June 30, 2026.
Buyer fit: The datasheet describes SOC investigation features, configurable analysis environments, and analyst-interactive malware analysis.
Headquarters: San Jose, California, United States

Where it ranks on Freedom251

Best Malware Analysis Sandboxes in 2026#13 of 24

Is Trellix Intelligent Sandbox yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Trellix Intelligent Sandbox

Sources

trellix.com/assets/data-sheets/trellix-intelligent-· checked 5 Oct 2026
trellix.com/support/end-of-life-products/· checked 5 Oct 2026
trellix.com/en-us/products/advanced-threat-protecti· checked 28 Sept 2026