Threatray

Threatray is a Swiss cybersecurity company (headquartered in Biel/Bienne, Switzerland) that develops AI- and machine learning-powered malware detection and intelligence technology. The company's core differentiation is a code-based approach to malware analysis, using deep binary code analysis to identify and connect malware families that may evade conventional detection tools. Threatray offers two products. The first is the Threatray Binary Intelligence Platform, an analyst-facing search and analysis tool that allows malware defenders and analysts to query and extract intelligence from malware binary code. It enables code-level search across a database of over 100 million malware binaries, supporting tasks such as malware family attribution, threat hunting, and intelligence gathering. The second product is Threatray Binary Intelligence for Endpoint, designed as a supplementary layer of defense for enterprise security teams. It focuses on covering detection blind spots left by existing endpoint security technologies, including deep memory analysis for detecting evasive malware at scale. The company's technology analyzes binary code structures using AI models to find connections between malware samples, including unknown samples, at scale. Key capabilities include resilient malware detection, family attribution, and malware intelligence. Threatray also supports YARA rule development, as evidenced by a partnership with Nextron Systems. Threatray's customer base includes organizations such as Intel 471, Trellix, Nextron Systems, infoGuard, and La Mobilière, indicating a focus on enterprise security teams, managed security service providers, and threat intelligence professionals.