ANY.RUN vs ZeroFox Threat Intelligence Feeds: side-by-side comparison (2026)
ANY.RUN is a commercial malware analysis solution by ANY.RUN. ZeroFox Threat Intelligence Feeds is a commercial threat intel feeds solution by ZeroFox. Features, integrations, deployment and the company behind each one, side by side.
Interactive malware sandbox with TI lookup and IOC feeds for SOC teams.
Threat intelligence feeds for SOC teams from social, dark web & botnet sources
Side-by-side comparison
Feature
ANY.RUN
ZeroFox Threat Intelligence Feeds
Pricing model
Commercial
Commercial
Category
Malware Analysis
Threat Intel Feeds
Deployment and fit
Deployment type
Cloud
Cloud
Company size fit
SMB, Mid-Market, Enterprise
SMB, Mid-Market, Enterprise
Company
Company
ANY.RUN
ZeroFox
Use cases and capabilities
Sandbox
Yes
No
Dynamic Analysis
Yes
No
IOC
Yes
No
Threat Feed
Yes
Yes
Cyber Threat Intelligence
Yes
Yes
MITRE ATT&CK
Yes
No
Triage
Yes
No
STIX
Yes
No
MISP
Yes
No
Botnet
No
Yes
Dark Web Monitoring
No
Yes
Fraud Detection
No
Yes
Data Breach
No
Yes
Core features
10 features listed
10 features listed
Integrations
7 integrations listed
12 integrations listed
Need help choosing?
See more solutions in this category, or build a security stack from your picks.
