There are many alternatives to Cuckoo Sandbox for Linux and since it's discontinued a lot of people are looking for a replacement. The best Linux alternative is VirusTotal. It's not free, so if you're looking for a free alternative, you could try VirusTotal or Firejail. If that doesn't suit you, our users have ranked more than 25 alternatives to Cuckoo Sandbox and 14 are available for Linux so hopefully you can find a suitable replacement. Other interesting Linux alternatives to Cuckoo Sandbox are Bubblewrap, Tree Sandbox, ThreatCheck and FAME Automates Malware Evaluation.
VirusTotal inspects files, domains, IPs, and URLs with over 70 antivirus scanners, sharing results with the community to raise global IT security. The service also supports various submission methods including web interface, API, and extensions, free for non-commercial end-users.
United States
Firejail is a SUID security sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces and seccomp-bpf.
All-in-One malware analysis tool for analyze many file types, from Windows binaries to E-Mail files.
Türkiye
"Tree-shaped" sandbox: multi-layer nesting and branching, like a “tree” composed of multiple sub-containers. A sandbox is composed of multiple layered sub-containers. With this design, “untrusted” procs and “semi-trusted” procs run in different layers of a sandbox;...
A malware-analysis tool that identify the exact position and details of malicious content in binary files using external Anti-Virus scanners. Supports all AV scanners.
It is meant to facilitate analysis of malicious files, leveraging as much knowledge as possible in order to speed up and automate end-to-end analysis.
France
EU
Malice's mission is to be a free open source version of VirusTotal that anyone can use at any scale from an independent researcher to a fortune 500 company.
Mbox is a lightweight sandboxing mechanism that any user can use without special privileges in commodity operating systems.
Cisco Talos's PyREbox is a python QEMU-based sandbox environment designed to aid in reverse engineering. It can be used for security researchers to aid them in malware analysis, or for general developers with debugging their applications.
Automated malware analysis sandbox that detonates files, URLs, documents and Windows kernel drivers in isolated virtual machines and returns a scored verdict.
Türkiye
