Retrace

7.3easy start · #4 of 24
in Malware Analysis Sandboxes

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on Android, api, Linux, Mac, self-hosted, Web, Windows.

Retrace is ranked #4 of 24 in malware analysis sandboxes on The Geeks Club. It runs on Android, API, Linux, macOS, Self-hosted, Web, Windows. There is a free plan.

Retrace plans and pricing

All plans

Community Free Community feed access · Standard execution queue · Web interface · Basic report export · Unlimited public analyses retrace.cloud · 1 Oct 2026

Enterprise Not published Multi-tenant workspace · UK, EU or US data residency on request · Dedicated hardware · SSO/SAML · Custom data retention retrace.cloud · 1 Oct 2026

Team Not published Private submissions · Priority queueing · REST API access · Team management · Audit logging retrace.cloud · 1 Oct 2026

Sovereign Not published Air-gap compatible · Unlimited throughput · Full data sovereignty · Custom hardware support · Dedicated account manager retrace.cloud · 1 Oct 2026

Compared on malware analysis sandboxes

Free plan: Yes
URL analysis: Yes
API access: Yes
Network traffic analysis: Yes
IOC extraction: Yes

Best Retrace alternatives

See all 12

ANY.RUN 0 of 4 in the starter kit Lesson 18.0 Bitdefender Total Security 0 of 4 in the starter kit Lesson 27.4 Hybrid Analysis 0 of 4 in the starter kit Lesson 37.4 Malwagon 0 of 4 in the starter kit Lesson 57.2 CrowdStrike Falcon Pro 0 of 4 in the starter kit Lesson 67.1 CAPE Sandbox 0 of 4 in the starter kit Lesson 77.0

The record

Core purpose: Retrace is an AI-powered malware analysis platform using fully interactive multi-OS sandboxes.
Sandbox isolation: Each sample runs inside a disposable virtual machine that does not touch the user's laptop.
Telemetry capture: The platform captures file writes, registry activity, network packets, and process spawns for each virtual machine.
AI copilot: Retrace's AI copilot answers questions using the sandbox trace and cites specific events, techniques, or captured files.
Corpus matching: Every detonation is pattern-matched against the user's full sandbox corpus to provide similarity and family evidence.
Report exports: AI answers can be exported as Markdown, PDF, or STIX 2.1 bundles for MISP or threat-intelligence platforms.
Enterprise inference: Inference runs on-premises for Enterprise deployments.
Sovereign deployment: Sovereign deployments are fully air-gapped and keep sample bytes, IOCs, and tool calls inside the customer's infrastructure.
Operating systems: The sandbox supports Windows, macOS, Linux, and Android virtual machines.
Team capabilities: The Team tier includes private submissions, priority queueing, REST API access, team management, and audit logging.
Enterprise capabilities: Enterprise includes dedicated hardware with no shared services, optional UK, EU, or US data residency, SSO/SAML, and custom retention.
Intended users: The service is designed for legitimate security research, malware analysis, incident response, and threat intelligence.
Public analyses: Analyses marked public expose their results, events, behavioral data, screenshots, and detection results to all service users.
API and limits: API keys must remain confidential, documented rate limits apply, and automated bulk submissions must follow fair-use guidelines.
Price from: Free

Where it ranks on The Geeks Club

Best Malware Analysis Sandboxes in 2026#4 of 24

Is Retrace yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Retrace

Sources

retrace.cloud· checked 1 Oct 2026
retrace.cloud/docs/legal/terms-of-service· checked 1 Oct 2026