VirusTotal Virus and Threat Scanner compared with Hybrid Analysis, Any.Run and Jotti| VirusTotal Virus and Threat Scanner | Hybrid Analysis | Any.Run | Jotti |
|---|
| Analysis method: Files and URLs are checked by over 70 antivirus scanners and URL or domain blocklisting services, plus tools that extract signals from the content. The result lists each engine detection label. It aggregates verdicts and does not rank any single engine. | Analysis method: A separate service built on Falcon Sandbox technology, so it reports the behaviour of a sample run in an analysis environment. The vendor FAQ lists Windows 7 (32 and 64-bit) and Ubuntu 16 (64-bit) for it, and Windows 10 for the paid Falcon Sandbox only. | Analysis method: An interactive sandbox: you can act inside the virtual machine while the sample runs. The free plan offers Windows 10 64-bit, Windows 7 32-bit, Android 14 64-bit (ARM) and Ubuntu 22.04.2 64-bit. | Analysis method: Scans a file with several antivirus programs, according to its AlternativeTo listing. The number of engines and their update state are not given there. |
| Free tier: Free for non-commercial end users under the Terms of Service. The documentation page on how it works does not state the upload quota or file size limit, which are covered in separate pages. | Free tier: Free community service where you can submit files, search existing reports and download samples and IOCs. Guest submissions are limited to 30 submissions monthly. | Free tier: Free forever with about 20% of the sandbox functionality. Limits: 60-second VM timeout, 16 MB maximum file size, and 5 manual sample or PCAP export requests per minute. Paid prices are not listed (Hunter and Enterprise Suite are quoted individually). | Free tier: Listed as free on AlternativeTo. |
| Sample privacy: Reports are visible to the community, which comments and votes on verdicts. Basic results go to the partner engines, and the documentation says file contents may be shared with premium customers. Do not upload confidential files. | | | |
| Access and integration: Browser upload, desktop uploaders, browser extensions and an HTTP API. The web interface has the highest scanning priority among the public methods. | Access and integration: Web interface and a REST API, covering submission, report search and download of samples and indicators. | Access and integration: Browser-based interactive analysis, with basic reports on the free plan. | |