No more typing reviews! Try our Samantha, our new voice AI agent.

Cuckoo Sandbox vs Deep Instinct Prevention Platform comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cuckoo Sandbox
Ranking in Anti-Malware Tools
19th
Average Rating
7.6
Reviews Sentiment
7.2
Number of Reviews
3
Ranking in other categories
No ranking in other categories
Deep Instinct Prevention Pl...
Ranking in Anti-Malware Tools
20th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
20
Ranking in other categories
Endpoint Protection Platform (EPP) (25th)
 

Mindshare comparison

As of November 2026, in the Anti-Malware Tools category, the mindshare of Cuckoo Sandbox is 1.6%, down from 1.9% compared to the previous year. The mindshare of Deep Instinct Prevention Platform is 1.0%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Anti-Malware Tools Mindshare Distribution
ProductMindshare (%)
Cuckoo Sandbox1.6%
Deep Instinct Prevention Platform1.0%
Other97.4%
Anti-Malware Tools
 

Featured Reviews

Adrián Rodriguez Garcia - PeerSpot reviewer
Senior Threat Intelligence & Hunting Analyst/Consultant at Wise Security Global
Provides detailed behavior analysis while needing improvements in signature detection
I use Cuckoo Sandbox primarily for automated malware behavior analysis. Specifically, it helps me extract indicators of compromise (IOC) to add to different platforms in the security environment of my company Cuckoo can show me every behavior in a machine. For example, it shows all files…
Tom Foal - PeerSpot reviewer
CTO at Klaatu IT Security Ltd
Stops ransomware before it executes and reduces response time for the team
A potential area of improvement for Deep Instinct Prevention Platform is their focus on file uploads and large data storage, backups, and other related areas. It is difficult to think of what they could improve, but low information provided by the system when it detects something is one area, particularly in scripting. Deep Instinct Prevention Platform detects malicious scripts but it needs better measures, perhaps signing scripts, so we can be sure that a script is created by a client, not by some malware. It is really about helping us triage incidents effectively, so a bit more help with the analysis of incidents, particularly what the Deep Instinct Prevention Platform agent has discovered, would be beneficial. We need to know what it has spotted that makes it suspect malware.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cuckoo Sandbox is very stable and reliable."
"The scalability is an eight out of ten."
"The dynamic analysis feature in Cuckoo Sandbox is excellent compared to others."
"Deep Instinct is very light; it doesn't take too much CPU attention or memory, it doesn't slow down the performance, and you don't really realize any change in the performance, which makes it very different from other solutions that are usually heavy for the users."
"The product offers integration capabilities and is also easy to use."
"When we were looking at Carbon Black and Sophos, the prevention pieces weren't as strong when compared to DI, which is why we decided to go with DI... I would rather have a product that does the prevention up front and saves me the effort of having to wipe someone's workstation."
"The user interface is a good feature; it shows which process has been accessed and the flow, and the detections for PowerShell are also pretty good, as is the active scripts detection feature."
"It has a very low false-positive ratio. That is important because it means we're not wasting time... We're able to run that entire 20,000-endpoint base with just a handful of engineers."
"The most valuable features are the static/dynamic analyses. Deep Instinct's predictive model has very high accuracy and provides threat information for unknown malware, such as malware classification, static analysis information, and sandbox information."
"We think of this product as a fishing net that fits into the computer and has all of the capabilities and understanding of what ransomware and malware look like."
"It's just a single agent that has everything in it... With the EDR solutions, you have to install it, then you have another service history installed, and you have behavioral analytics, etc. With this, everything is in a single small "box," a small agent that has pretty much got everything."
 

Cons

"It lacks correlation with other types of information, such as explaining why a particular file was modified or identifying the specific process responsible."
"The only issue is with the installation, which requires some adjustments."
"Cuckoo Sandbox could improve its signature detection because it currently only shows simple file modifications and connections to different botnets."
"I want the command to be quicker."
"Reporting on incidents needs improvement."
"The documentation could be improved. They have a manual, but it is not excessive."
"It would be nice if there were options where, if I have to do SIEM integration, I could do so from the UI: Just pick and choose what SIEM solutions the customers use and have options to have out-of-the-box connection facility."
"There's an issue in the installation process where you can't install it unless you disable the built-in Windows Bitdefender antivirus. So, you have to manually disable Microsoft Bitdefender in order to install Deep Instinct. So, that makes it impossible to do a network rollout unless you manually visit each computer, which is ridiculous."
"When things get done automatically, I would appreciate more logging of what's happening in the background... we should be able to backtrack from the log that gets uploaded to our cloud instance and see, forensically, what the root cause was."
"The Deep Instinct client stops working when you have two servers and you add high availability or Windows Failover Cluster mode."
"Deep Instinct Prevention Platform detects malicious scripts but it needs better measures, perhaps signing scripts, so we can be sure that a script is created by a client, not by some malware."
"Some of the features are very resource intensive, such as the ransomware detection. It consumed so much of the resource on the endpoints that we have disabled those functions."
 

Pricing and Cost Advice

"We have to pay five to ten thousand dollars for this solution."
"There is a need for customers of the product to pay towards the licensing costs of the tool."
"If I include the false positive rate and the detection rate in the comparison, Deep Instinct is worth its price."
"We are a nonprofit. The MSP had provides pretty decent nonprofit rates for us. This was one of the key factors that made us choose Deep Instinct over its competitors who were significantly more expensive."
"Their pricing is very competitive. It is good, fair, and a lot cheaper than what we were doing with Cylance."
"The pricing is a little bit expensive but we are satisfied with DI's performance."
"One thing about their licensing program that I like is that just one covers the server as well as on the endpoint as well as mobile devices. There is no complexity in calculating how many SKUs I need for mobile, for laptop, for desktop, and for servers. It's very simple and that makes it much easier to budget."
"Pricing and licensing are very straightforward. It's two SKUs, one is for the console and the other is for the client."
"Its pricing is too high, but that is not because of the product. It is expensive because of the cost of the console. You need a console to control the whole thing, but the console is expensive. You have to split this cost among all possible users. Normally, to be able to make it economically attractive, you need at least 1,000 agents, PCs, or users. If you have a customer with 300 to 500 agents, PCs, or users, it becomes too pricey."
report
Use our free recommendation engine to learn which Anti-Malware Tools solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
University
10%
Government
9%
Manufacturing Company
9%
Comms Service Provider
8%
Outsourcing Company
13%
Construction Company
13%
Manufacturing Company
10%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise4
Large Enterprise5
 

Questions from the Community

What is your experience regarding pricing and costs for Cuckoo Sandbox?
I don't know the price as I always use the free version of Cuckoo Sandbox.
What needs improvement with Cuckoo Sandbox?
The only issue is with the installation, which requires some adjustments. We need to check the OS level for compatibility. This can be challenging for those who are new to Cuckoo Sandbox.
What is your primary use case for Cuckoo Sandbox?
We are using Cuckoo Sandbox ( /products/cuckoo-sandbox-reviews ) for phishing emails and malware analysis.
What is your experience regarding pricing and costs for Deep Instinct?
The price for Deep Instinct Prevention Platform is reasonable. It is about the same price as any other antivirus.
What needs improvement with Deep Instinct?
A potential area of improvement for Deep Instinct Prevention Platform is their focus on file uploads and large data storage, backups, and other related areas. It is difficult to think of what they ...
What is your primary use case for Deep Instinct?
Deep Instinct Prevention Platform is basically a stopper that prevents any malware, including zero-days. The main benefit Deep Instinct Prevention Platform provides is that it stops ransomware, whi...
 

Overview

Find out what your peers are saying about Cuckoo Sandbox vs. Deep Instinct Prevention Platform and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.