Skip to content

Cloud Security

What Is a Cloud Sandbox?

A concise concept explainer with related MaskFlare security context.
Related concepts
  • Isolated execution
  • Runtime behavior
  • File safety

A cloud sandbox is an isolated, disposable environment where an unknown file is executed and observed, so its actual runtime behavior, more than a static signature scan, determines whether it's safe to deliver to a real device.

This matters because signature-based scanning can only catch malware that matches a known pattern; a file with no known signature passes static scanning even if it behaves maliciously the moment it runs.

MaskFlare Sandbox holds file delivery until detonation completes, catching behaviorally malicious files that a signature check alone would miss.

Where MaskFlare handles this