Cloud-Delivered Security ServicesAdvanced WildFire
Cloud-based malware analysis that delivers real-time verdicts 60x faster.
Palo Alto Networks Advanced WildFire is the industry’s largest cloud-based malware prevention engine, using machine learning and dynamic analysis to deliver real-time verdicts up to 60x faster than legacy sandboxes. It analyses files, URLs, DNS, and C2 across the platform with 99% detection accuracy and automatically shares protections across networks, cloud, and endpoints. Faltrox enables and operates it as the sandbox layer of managed defence.
Overview
What Advanced WildFire is
Attackers generate enormous volumes of new malware daily, and a sandbox that returns verdicts too slowly lets the first wave through. Advanced WildFire is the largest cloud-based malware prevention engine in the industry, combining machine learning, dynamic and static analysis, and bare-metal analysis to catch evasive and never-before-seen malware — and to do it fast enough to prevent, not just detect.
It delivers real-time verdicts up to 60x faster than legacy sandboxes, with 99% detection accuracy and 26% more detections than traditional sandboxes, across files, URLs, DNS, and command-and-control. Intelligence is drawn from across the entire product portfolio (70,000+ customers), so a threat seen anywhere protects everyone, and new protections flow automatically to networks, cloud, and endpoints. Faltrox enables WildFire on your NGFWs and platform, tunes it, and operates the detections it produces.
Coverage
What it protects
The platforms, threats, and surfaces this product is built to defend.
Files
Analyses files across the platform to catch known and never-before-seen malware.
URLs
Extends analysis to URLs, feeding real-time verdicts back to web protection.
DNS
Analyses DNS activity as part of unified malware and C2 prevention.
Command & Control
Detects C2 communication as part of the same real-time analysis engine.
Network, Cloud & Endpoint
Protections propagate automatically across networks, cloud, and endpoints.
Evasive Malware
Bare-metal and dynamic analysis catch sandbox-evasive and zero-day malware.
How it works
The mechanism
How the product moves from signal to protected state, step by step.
- 01
Submit
Unknown files, URLs, and objects are submitted from NGFWs, cloud, and endpoints for analysis.
- 02
Analyse
Machine learning plus dynamic, static, and bare-metal analysis dissect the object to catch evasive malware.
- 03
Verdict
A verdict is returned in real time — up to 60x faster than legacy sandboxes — enabling prevention, not just detection.
- 04
Share
New protections propagate automatically across networks, cloud, and endpoints portfolio-wide.
- 05
Operate
Faltrox tunes WildFire and operates its detections as part of managed defence.
Capabilities
Key capabilities
Largest Malware Engine
The industry’s largest cloud-based malware prevention engine, informed by 70,000+ customers.
Real-Time Verdicts
Delivers verdicts up to 60x faster than legacy sandboxes, enabling prevention rather than detection.
99% Detection Accuracy
99% malware detection accuracy with 26% more detections than traditional sandboxes.
Multi-Technique Analysis
Machine learning plus dynamic, static, and bare-metal analysis catch evasive and zero-day malware.
Files, URLs, DNS & C2
Unified analysis across files, URLs, DNS, and command-and-control.
Automated Protection Sharing
New protections flow automatically across networks, cloud, and endpoints.
Portfolio-Wide Intelligence
Intelligence drawn from the entire product portfolio so a threat seen anywhere protects everyone.
Cloud or On-Premises
Available as a cloud service or on-premises appliance for data-residency needs.
Works with
Part of the platform
Palo Alto Networks products this pairs with, and the Faltrox services that operate it.
Palo Alto Networks products
Faltrox services
Delivery
You buy the outcome, not the console
Managed by Faltrox
Faltrox licenses, deploys, and tunes Palo Alto Networks Advanced WildFire for your environment, then runs it as part of a managed service, so you get the protection without staffing another security console.
FAQ
Common questions
01Why does verdict speed matter so much?
Because a slow sandbox lets the first wave of a new malware campaign through before it returns a verdict. Advanced WildFire delivers verdicts up to 60x faster than legacy sandboxes, which is what lets it prevent malware inline rather than only detecting it after infection.
02How does it catch sandbox-evasive malware?
It combines machine learning with dynamic, static, and bare-metal analysis. Bare-metal analysis in particular defeats malware that detects and hides from virtualised sandboxes, so evasive and zero-day threats are still caught.
03Does a detection on one customer protect us?
Yes — intelligence is drawn from across the entire product portfolio (70,000+ customers), so when a threat is seen anywhere, new protections are automatically shared across networks, cloud, and endpoints for everyone.
04Can it run on-premises for data residency?
Yes — WildFire is available as a cloud service or an on-premises appliance, so organisations with data-residency or privacy constraints can keep analysis local. Faltrox scopes the right model.
05How does Faltrox operate it?
We enable WildFire across your NGFWs and platform, tune submission and analysis policy, and operate its detections and intelligence as part of the managed defence and SOC services we run.
Start an engagement
Secure what’s next.
Speak with the engineering team to define scope, walk through the methodology, and decide whether Faltrox is the right team to test and run your environment.
Contact us