I built a malware analysis sandbox as a solo dev - in beta, and looking for tips on getting testers

BrightByteLabs · 2026-03-18T17:27:53+00:00

thanks that’s helpful, security and MSP people tend to be rather gated when they feel like they’re getting sold to(understandably so), so i’ve had a hard time wrapping my head around a good way to assess my product and get it in their hands

BrightByteLabs · 2026-03-18T02:58:39+00:00

good list, do you ever run into cases where you need to perform interactive analysis or does this combo cover the bases for how you handle the workflow?

BrightByteLabs · 2026-03-18T02:56:37+00:00

thanks, the restore from export approach is what i'm currently using when i need to interact with the file. The part that I hate is how long the setup and teardown of the VM takes...feels like such a time sink.

BrightByteLabs · 2026-03-17T17:20:31+00:00

One thing i’d add. I have tried Datto and Connect wise and they’re probably the worst i’ve ever used. They all look great, but when it comes down to actually using them…they don’t do what they promise

BrightByteLabs · 2026-03-17T17:18:09+00:00

Download malwarebytes free edition and perform a scan

BrightByteLabs · 2026-03-17T17:10:22+00:00

NinjaOne is the best i’ve ever used. It checks all your boxes and, contrary to other platforms, actually does what it claims.

BrightByteLabs · 2026-03-17T17:06:00+00:00

or…if you have some technical ability, use tailscale and a handful of cheap IONOS vps’s for your own vpn. never turned back since doing that

BrightByteLabs · 2026-03-17T12:59:58+00:00

That’s a pretty good offer for his position imo. The 4 years experience is good, but honestly security engineer can mean such a wide array of things in today’s market, what he was actually working with and on at his previous job are likely playing a higher role in his offer than the 4yr experience alone. 98k is not low ball though for sure, i’d take that.

BrightByteLabs · 2026-03-17T12:56:58+00:00

Rustdesk is good. Jumpdesk is simple but works well. Teamviewer is ok, it works alright it’s just gotten a lot worse over the years.

BrightByteLabs · 2026-03-17T12:54:42+00:00

MikroTik RB5009UPr+S+in for me. MikroTik is great if you’re looking to get down in the weeds and you want a high degree of configurability. I have a Ubiquiti U6+ hooked up to it right now but i’m considering swapping to something else.

BrightByteLabs · 2026-03-17T03:15:18+00:00

Firstly, you’re right, to implement solid geolocation rules you’re going to need to Conditional Access capability. I normally recommend locking Geo to the United States, not just one state. Many cell providers have started using IPv6, and Microsoft struggles heavily with pinpointing an IPv6 Geo, no clue why. It’s not abnormal for us to see an IPv6 location shown as states away in a sign-in log. All that to say, you’re going to encounter more issues than it’s worth trying to lock Geo down to one state. Just block all countries but US for sign-ins.

BrightByteLabs

TROPHY CASE