Collaborative
User Permissions
Syntax Validation
Test Framework
In the Browser
Simple, transparent pricing
- All features included
- Top support priority
- Enterprise Use Allowed
- Email support
Features
Everything you need, nothing you don't
Collaborative Workflow
Advanced workflow with user permissions so everyone can team up and build YARA signatures for your products — from draft to production. Search existing rules with advanced queries, create discussions, threat pages and much more.
- Draft to production.
- Rules move through review with permissions at each stage, so nothing reaches production unvalidated.
- Find any rule.
- Advanced queries search across every rule your team has written, not just the one you have open.
- Discuss in place.
- Discussions and threat pages sit against the rule itself rather than in a separate tracker.
YARA Syntax Validation
Create your YARA rules with a form-based creation page and review syntax with a highlighted preview. Verify the validity of your rule against our syntax checker, with errors and warnings displayed.
- Build it from a form.
- Labelled fields produce the rule, with a highlighted preview of the source as it is generated.
- Checked before saving.
- The syntax checker reports errors and warnings against the rule, so invalid rules never get stored.
- No local setup.
- It runs in the browser, so a new researcher writes their first rule without installing anything.
Test Framework
Multiple ways to test your rules before pushing them to production — against files, buffers or text. Make sure you don't push rules that introduce false positives or simply don't work. Heat up the tests!
- Test before production.
- Run a rule against files, buffers or text and see exactly what it matched before anyone ships it.
- Catch false positives.
- Matches on clean data are flagged separately, because a rule that over-matches is worse than one that misses.
- Real data, not samples.
- Test against the material your rules will actually meet, so results reflect production.
See it in action
What users say
Trusted by people who clean real machines
The only way to collaborate on YARA rules
“I'm a researcher at an antivirus company. We get hundreds of new samples every day and write many YARA rules — at some point it becomes very complicated to track what's done and what remains. YaraEditor Web was deployed on our network a couple of months ago alongside MRF. The workflow makes it easy: we draft rules and keep them in our own job list before submitting to our validator for production. I love the syntax checker and testing rules with real data — it makes things a lot safer. Really good job!”
Marc B.
August 2019