VirusTotal
Threat-intelligence API for looking up and scanning files, URLs, domains, and IP addresses across 70+ antivirus engines and URL/domain scanners.
API Key83 tools
Connect VirusTotal
Free account. No credit card required.
Three ways to use VirusTotal
Ask your specialist
Pull data, take actions, or answer questions with this integration, right in a conversation.
Build a workflow
Create automated workflows that trigger on events, run on a schedule, or chain multiple tools together.
Power an app
Use this integration as a data source or action layer behind a dashboard, form, or internal tool.
Supported tools
Actions your AI agents can perform with VirusTotal.
Abort a Retrohunt Job (Premium)
Abort a running Retrohunt job. Requires premium.
Tool
Add a Comment on a URL
Post a comment on a URL.
Tool
Add a Comment to a Domain
Post a comment on a domain.
Tool
Add a Comment to a File
Post a comment on a file.
Tool
Add a Comment to a Graph
Post a comment on a graph.
Tool
Add a Comment to an IP Address
Post a comment on an IP address.
Tool
Get started automating VirusTotal
01Connect your accountLink your account securely with OAuth or an API key.
02Choose a trigger or toolPick the events and actions your workflow should use.
03Configure the workflowDescribe what you want and your specialist wires it up for you.
04Refine the processTest runs, review output, and tweak until it's right.
05Turn it onSet it live and it runs on a schedule or on events.
Ready-to-use workflows
Prompts using VirusTotal
Indicator investigation workbench for security analystsIP reputation investigation console for security teamsFirewall change review board for IP block and allow requestsCatch phishing domains impersonating your brand each morningAuto-triage phishing reports with VirusTotal and SlackCheck new HubSpot leads for spam and malicious domainsCatch a blocklisted domain before your customers doDaily malicious IP threat brief for your security team