VirusTotal
NativeSecurity · Google / VirusTotal · Website ↗
Look up IP addresses, URLs, and file hashes against VirusTotal's threat intelligence database — 70+ anti-malware engines plus community data.
3 tools your agents can use
virustotal_lookup_ip
Look up an IP address in VirusTotal and return its threat reputation score, malicious/suspicious engine detections, country, and ASN owner. Always use this tool when asked about th...
virustotal_lookup_url
Look up a URL in VirusTotal and return its threat category and detection results from 70+ engines. Always use this tool when asked to check whether a URL or domain is malicious or...
virustotal_lookup_hash
Look up a file hash (MD5, SHA-1, or SHA-256) in VirusTotal and return the malware detection count, file name, type, and first submission date. Always use this tool when asked about...
Governed by default
Like every connector, VirusTotal runs inside the ApiSpi governance layer: admins can set it to full, read-only, or approval-required access, every call is audit-logged and firewall-screened, and spend caps apply.