VirusTotal

Google Malware File Scanner (primary)Compare with others in Malware File Scanner

Product

Service that submits a file or hash to a large number of antimalware engines and returns each verdict, with an API and a public web interface. Now part of Google Threat Intelligence. It is available as a cloud instance. Recorded capabilities include api integration, archive extraction, hash reputation lookup and multi-engine scanning. Its record also notes password-protected archive handling, sandbox analysis, threat intelligence and true file type verification. It is aimed at Enterprise buyers.

Current Version: Cloud · no version
Product Page: virustotal.com
Market: Enterprise
Licence: Free tier available
Price: Free · paid plans
Record Created: 2026-10-05
Last Updated: 2026-10-17

Vendor

Google's presence in this index is not a security business but two components of much larger platforms. Google Play Protect is the malware scanning built into Android devices with Google services, which scans applications at install time and periodically afterwards; it is on by default on billions of phones, which makes it the baseline Android security product rather than one a user selects. Cloud Next Generation Firewall is the firewall service within Google Cloud, protecting workloads that run there. Neither is sold as a standalone product and neither has a price of its own — Play Protect comes with the phone and the firewall is billed as part of cloud usage. Play Protect does appear in the mobile testing that AV-TEST and AV-Comparatives run, which is unusual for a platform-builtin, and its results are worth reading in the same way Microsoft Defender's are on Windows: as the standard a paid Android product has to beat to be worth installing. Vendor page →

Website: about.google
Country: United States
Headquarters: Mountain View, United States
Year Established: 1998
Customers: 13M organisations
Users: 2.8B devices protected
Revenue: $402.8B (2025)

Platforms

Cloud

native

Target Market

Enterprise primary

Capabilities

Specifications

Pricing

Plan	Licence	Priced per	Billed	Price
Summary	Free tier available	not stated	no recurring charge	Not known

Versions

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Change History

This record was created 2026-10-05. Everything below is what has changed since.

2026-10-10Platform addedRuns on Cloudevidence
2026-10-10Capability addedPassword-Protected Archive Handling: built inevidence
2026-10-09Capability addedThreat Intelligence: built inevidence
2026-10-08Capability addedSandbox Analysis: built inevidence
2026-10-06Capability addedTrue File Type Verification: built inevidence
2026-10-06Capability addedArchive Extraction: built inevidence
2026-10-06Pricing plan addedPrice: free tier availableevidence
2026-10-06Product updatedSold to: Enterpriseevidence
2026-10-05Capability addedHash Reputation Lookup: built inevidence
2026-10-05Capability addedAPI Integration: built inevidence
2026-10-05Capability addedMulti-Engine Scanning: built inevidence
2026-10-05Product createdNew product, listed in Malware File Scannerevidence

Something wrong? Suggest a correction →

Scanning Engines	70+ engines
Scanning Engines Used	Not known

Multi-Engine Scanningkey	native
Archive Extractionkey	native
True File Type Verificationkey	native
Password-Protected Archive Handling	native
Hash Reputation Lookup	native
Content Disarm & Reconstructionkey	Not known
Sandbox Analysis	native
Threat Intelligence	native
File-Based Vulnerability Assessment	Not known
File Structure Validation	Not known
DLP Integration	Not known
API Integrationkey	native
ICAP / Gateway Integrationkey	Not known
Object Storage Scanningkey	Not known
Managed Upload Portal	Not known
Central Management Console	Not known