Scan files, URLs, IPs, and domains for malware and threats.

🔑 apiKey🔒 HTTPS🌐 ✓ CORS Enabled
API Details
API NameVirusTotal
CategorySecurity
AuthenticationapiKey
HTTPS Support✅ Yes — secured
CORS Policy✅ Enabled — browser-safe
DocumentationOpen Docs ↗
⚡ Quick Start

Copy this JavaScript snippet to start using the API immediately.

const res = await fetch("https://developers.virustotal.com/reference", {
  headers: { "Authorization": "Bearer YOUR_API_KEY" }
});
const data = await res.json();
console.log(data);
More Security APIs
See all →
Have I Been Pwned

Check if emails or passwords have appeared in data breaches.

apiKeyHTTPS
Get API →
Shodan

Search engine for internet-connected devices and open ports.

apiKeyHTTPS
Get API →
🚀 Access This API

View endpoints, request formats, rate limits, and full response schemas in the official docs.

Open Documentation →← Browse All APIs
🔐 Authentication Guide
API Key Required

Register on the provider site to get a free key, then pass it in your request:

Authorization: Bearer YOUR_KEY
// or as query param:
?api_key=YOUR_KEY
⚙️ Compatibility
Browser (Frontend)✓ Supported
Server (Node / Python)✓ Always works
HTTPS / SSL✓ Secured
💡 Developer Tips
  • Store keys in .env — never expose them in client-side code.
  • Direct browser fetch calls work — no proxy needed.
  • Handle rate limits with retry logic and exponential backoff.
  • Cache responses locally to minimize calls and stay on free tier.
📂 Security Category

Explore all free APIs in the Security category.

Browse Security
👋 Need help with code?