Skip to content
SPECIFICTION
Get listed

VirusTotal Intelligence

virustotal.com

WebAPI
Visit virustotal.com
Spec score 6.5 #19 of 27 in Malware Analysis Sandboxes

Spec sheet

Product
VirusTotal Intelligence searches its dataset for files matching criteria such as hashes, antivirus detections, metadata, filenames, structural properties, and file size.Read 9 Oct 2026 · docs.virustotal.com
Intended users
The maker describes premium services as tools for qualified customers and antivirus partners to search for and access harmful file samples for further study.Read 9 Oct 2026 · docs.virustotal.com
Integrations
VirusTotal documents third-party integrations for security workflows including alert triage, event enrichment, false-positive discarding, detection, and response.Read 9 Oct 2026 · docs.virustotal.com
Support
The maker directs users seeking pricing information to contact VirusTotal with their use case and usage estimates for a quote.Read 9 Oct 2026 · docs.virustotal.com
API search limit
The maker says public API search is limited to hash queries, while private API supports combined property-based queries.Read 9 Oct 2026 · docs.virustotal.com
Commercial use
The maker describes the private API as available for commercial or government use and says pricing depends on usage and requires a quote.Read 9 Oct 2026 · docs.virustotal.com
Premium data
The private API can include integrated-tool file and URL information, sandbox behavioral data, and goodware signals.Read 9 Oct 2026 · docs.virustotal.com
Results
Search results can be sorted by first seen, last seen, detection ratio, submissions, or size, and users can copy hashes or download selected results.Read 9 Oct 2026 · docs.virustotal.com
Retrohunt
The listed Standard tiers allow Retrohunt searches over 90 days and Threat Hunter PRO over one year, with up to 10K matches per job for both.Read 9 Oct 2026 · docs.virustotal.com
Search scope
Its documentation lists file, URL, domain, and IP search modifiers, content search (VTGrep), and file similarity search.Read 9 Oct 2026 · docs.virustotal.com
Sensitive indicators
The Intelligence documentation warns that indicators submitted or queried through the web interface are scanned and added to the dataset for community access, and advises against using sensitive, confidential, or personally identifiable information.Read 9 Oct 2026 · docs.virustotal.com
Splunk
VirusTotal lists VT4Splunk as its official Splunk app for automatically enriching Splunk events with VirusTotal threat intelligence.Read 9 Oct 2026 · docs.virustotal.com

Plans and prices

Standard tiers Priced on request Pricing depends on usage; contact VirusTotal for a quote. Advanced searches: 90 days · Retrohunt: 90 days, up to 10K matches per job · Content search (VTGrep): 90 days Read 9 Oct 2026 · docs.virustotal.com
Threat Hunter PRO Priced on request Pricing depends on usage; contact VirusTotal for a quote. Advanced searches: 1 year · Retrohunt: 1 year, up to 10K matches per job · Content search (VTGrep): 1 year Read 9 Oct 2026 · docs.virustotal.com

Every VirusTotal Intelligence plan and price →

Where Specifiction places it

Alternatives to VirusTotal IntelligenceAll alternatives →