VirusTotal Integration
Connect VirusTotal to Arahi's no-code AI developers and automate workflows in minutes.
About the VirusTotal integration
Crowdsourced security intelligence for everyone With Arahi AI, you can connect VirusTotal to Algolia, Assembla, Auth0 (Management API) and 1,500+ other apps using AI-powered workflows. No coding required — set up triggers, actions, and intelligent automation in minutes.
- Category
- Developer Tools
- Authentication
- keys
VirusTotal automation use cases
- CI failure → on-call page
- Page the on-call engineer when a VirusTotal pipeline fails on main — no manual triage.
- PR ready-for-review broadcast
- Ping the right reviewer in Slack when a VirusTotal PR is ready, based on code-owners or labels.
- Release notes generation
- Generate release notes from merged VirusTotal PRs with Conventional Commits parsing.
- Issue sync across trackers
- Mirror VirusTotal issues to Linear, Jira, or Asana with bidirectional status sync.
VirusTotal workflow examples
- Get File Report on Dropbox new uploads
When a file lands in Dropbox, VirusTotal Get File Report checks the hash and Slack alerts if any engine flags it as malicious for quarantine.
Dropbox upload -> Get File Report -> Slack alert
- Get Domain Report when Jira URL added
When a Jira security ticket includes a URL, VirusTotal Get Domain Report returns reputation data and Add VirusTotal Comment logs the analysis for audit.
Jira URL added -> Get Domain Report -> Add VirusTotal Comment
- Get IP Address Report from Splunk alerts
When Splunk fires a suspicious IP alert, VirusTotal Get IP Address Report enriches the indicator and Get Analysis Report summarizes results to Teams channel.
Splunk IP alert -> Get IP Address Report -> Get Analysis Report
VirusTotal actions
- Add VirusTotal Comment
- Tool to add a comment to a virustotal resource (file, url, domain, or ip address). use after analyzing a resource to leave contextual feedback. provide exactly one identifier per call.
- Add Vote
- Tool to add a vote (harmless/malicious) to a virustotal resource. use after reviewing analysis results to submit your verdict.
- Get Analysis Report
- Tool to retrieve the analysis report of a file or url submission. use after obtaining an analysis id to fetch its detailed report.
- Get comments
- Tool to retrieve the latest comments on a virustotal resource. use when you need to review user-generated comments for a file, url, domain, or ip after obtaining its identifier.
- Get Domain Relationships
- Tool to retrieve relationship objects for a given domain. use when you have a domain and need to explore its related entities.
- Get Domain Report
- Tool to retrieve the analysis report of a domain. use when you need detailed insight on a domain's reputation and analysis stats.
- Get File Report
- Tool to retrieve the analysis report of a file. use when you have a file's hash and need detailed scan metadata.
- Get IP Address Relationships
- Tool to retrieve objects related to a specific ip address by relationship type. use when you have an ip and need to explore connected files, urls, or other entities.
- Get IP Address Report
- Tool to retrieve the analysis report of an ip address. use when you need detailed insight on an ip's reputation, asn, country, and analysis stats.
- Get VirusTotal Metadata
- Tool to retrieve virustotal metadata. use when you need to list all available api endpoints with methods, summaries, and urls.
- Get URL Report
- Tool to retrieve the analysis report of a url. use when you have a url identifier (base64-url without padding) and need detailed scan results, reputation, and metadata.
- Get Votes
- Tool to retrieve votes on files, urls, domains, or ip addresses. use when you need to view community votes for a given object.
- Rescan File
- Tool to re-analyze a previously submitted file. use when you need updated analysis results after an initial scan.
- Scan URL
- Tool to submit a url for scanning. use when you have a url and need to submit it to virustotal to obtain an analysis id for later retrieval.
- Search VirusTotal
- Tool to search for objects in the virustotal database. use when locating files, urls, domains, ips, or comments matching a query. supports pagination with limit and cursor.
- Upload File
- Tool to upload a file for scanning. use when you have binary file content ready to submit for virustotal analysis.