STEP 1
Select VirusTotal in workflow
Pick VirusTotal app in the workflow builder [4] - just one click to select the app.
VirusTotal Integration
Threat intelligence service for scanning files, URLs, and domains for malware. Bring VirusTotal into visual workflows so engineering operations do not depend on glue scripts. Start from Get a Domain Report, then trigger Get a File Report or Get an Analysis Results.
3-day trialCancel anytimeUp to 10 minutes quick set up
- GDPR
- Data Encryption
- 2FA
- Local Data Region
Supported triggers and actions for VirusTotal integration
Triggers can detect changes in VirusTotal and run actions that can create, search or modify data inside VirusTotal automatically [3] — exactly how you set them.
- Get a Domain ReportRetruns details of a scanned domain.
- Get a File ReportRetruns a report for a scanned file.
- Get an Analysis ResultsRetrieves analysis results.
- Get an IP Address ReportRetruns details of a scanned IP address.
- Get an URL ReportRetruns details of a scanned URL.
- Make an API CallPerforms an authorized API call.
- Request a Domain RescanRequests a new scan / analyze for a specified domain.
- Request a File RescanRequests a new scan / analyze for a specified file.
- Request an IP RescanRequests a new scan / analyze for a specified IP address.
- Request an URL RescanRequests a new scan / analyze for a specified URL.
- Scan an URLSends an URL to analysis.
- Upload a FileUploads a new file to analysis.
How to integrate VirusTotal in automation workflow?
3 simple steps to make your VirusTotal connected with other apps in automation workflows on WEXTL. Up to 10 minutes integration set up.
STEP 2
Connect VirusTotal
When prompted, authorize access to VirusTotal in WEXTL once. VirusTotal credentials are encrypted and never shared with WEXTL. Authorization will be reused in any future API calls [3].
WEXTL wants to integrate with your VirusTotal account. Approve?
STEP 3
Build a workflow
Build your workflow with VirusTotal yourself or with WEXTL® AI Builder. Connect VirusTotal to any available integrations [5], or use HTTP node to go beyond them.
VirusTotal
How VirusTotal connects and integrates with WEXTL
Save and approve your credentials once — WEXTL® stores authorization information encrypted and reuses the authentication whenever VirusTotal app is called in workflows. That allows your developer tools automations to run without your attention, per defined schedule [7]. Explore documentation [6] for a detailed list of fields that VirusTotal supports.
The following table illustrates what fields VirusTotal integration require during authorization flow inside our workflow builder [4].
Connect VirusTotal
API Key*Text
••••••••
Demonstration of VirusTotal connection step inside WEXTL Workflow Builder [4].
| Field | Type | Help |
|---|---|---|
API KeyRequired | password | Your API key can be found in your account user menu (right side dropdown on profile icon). |
Connect VirusTotal to popular apps on WEXTL
Enter a name of the other app you want to sync with VirusTotal below. Click on selected app to explore integration options with VirusTotal. If the app you search for is not available in WEXTL yet, you can use HTTP node [10] instead to integrate it directly.
Example automation with VirusTotal integration
Select Get a Domain Report action from VirusTotal - this will be a starting point in your automation. Whenever event happens in VirusTotal, workflow will start [7] from Get a Domain Report node.
Search for Get a File Report, connect it as the next step of integration sequence. You can use filters between Get a Domain Report and Get a File Report, so only important data pass from Get a Domain Report to the next step. WEXTL gives you full control over the process of VirusTotal automation. All parts of workflow are visible on the canvas [4].
VirusTotal on WEXTL has 12 modules for creating developer tools automations. Explore VirusTotal documentation for more.
Video slide demonstrates how Get a Domain Report and Get a File Report [6] nodes are used in VirusTotal workflow.
Frequently asked questions
Common questions about automating VirusTotal in your workflows.
VirusTotal has no triggers, but it provides 12 actions including "Get a Domain Report", "Get a File Report", and "Get an Analysis Results". Pair them with triggers from other apps to automate VirusTotal tasks.
Integration has 12 actions, including "Get a Domain Report", "Get a File Report", and "Get an Analysis Results", and more. Refer to our VirusTotal Documentation for detailed inputs and outputs.
No. Most automations are built visually on the canvas by picking triggers, actions, and mapping fields. You can add custom JavaScript with Functions when advanced logic is needed — but our customers do that in rare cases [4].
Yes. Connections are authenticated per account, credentials are encrypted at rest, and you can enforce approvals and team-level access controls on any automation.
The VirusTotal integration on WEXTL runs directly on its vendor public API — every field name, authentication method, and rate limit is controlled by VirusTotal official API and covered in documentation [3]. WEXTL handles the request signing and pagination for you.
Absolutely. Where VirusTotal provides native webhooks, you can use instant triggers to eliminate polling delay. For custom webhooks, WEXTL offers Custom Webhook node, so you can start automation whenever VirusTotal or any other service sends event to webhook URL.
WEXTL is an AI-first visual canvas. The platform allows you to describe automation in plain text — and AI will wire nodes for VirusTotal inside the workflow builder [4]. You can also use built-in workflow nodes (AI Agent, Human in the Loop, Condition, Aggregate Results) in pair with VirusTotal modules to craft complex integration flows with branches, filtering, and conditional logic. There are absolutely no limits of what you can build.
References
List of sources used to gather information about the VirusTotal integration.
- VirusTotal integration source code, module specs and credentials implementation.
- Internal VirusTotal integration documentation, structured input and output parameters, scopes, and authentication methods.
- Official VirusTotal vendor API documentation — used to verify field meanings, authentication flows, and anything our own specs don't fully capture.
- WEXTL® Visual Workflow Builder, anonymized data from our technical support team.
- WEXTL® Apps Library
- WEXTL® VirusTotal App Documentation
- WEXTL® Workflow Scheduler
- WEXTL® HTTP node documentation