Anti-malware APIs help you scan files, URLs, and domains for security threats. Integrate virus scanning, phishing detection, and threat intelligence into your applications to protect your users.
Last verified: November 12, 2026
| Name | Description | Auth | HTTPS | CORS | Uptime (30 days) |
|---|---|---|---|---|---|
| AbuseIPDB | IP/domain/URL reputation | apikey | Yes | unknown | 100% (5 checks) |
| AlienVault Open Threat Exchange (OTX) | IP/domain/URL reputation | apikey | Yes | unknown | 100% (5 checks) |
| Bewary | Scam detection API: verdicts with reason codes for links, domains, phone numbers, SMS short codes, emails, crypto wallets and IBANs | apikey | Yes | no | 100% (4 checks) |
| CAPEsandbox | Malware execution and analysis | apikey | Yes | unknown | 100% (5 checks) |
| Dymo API | Fraud & reputation detection | apikey | Yes | yes | 100% (5 checks) |
| Google Safe Browsing | Google Link/Domain Flagging | apikey | Yes | unknown | 100% (5 checks) |
| IPWhois.net Blacklist | Community IP blacklist to check and report abusive IP addresses | none | Yes | unknown | 100% (5 checks) |
| MalDatabase | Provide malware datasets and threat intelligence feeds | apikey | Yes | unknown | 100% (5 checks) |
| MalShare | Malware Archive / file sourcing | apikey | Yes | no | 100% (5 checks) |
| Malwagon | Detonates files and URLs in instrumented VMs and returns behaviour, IOCs and ATT&CK | apikey | Yes | unknown | 40.0% (5 checks) |
| MalwareBazaar | Collect and share malware samples | apikey | Yes | unknown | 100% (5 checks) |
| NoPhishy | Check links to see if they're known phishing attempts | apikey | Yes | yes | 100% (5 checks) |
| Scanii | Simple REST API that can scan submitted documents/files for the presence of threats | apikey | Yes | yes | 100% (5 checks) |
| URLhaus | Bulk queries and Download Malware Samples | none | Yes | yes | 100% (5 checks) |
| URLScan.io | Scan and Analyse URLs | apikey | Yes | unknown | 100% (5 checks) |
| Verisys Antivirus API | Antivirus as a service - REST API that scans provided files for malware and NSFW content | apikey | Yes | yes | 100% (5 checks) |
| VirusTotal | VirusTotal File/URL Analysis | apikey | Yes | unknown | 40.0% (5 checks) |
| Web of Trust | IP/domain/URL reputation | apikey | Yes | unknown | 100% (5 checks) |
2 of these APIs require no authentication — you can start making requests immediately without signing up for an account. Just pick one from the table above, check its documentation, and send your first request.
16 APIs in this category require a free API key. This usually means creating a free account on the provider's website and copying your key from the dashboard. The process typically takes less than a minute.
Not sure where to start? Check the uptime column: it shows how often each API's documentation responded to our daily checks over the last 30 days, and the dot shows whether it responded at the latest check. For browser-based projects, check that the API supports CORS.
Yes, all APIs listed on API Bouncer have a free tier. Some are completely open (no sign-up needed), while others require a free account to get an API key. Free tiers typically have rate limits — check each API's documentation for specifics.
It depends on your needs. Consider: Do you need authentication or prefer no-auth? Does your project need CORS support for browser access? How many requests will you make? Start with a no-auth API to prototype quickly, then switch to a more feature-rich option if needed.
We run periodic health checks on all listed APIs. The "Status" column shows whether each API was responding at our last check. APIs marked as "alive" were recently verified. You can also test any API yourself using curl or our guides on testing APIs.
Most free APIs allow commercial use, but terms vary by provider. Always check the specific API's terms of service. Some APIs have separate free and commercial tiers with different rate limits.
Buy me a coffee