Anti-malware APIs help you scan files, URLs, and domains for security threats. Integrate virus scanning, phishing detection, and threat intelligence into your applications to protect your users.
Last verified: April 1, 2026
| Name | Description | Auth | HTTPS | CORS | Status |
|---|---|---|---|---|---|
| AbuseIPDB | IP/domain/URL reputation | apikey | Yes | unknown | alive |
| AlienVault Open Threat Exchange (OTX) | IP/domain/URL reputation | apikey | Yes | unknown | dead |
| CAPEsandbox | Malware execution and analysis | apikey | Yes | unknown | alive |
| Google Safe Browsing | Google Link/Domain Flagging | apikey | Yes | unknown | alive |
| MalDatabase | Provide malware datasets and threat intelligence feeds | apikey | Yes | unknown | dead |
| MalShare | Malware Archive / file sourcing | apikey | Yes | no | alive |
| MalwareBazaar | Collect and share malware samples | apikey | Yes | unknown | alive |
| NoPhishy | Check links to see if they're known phishing attempts | apikey | Yes | yes | alive |
| Scanii | Simple REST API that can scan submitted documents/files for the presence of threats | apikey | Yes | yes | alive |
| URLhaus | Bulk queries and Download Malware Samples | none | Yes | yes | alive |
| URLScan.io | Scan and Analyse URLs | apikey | Yes | unknown | alive |
| VirusTotal | VirusTotal File/URL Analysis | apikey | Yes | unknown | alive |
| Web of Trust | IP/domain/URL reputation | apikey | Yes | unknown | alive |
1 of these APIs require no authentication — you can start making requests immediately without signing up for an account. Just pick one from the table above, check its documentation, and send your first request.
12 APIs in this category require a free API key. This usually means creating a free account on the provider's website and copying your key from the dashboard. The process typically takes less than a minute.
Not sure where to start? Look for APIs marked as "alive" in the status column — these were recently verified as working. For browser-based projects, check that the API supports CORS.
Yes, all APIs listed on API Bouncer have a free tier. Some are completely open (no sign-up needed), while others require a free account to get an API key. Free tiers typically have rate limits — check each API's documentation for specifics.
It depends on your needs. Consider: Do you need authentication or prefer no-auth? Does your project need CORS support for browser access? How many requests will you make? Start with a no-auth API to prototype quickly, then switch to a more feature-rich option if needed.
We run periodic health checks on all listed APIs. The "Status" column shows whether each API was responding at our last check. APIs marked as "alive" were recently verified. You can also test any API yourself using curl or our guides on testing APIs.
Most free APIs allow commercial use, but terms vary by provider. Always check the specific API's terms of service. Some APIs have separate free and commercial tiers with different rate limits.
Buy me a coffee