Virustotal Plans Pricing
VirusTotal (Google-owned, now also marketed as Google Threat Intelligence / GTI) prices in three commercial shapes: (1) a free Public API for individuals and open-source projects, capped at a documented 4 req/min / 500 req/day allowance; (2) a Premium API offered on bespoke SLAs (no published rack rate) that lifts the daily allowance and unlocks Premium-only surfaces — Livehunt, Retrohunt, Feeds, Private Scanning, Threat Landscape (Threat Actors / Malware & Tools / Campaigns / Reports / Vulnerabilities), Zip downloads, and the IoC Stream; and (3) Google Threat Intelligence Enterprise, sold under the Google Cloud contract, which adds DTM (Digital Threat Monitoring) and ASM (Attack Surface Management). All paid tiers are "contact sales" — there is no self-service upgrade.
Virustotal Plans Pricing is the machine-readable pricing-plan profile for VirusTotal on the APIs.io network, conforming to the API Commons Plans specification.
It defines 3 plans, covering freemium and enterprise tiers, with named plans including Public API (Free), Premium API, Google Threat Intelligence (Enterprise).
Tagged areas include Threat Intelligence, Anti-Malware, Security, File Analysis, and URL Analysis.
Plans
Free tier for personal use, education, and contributions to the community corpus. Cannot be used commercially or in business workflows that don't contribute new files. Multiple-account registration is prohibited.
- File / URL / IP / Domain reports
- File scanning up to 32 MB (650 MB via upload_url)
- Comments and votes
- Basic relationships graph
- Crowdsourced YARA rule reads
Commercial tier for SOC, IR, MSSP, and threat-research teams. Pricing is negotiated per SLA — no published rack rate. Unlocks Livehunt, Retrohunt, Feeds (file / URL / IP / domain / sandbox), Private Scanning, the IoC Stream, Threat Landscape (Threat Actors, Malware & Tools, Campaigns, Reports, Vulnerabilities), full relationships graph, Zip downloads, and submission-context metadata (first-submission date, submitter country, filenames).
- All Public API features
- Livehunt (YARA real-time matching on incoming corpus)
- Retrohunt (YARA scans against historical corpus)
- IoC Stream subscriptions
- File / URL / Domain / IP feeds (per-minute and hourly)
- Sandbox behaviour feed
- Private Scanning (files, URLs, behaviours, zip)
- Threat Landscape — Threat Actors, Malware & Tools, Campaigns, Reports, Vulnerabilities
- Crowdsourced YARA rule writes
- Zipped, password-protected sample downloads
- Submission-context metadata
- Full relationships graph (contacted domains, embedded URLs, ITW URLs)
- Engine-by-engine sandbox results
The umbrella commercial product (formerly "Mandiant Advantage" + "VT Enterprise"). Sold under the Google Cloud contract. Adds Digital Threat Monitoring (DTM) and Attack Surface Management (ASM) on top of all Premium API surfaces. Pricing is per-tenant via Google Cloud sales.
- All Premium API features
- Mandiant-curated threat intelligence
- DTM — leaked credential / brand abuse / dark-web monitoring
- ASM — external attack surface discovery and rating
- Google Cloud SSO / IAM integration
- Enterprise SLAs and named support
Sources
- https://docs.virustotal.com/reference/public-vs-premium-api
- https://docs.virustotal.com/reference/overview
- https://www.virustotal.com/gui/contact-us/premium-services
- https://gtidocs.virustotal.com/reference/openapi-specs
Work with this as data
Every plan here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for plans
4 MCP tools reach this
find_plansBrowse and filter every plan in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
curl "https://apis.io/api/v1/plans/virustotal-plans-pricing"curl "https://apis.io/api/v1/plans?limit=25"Discovery needs no key. Ratings and market analysis are Pro.