SOAR VirusTotal API integration

James Betts

June 22, 2022 13:51

Hi, Is anyone using the VirusTotal integration into their SOAR?
I was all for getting it setup until I saw that you cannot use the free Public API in a commercial product.

“The Public API must not be used in commercial products or services.” ( https://developers.virustotal.com/reference/public-vs-premium-api )

So, is anyone using the Premium API? and is it really $10,000 per year?

Or are you sticking to the public API and hoping to not get blacklisted?

Cheers

1 comment

Date Votes

CSO Integrations June 23, 2022 10:04

Hello James,

It depends how many API requests you are sending by day. If it is just a couple you might stay with the public API, I don’t think you’ll be blacklisted ( even if I don’t recommend this solution for long term )

You have different options (price with no negociation) but, if I understood well, it depends of the size of your organization

For me, it was more or less :

1k API /day: €7,200/year

5k API /day: €18,000/year
10k API /day: 28,800/year

I suggest you to take contact with VT in order to have a price order

Have a good day

Please sign in to leave a comment.