Add VirusTotal Comment
Tool to add a comment to a VirusTotal resource (file, URL, domain, or IP address). Use after analyzing a resource to leave contextual feedback. Provide exactly one identifier per call.
ActionTry it
Integrate Virustotal
with your AI CRM
VirusTotal is a free online service that analyzes files and URLs for viruses, worms, trojans, and other kinds of malicious content using multiple antivirus engines and website scanners.
Explore Triggers and Actions
Add Vote
Tool to add a vote (harmless/malicious) to a VirusTotal resource. Use after reviewing analysis results to submit your verdict.
ActionTry it
Get Analysis Report
Tool to retrieve the analysis report of a file or URL submission. Use after obtaining an analysis ID to fetch its detailed report. Analysis results may be incomplete immediately after submission; poll until the report status is 'completed' before treating results as final.
ActionTry it
Get comments
Tool to retrieve the latest comments on a VirusTotal resource. Use when you need to review user-generated comments for a file, URL, domain, or IP after obtaining its identifier.
ActionTry it
Get Domain Relationships
Tool to retrieve relationship objects for a given domain. Use when you have a domain and need to explore its related entities.
ActionTry it
Get Domain Report
Tool to retrieve the analysis report of a domain. Use when you need detailed insight on a domain's reputation and analysis stats. No malicious signals on obscure or low-traffic domains may indicate limited analysis history rather than safety — treat sparse results as 'unknown', not 'safe'. Covers external OSINT only (reputation, malware, SSL posture); cannot analyze internal/private assets.
ActionTry it
Get File Report
Tool to retrieve the analysis report of a file. Use when you have a file's hash and need detailed scan metadata. Recently submitted files may return partial results; retry after a short delay before treating the report as final.
ActionTry it
Get IP Address Relationships
Tool to retrieve objects related to a specific IP address by relationship type. Use when you have an IP and need to explore connected files, URLs, or other entities.
ActionTry it
Get IP Address Report
Tool to retrieve the analysis report of an IP address. Use when you need detailed insight on an IP's reputation, ASN, country, and analysis stats. Low or zero detections indicate unknown risk, not safety — treat sparse data accordingly. Provides external OSINT only; insufficient as standalone compliance evidence.
ActionTry it
Get URL Report
Tool to retrieve the analysis report of a URL. Use when you have a URL identifier (base64-url without padding) and need detailed scan results, reputation, and metadata. Results may be incomplete immediately after submission; retry with short delays if scan engines are still processing before treating the report as final.
ActionTry it
Get VirusTotal Metadata
Tool to retrieve VirusTotal metadata. Use when you need information about available privileges, relationships between resources (like files, domains, IPs, URLs), and supported antivirus engines.
ActionTry it
Get Votes
Tool to retrieve votes on files, URLs, domains, or IP addresses. Use when you need to view community votes for a given object.
ActionTry it
Rescan File
Tool to re-analyze a previously submitted file. Use when you need updated analysis results after an initial scan.
ActionTry it
Scan URL
Tool to submit a URL for scanning. Use when you have a URL and need to submit it to VirusTotal to obtain an analysis ID for later retrieval. The returned analysis ID is preliminary — scanning engines may not have finished. Poll VIRUSTOTAL_GET_URL_REPORT with the ID using short delays to retrieve complete results.
ActionTry it
Search VirusTotal
Tool to search for objects in the VirusTotal database. Use when locating files, URLs, domains, IPs, or comments matching a query. Supports pagination with limit and cursor.
ActionTry it
Upload File
Tool to upload a file for scanning. Use when you have binary file content ready to submit for VirusTotal analysis.
ActionTry it
How the Virustotal integration works
The Virustotal integration connects your Dench AI CRM directly to Virustotal, so agents can read and act on your Virustotal data as part of everyday work — answering questions in chat, keeping your CRM in sync, and running automations without anyone copying data between tools.
16 actions are available for agents to invoke on your behalf. Every call runs through Virustotal's own authorization, scoped to the account you connect.
Set up Virustotal in Dench
- 1
Sign in to your Dench workspace and open Integrations.
- 2
Find Virustotal and click Connect — you'll authorize access through Virustotal's own sign-in flow. No API keys or code required.
- 3
Ask an agent to use Virustotal in chat, or call it from an automation.
- 4
Manage or disconnect the connection any time from workspace settings.
Frequently asked questions
How does the Virustotal integration work with Dench?
The Dench Virustotal integration connects your AI CRM to Virustotal, so AI agents can work with your Virustotal data as part of chats, automations, and CRM workflows. You connect your account once, and every agent in your workspace can use it — governed by your workspace permissions.
What actions can AI agents perform with Virustotal via Dench?
The Virustotal integration currently exposes 16 actions, including Add VirusTotal Comment, Add Vote, Get Analysis Report, Get comments, Get Domain Relationships, and Get Domain Report. Agents invoke them on your behalf from chat or from automations.
Do I need to write code to connect Virustotal to Dench?
No. You connect Virustotal from your Dench workspace using Virustotal's own sign-in and authorization flow — no API keys to copy, no glue code to maintain.
Is the Virustotal integration secure?
Connections are authorized through Virustotal's own authentication flow, and Dench stores only the authorization needed to act on your behalf. You can review and disconnect the Virustotal connection from your workspace settings at any time.