Best Anti-Malware APIs in 2026

The top 15 of 17 free Anti-Malware APIs, ranked by how easy they are to start with (API key, HTTPS, CORS), how reliable they are in our daily health checks, and what developers rate them. URLhaus API takes the top spot.

Last tested Oct 24, 2026 · Rankings update daily

1
URLhaus API
Online · 1195 ms
Bulk queries and Download Malware Samples.
- No API key needed
- Callable from the browser (CORS)
- HTTPS
No authHTTPSCORS
2
ScanMalware API
Online · 706 ms
Scan URLs in a sandboxed browser and search past scans by domain, IP, ASN, JARM or favicon hash.
- No API key needed
- Callable from the browser (CORS)
- HTTPS
No authHTTPSCORS
3
NoPhishy API
Online · 1021 ms
Check links to see if they're known phishing attempts.
- Callable from the browser (CORS)
- HTTPS
apiKeyHTTPSCORS
4
IPWhois.net Blacklist API
Online · 1260 ms
Community IP blacklist to check and report abusive IP addresses.
- No API key needed
- HTTPS
No authHTTPSCORS ?
5
Scanii API
Online · 1578 ms
Simple REST API that can scan submitted documents/files for the presence of threats.
- Callable from the browser (CORS)
- HTTPS
apiKeyHTTPSCORS
6A
AbuseIPDB API
Online · 1055 ms
IP/domain/URL reputation. A free anti-malware API by AbuseIPDB.
- HTTPS
apiKeyHTTPSCORS ?
7
CAPEsandbox API
Online · 1142 ms
Malware execution and analysis. A free anti-malware API by capev2.readthedocs.io.
- HTTPS
apiKeyHTTPSCORS ?
8
MalwareBazaar API
Online · 720 ms
Collect and share malware samples.
- HTTPS
apiKeyHTTPSCORS ?
9
AlienVault Open Threat Exchange (OTX) API
Online · 1291 ms
Learn about the latest cyber threats.
- HTTPS
apiKeyHTTPSCORS ?
10
Google Safe Browsing API
Online · 1961 ms
APIs to access the Google Safe Browsing lists of unsafe web resources.
- HTTPS
apiKeyHTTPSCORS ?
11M
MalShare API
Online · 1045 ms
Malware Archive / file sourcing.
- HTTPS
apiKeyHTTPSNo CORS
12
Malwagon API
Online · 1343 ms
Detonates files and URLs in instrumented VMs and returns behaviour, IOCs and ATT&CK.
- HTTPS
apiKeyHTTPSCORS ?
13
VirusTotal API
Online · 1656 ms
Commonly missed Looking for more API quota and additional threat context?
- HTTPS
apiKeyHTTPSCORS ?
14
Web of Trust API
Online · 873 ms
IP/domain/URL reputation. A free anti-malware API by support.mywot.com.
- HTTPS
apiKeyHTTPSCORS ?
15M
MalDatabase API
Online · 1392 ms
Provide malware datasets and threat intelligence feeds.
- HTTPS
apiKeyHTTPSCORS ?

Anti-Malware APIs compared

Top Anti-Malware APIs compared
API	API key	HTTPS	CORS	Uptime	Response	Rating
URLhaus	No	Yes	Yes	Up	1195 ms	Not rated
ScanMalware	No	Yes	Yes	Up	706 ms	Not rated
NoPhishy	Required	Yes	Yes	Up	1021 ms	Not rated
IPWhois.net Blacklist	No	Yes	Unknown	Up	1260 ms	Not rated
Scanii	Required	Yes	Yes	Up	1578 ms	Not rated
AbuseIPDB	Required	Yes	Unknown	Up	1055 ms	Not rated
CAPEsandbox	Required	Yes	Unknown	Up	1142 ms	Not rated
MalwareBazaar	Required	Yes	Unknown	Up	720 ms	Not rated
AlienVault Open Threat Exchange (OTX)	Required	Yes	Unknown	Up	1291 ms	Not rated
Google Safe Browsing	Required	Yes	Unknown	Up	1961 ms	Not rated

More Anti-Malware APIs

Best Anti-Malware API FAQ

What is the best free Anti-Malware API in 2026?

Based on access, reliability and developer ratings, the top free Anti-Malware APIs right now are URLhaus API, ScanMalware API and NoPhishy API. URLhaus API ranks first. Rankings update daily from health checks of all 17 Anti-Malware APIs in the directory.

What is the best Anti-Malware API without an API key?

URLhaus API, ScanMalware API and IPWhois.net Blacklist API need no API key, so you can call them without signing up. 3 of the 17 ranked Anti-Malware APIs are keyless.

Which Anti-Malware API works from the browser?

URLhaus API, ScanMalware API and NoPhishy API support CORS over HTTPS, so front-end JavaScript can call them directly without a proxy.

How are these APIs ranked?

Each API gets a score from: no API key (+), HTTPS (+), CORS support (+), 30-day uptime and response time from our daily health checks, and ratings from developers on this site. APIs that failed three checks in a row are left out until they recover.