Back to the catalog

General Business and Office Tools

VirusTotal

VirusTotal logo

Product description

VirusTotal inspects items with over 70 antivirus scanners and URL/domain blocklisting services, in addition to a myriad of tools to extract signals from the studied content. Any user can select a file from their computer using their browser and send it to VirusTotal. VirusTotal offers a number of file submission methods, including the primary public web interface, desktop uploaders, browser extensions and a programmatic API.

How we use VirusTotal at VA

VirusTotal will enable CSOC to add data enrichment into threat analysis, eliminating the current use restrictions of the free API that have been used. VirusTotal free API restrictions limits CSOC to 500 searches daily and 5 per minute, the licensed version eliminates this.

No VA Data

For SaaS products that do not contain VA-owned data*, there is now an expedited process that does not require a traditional VA authority to operate (ATO). Criteria include the following:

  • User owns a device (even if VA paid for the purchase of the device) such as a CPAP or glucometer that uses a SaaS product to share patient data (non-VA data*).
  • SaaS product has no direct connections or interfaces to VA systems or network.
  • Users consent to share their data (which may include PII and PHI) directly with the SaaS provider.
  • SaaS providers must have published terms and conditions for user consent.
  • VA providers access data in a view-only mode or with limited functionality per the userโ€™s consent.

*According to Circular a130, anything that VA creates, collects, processes, maintains, disseminates, or disposes of by or for the federal government is considered federal information (VA data).

VA providers may not enter any VA information into this product; it must adhere to no VA data standards mentioned above.

The next step

If VA employees would like to use or purchase this previously approved service, please submit a SaaS inquiry form to confirm your use case and get procurement approval.

Submit a Request
  • Status: Approved
  • VA Authorization Level: No VA Data
  • Funding: End-user funding required
  • Product Line: Cybersecurity and Access Control Services
  • VA Authorization Level: No VA Data

Link Disclaimer

This page includes links to other websites outside our control and jurisdiction. VA is not responsible for the privacy practices or the content of non-VA Web sites. We encourage you to review the privacy policy or terms and conditions of those sites to fully understand what information is collected and how it is used.

Statement of Endorsement

Reference herein to any specific commercial products, process, or service by trade name, trademark, manufacturer, or otherwise, does not necessarily constitute or imply its endorsement, recommendation, or favoring by the United States Government, and shall not be used for advertising or product endorsement purposes.