QX Labs
All integrations
VirusTotal
QX Labs Icon
Research

Let agents triage every threat with VirusTotal

QX scans suspicious files, URLs, domains and IPs against dozens of engines—then routes, blocks or escalates the verdict so your team isn't stuck investigating noise.

@QX Is that link a user just reported actually malicious?
QX
Yes—the URL hxxps://invoice-acme[.]co flagged malicious by 14 of 89 engines, registered 3 days ago, and tied to a known phishing cluster. Shall I block it in your secure web gateway and alert the user?
VirusTotal
VirusTotal
Slack
Slack

Stop pasting hashes into tabs, chasing false positives, and triaging alerts one by one. Hand it to an agent.

Threat triage

Verdicts in seconds, not hours

Every suspicious file, URL or IP gets checked across dozens of engines, scored against your risk rules, and turned into a clear verdict—so analysts only see what really needs a human.

Enrichment

Context attached to every alert

Agents pull reputation, relationships, ASN and historical detections for any indicator and attach the full picture to the ticket—no more pivoting through five tools to understand one alert.

Response

Bad indicators blocked automatically

Once a verdict is confirmed, agents push the indicator to your blocklists, notify the affected user, and file the incident—so containment happens at machine speed, not on Monday morning.

VirusTotal

Real workflows, built for your team

Build complex workflows in minutes that chain VirusTotal together with the rest of your stack. Trigger them on specific events, on schedule, or on demand.

Security: Triage reported phishing in real time

User reports a suspicious email

User reports a suspicious email

Triggered in Gmail

QX Labs Icon

Extract URLs, attachments & sender

Agent step

VirusTotal

Scan URLs and file hashes

in VirusTotal

QX Labs Icon

Score the verdict against policy

Agent step

Malicious: confirmed
Page the on-call analyst

Page the on-call analyst

Alert via Slack

Clean: false positive
Reply to the reporter

Reply to the reporter

via Gmail

QX agents can scan URLs, look up file hashes, enrich domains and IPs—and a lot more

SEARCHSearch the VirusTotal database
SENDSubmit a URL for scanning
SENDUpload a file for analysis
QUERYGet a file's analysis report
QUERYGet a URL's analysis report
QUERYGet a domain or IP report
QUERYExplore related indicators
CREATEAdd a comment or vote

+ 8 more actions

About VirusTotal

VirusTotal is Google-owned threat intelligence service that analyses files, URLs, domains and IP addresses against more than 70 antivirus engines and website scanners. Used by security teams worldwide, its rich API exposes verdicts, relationships and community intelligence—making it a perfect data source for automated triage and response.

About QX Labs

QX is an AI agent platform that helps you build, run and scale AI across your team in a few clicks. Create agents that connect to your data and 1,000+ apps, building institutional memory that gets sharper every run. Then delegate tasks to them from where you already work—Slack, Teams, WhatsApp or email.

See VirusTotal working inside your stack

Want an AI co-worker that triages every suspicious file, URL and IP for you? Book a demo to walk through your use cases, or get started for free.

Book a demo