ShieldScan API

Scan any URL, file, or IP address for malware and threats from your own application. Simple REST API, JSON responses, powered by 95+ antivirus engines.

Overview

The ShieldScan API lets you integrate threat scanning directly into your app, workflow, or security tool. All endpoints accept JSON and return structured scan results with a 0–100 risk score.

Base URL:

https://shieldscann.io/api/v1

Pricing

Free
$0
forever
  • 15 scans / month
  • URL, file & IP scanning
  • Full JSON results
  • 1 API key
Pro
$19.99
per month
  • Unlimited scans
  • URL, file & IP scanning
  • Full JSON results
  • Up to 5 API keys
  • Priority processing
  • PDF report generation
Upgrade to Pro →

Authentication

All API requests require an API key. Generate yours from the ShieldScan app under Settings → API Keys.

Pass your key in the Authorization header:

Authorization: Bearer sk_live_your_key_here

Or as the X-API-Key header:

X-API-Key: sk_live_your_key_here

Scan a URL

POST/api/v1/url

Check any URL for malware, phishing, and threats.

Request body

ParameterTypeDescription
urlstringThe URL to scan. http/https or bare domain.

Example

curl -X POST https://shieldscann.io/api/v1/url \
  -H "Authorization: Bearer sk_live_your_key" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://example.com"}'

Response

{
  "success": true,
  "data": {
    "url": "https://example.com",
    "riskScore": 0,
    "riskLevel": "SAFE",
    "breakdown": [],
    "details": {
      "virustotal": {
        "flagged": 0,
        "total": 95,
        "malicious": 0,
        "suspicious": 0,
        "harmless": 87,
        "undetected": 8
      },
      "safebrowsing": { "isMalicious": false, "threats": [] },
      "whois": { "ageDays": 9862 },
      "ssl": { "valid": true, "domainMatch": true, "daysOld": 45 }
    },
    "scannedAt": "2026-04-16T10:00:00.000Z"
  }
}

Scan a File

POST/api/v1/file

Upload any file and scan it for viruses and malware. Send as multipart/form-data.

Request

FieldTypeDescription
filefileThe file to scan. Max 32MB. Any file type.

Example

curl -X POST https://shieldscann.io/api/v1/file \
  -H "Authorization: Bearer sk_live_your_key" \
  -F "file=@/path/to/file.pdf"

Scan an IP or Domain

POST/api/v1/ip

Check the reputation of an IP address or domain name.

Request body

ParameterTypeDescription
targetstringIPv4 address or domain name.

Example

curl -X POST https://shieldscann.io/api/v1/ip \
  -H "Authorization: Bearer sk_live_your_key" \
  -H "Content-Type: application/json" \
  -d '{"target": "8.8.8.8"}'

Response Format

All responses return JSON. Successful responses include success: true and a data object. Every scan result includes:

FieldTypeDescription
riskScorenumber0–100. Higher = more dangerous.
riskLevelstringSAFE, LOW, MEDIUM, HIGH, or CRITICAL.
breakdownarrayEach signal that contributed to the score.
details.virustotalobjectEngine counts and flagging engines.
details.safebrowsingobjectGoogle Safe Browsing result.
details.whoisobjectDomain age and registration info.
details.sslobjectSSL certificate analysis.
scannedAtstringISO 8601 timestamp.

Error Codes

HTTP StatusMeaning
400Invalid request (missing or malformed parameters)
401Missing or invalid API key
429Monthly scan limit reached — upgrade to Pro
500Scan failed — try again

Rate Limits

PlanMonthly limitConcurrent requests
Free15 scans1
ProUnlimited5
When you exceed your limit, the API returns HTTP 429 with an upgrade field pointing to the pricing page.

Get Your API Key

Sign in to ShieldScan and generate your key from Settings → API Keys. Free to start.

Open ShieldScan →