Skip to main content
You connect VirusTotal once at the MSP level, with an API key.

​
1. Get an API key

1

Sign in to VirusTotal

Sign in at virustotal.com with the account whose licence Neo should use.
2

Copy the key

Open your user menu (top right) and choose API key, then copy the key. A VirusTotal group administrator can create a service account for Neo instead and copy its key, so the key does not belong to a person.
The key carries every privilege of its account. VirusTotal’s terms allow the free Public API only for non-commercial use, with 4 requests a minute and 500 a day, so use a key with a Premium API licence. See Which VirusTotal key you need.

​
2. Add the key in Neo

1

Open Integrations

Open Integrations in the Neo Dashboard and find VirusTotal under Security.
2

Save the key

Paste the API Key and click Save. Neo checks the key with VirusTotal before it saves, so a wrong key is rejected straight away. A key whose account is not activated yet is rejected too: activate it from VirusTotal’s email and save again.

​
3. Turn VirusTotal on per agent

Open the agent from Agents, go to the Integrations section, and configure the VirusTotal block. To check indicators, Threat Reports & Search at Read Only is enough. To submit files and URLs and share them with the community, also set Scans & Rescans to Read / Write, and Comments & Votes to post verdicts. See VirusTotal API for what each profile does.