Powered by
Every file is scanned by the Sophos® engine.
attachmentAV does not ship a home-grown scanner. Detection comes from Sophos, a commercial antivirus engine, wrapped in our highly available scanning infrastructure.
Hourly signature updates
The Sophos threat database is refreshed hourly, so protection against the latest threats reaches you without any action on your side.
Advanced detection
Signatures and advanced detection algorithms catch viruses, worms, trojans, and ransomware, including zero-day threats.
Nothing to install or maintain
No antivirus agent on your servers, no signature files to distribute, no scanner to patch.
Virus and Malware Scan API
One API underneath every solution.
Salesforce, Jira, Confluence, WordPress, Make, GitHub, n8n — every attachmentAV integration is a layer on top of the same Virus and Malware Scan API.
That API is not an internal detail. It is a product in its own right, open to every developer who wants to scan files from their own application.
- SDKs for Java, Python, and JavaScript/TypeScript, plus a CLI
- Synchronous and asynchronous scan modes
- Run it as SaaS, or self-hosted in your own AWS account
curl -X POST \
-H "x-api-key: $ATTACHMENTAV_API_KEY" \
-H 'Content-Type: application/json' \
-d '{"download_url": "https://example.com/report.pdf"}' \
https://eu.developer.attachmentav.com/v1/scan/sync/downloadResponse{"status":"clean","size":2903045,"realfiletype":"Adobe Portable Document Format (PDF)"}
Worldwide · EU by default
Data sovereignty
An EU company. Pick region for data processing.
attachmentAV is available worldwide and built by widdix GmbH, an independent, self-funded company based in Germany. Access to our systems is granted only to support, administrative, and security personnel based in the EU.
Scanning happens in the jurisdiction you select. Europe is the default.
- EuropeDefault
- United States
- Canada
- India
- Australia
Data sent to a regional endpoint does not leave that jurisdiction. Files are encrypted in transit and at rest, and deleted immediately after processing.
Read about jurisdictions and securityTrusted Solution
Independently certified. Officially partnered.
ISO 27001 certified
We establish, maintain, and continually improve an information security management system that is independently audited.
GDPR compliant
We are a company based in Germany and are processing data under a DPA (Data Processing Agreement) following GDPR requirements.
Salesforce, Atlassian & Sophos partner
Our apps are reviewed and listed on the Salesforce AppExchange and the Atlassian Marketplace. We are an official Sophos OEM partner.
2TB
of files scanned for malware in the last 30 days as of September 24, 2026
257
infections found in the last 30 days as of September 24, 2026
1,000+
customers trust our technology
Solutions
One solution, every platform you work with.
Pick the platform your files live on. Each integration installs in minutes and scans uploads in real time.
Missing a platform? Let us know — or build it yourself on the Virus and Malware Scan API.