Skip to content
OBITO VIRUS DETECTOROBITOVIRUS DETECTOR

API

Analysis architecture

DETECT VIRUS EASYLY WITH OBITO VIRUS DETECTOR. OBITO VIRUS DETECTOR never places provider credentials in the browser. The frontend talks only to this application’s secure backend, which fans out to scanning engines and returns an aggregated report.

  1. 01

    Frontend

  2. 02

    Secure backend

  3. 03

    Scanning engines

  4. 04

    Result aggregator

  5. 05

    Dashboard

Supported operations

File scan, URL scan and hash lookup. Each request is validated, rate-limited and executed server-side. Uploaded files are streamed to the provider and are not executed here.

Authentication & secrets

Provider API keys stay in server environment variables. The public site does not expose those keys, and client JavaScript cannot call threat-intelligence providers directly.

Rate limits

Scan submissions are limited per client to protect both this service and upstream engines. When a limit is hit, the UI shows a rate-limit state instead of inventing a verdict.

Unconfigured providers

If no scanning provider is configured, the API returns a clearly labeled configuration required response. Demo mode never reports a file as safe or malicious.