Live Threat Intel Stats

What ScanTotal is actually catching, in the past 30 days.

How this is measured. Numbers are counted from real scans run through ScanTotal during the past 30 rolling days. Aggregated only, no IP addresses, file contents, URLs, or other identifiers leave our database. Refreshes hourly.

What the detection rate means. Most scans we run come back clean, that's the expected outcome. A 1-3% detection rate means the scanner is finding threats in the small fraction of submissions that genuinely have them, not missing things. Higher would suggest a noisy false-positive rate; much lower would suggest under-detection.

Industry test signatures (EICAR, AMTSO) are excluded from threat counts so the numbers reflect real-world threats, not testing activity. ScanTotal launched March 2026, so totals continue to grow as more people scan.

Scans run
...
past 30 days
Threats caught
...
across all six tools
Detection rate
...
% of scans flagged

Daily scan volume

Loading...

Scans per day for the past 30 days. Orange line shows threats caught per day (excluding test signatures).

Scans by tool

ToolScansThreatsDetection rate
Loading...

Top threats detected

Threat nameCount
Loading...

Where scanning is happening

CountryScans
Loading...

Country detection is by Cloudflare's edge geo-IP. Privacy: no per-user IPs are stored.

Last refresh: ...

See it for yourself

Run a scan and add to the count. Free, private, no signup.

Open Scanner