# VirusTotal: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 5 judge labels across 1 category by 5 of 14 models. Page: https://www.gane.ai/index/it/vendors/virustotal

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Threat intelligence platforms](https://www.gane.ai/index/it/security/threat-intelligence-platforms/index.md) | 0% | 77 | 40% | 5 |

## What the models said for it

- "paired with free OSINT tools such as VirusTotal, AlienVault OTX, or AbuseIPDB" (Grok 4.20, Threat intel)
- "Freemium | Budget-conscious teams needing basic threat intelligence" (Kimi K2, Threat intel)
- "Free tier has usage limits; best used as a supplementary tool" (MiniMax M2.5, Threat intel)

## And against it

- "Using VirusTotal's standard upload flow for confidential material... Don't upload proprietary files, customer data, or sensitive URLs unless you're authorized to share them." (GPT-6 Luna, Threat intel)
- "Mandiant and VirusTotal were folded into Google Threat Intelligence" (Muse Glimmer 30B, Threat intel)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 1 | 0 | 0 | 1 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 1 | 0 | 0 | 1 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 1 | 0 | 0 | 1 |
| GPT-6 Luna | 0 | 0 | 0 | 1 | 1 |
| Muse Glimmer 30B | 0 | 0 | 0 | 1 | 1 |

## Sources returned with these answers

The sites and pages cited by the answers that named VirusTotal, from 28 of the 29 answers that named it (only the models that return a source list).

### Domains cited

- spotsaas.com: 22
- softwareadvice.com: 15
- b2breviews.com: 13
- comparitech.com: 7
- cyble.com: 7
- g2.com: 7
- reddit.com: 7
- gane.ai/index: 6
- vectra.ai: 6
- cotocus.com: 5

### Pages cited

- https://spotsaas.com/list/threat-intelligence-software/for-small-business: 22
- https://softwareadvice.com/security/threat-intelligence-comparison/small-business: 14
- https://b2breviews.com/threat-intelligence-platforms: 13
- https://cyble.com/knowledge-hub/top-best-threat-intelligence-platforms: 7
- https://comparitech.com/net-admin/best-threat-intelligence-platforms: 6
- https://www.gane.ai/index/it/security/threat-intelligence-platforms/smb: 6
- https://vectra.ai/topics/threat-intelligence-tools: 6
- https://g2.com/categories/threat-intelligence/small-business: 5

## In its own words

What VirusTotal's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.


## What it publishes

Every page virustotal.com exposes, read 2026-09-29: 459 addresses. By kind, pages and the last 90 days:

- blog: 418 pages, 2 in the last 90 days, latest 2026-08-11
- case study: 1 pages, 0 in the last 90 days, latest 2025-10-21
- conference or event: 1 pages, 0 in the last 90 days, latest 2025-09-05
- Recent: 2026-08-11 blog: Enriched url reports url scanning 20 https://blog.virustotal.com/2026/08/enriched-url-reports-url-scanning-20.html
- Recent: 2026-08-01 blog: 08 https://blog.virustotal.com/2026/08/
- Recent: 2026-06-08 blog: Crowdsourced ai knostic https://blog.virustotal.com/2026/06/crowdsourced-ai-knostic.html
- Recent: 2026-06-01 blog: 06 https://blog.virustotal.com/2026/06/
- Recent: 2026-04-16 blog: Virustotal inside agent loop https://blog.virustotal.com/2026/04/virustotal-inside-agent-loop.html
- Recent: 2026-04-01 blog: 04 https://blog.virustotal.com/2026/04/

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.