Every file your users upload. Vetted in seconds.
One API call scans any upload for malware — cloud hosted in the UK, with the file deleted the moment scanning finishes. Your users' files are never shared with antivirus vendors or threat-intelligence platforms.
How it works
A checkpoint between your users and your servers
Your website sends us the file before trusting it. We answer with a verdict. That's the whole integration — three steps, no antivirus software to install anywhere.
Step 1
Send the file
POST the upload (or a link to it) with your API key. You get a ticket back in milliseconds — your user never waits.
Step 2
We scan it here
The file is checked against known threats — including inside ZIPs and archives — on infrastructure we run in a UK cloud region.
Step 3
Verdict delivered
Clean or infected, with the threat name. Sent to your webhook (cryptographically signed) or collected whenever you ask.
# One request. That's the integration. curl -H "Authorization: Bearer upscan_yourkey" \ -F file=@upload.pdf \ https://upscan.desaihome.uk/v1/scans { "id": "4821…", "status": "pending" } # verdict follows in seconds
Privacy by architecture
Your files are scanned in the UK. Then they cease to exist.
Most scanning services forward files to clouds overseas — some even share them with the wider security community. FileVet is built the opposite way round: scanning happens in a UK cloud region we operate, and deletion isn't a policy we promise, it's a step in the code that runs on every scan, even failed ones.
UK sovereignty
Files are scanned and deleted inside the UK, and never forwarded to antivirus vendors or threat-intelligence platforms. Optional AI injection scanning — off by default — sends extracted text to our AI provider; nothing else leaves.
Zero retention
We keep the file's fingerprint (hash) and the verdict — never the content. There is nothing to breach.
UK GDPR-native
Plain-English processing terms written for UK GDPR, not translated from another jurisdiction's boilerplate.
What's in the box
Built for the upload form you already have
Everything arrives through one small API — or through a plugin that needs no code at all.
Archive-deep scanning
Threats hidden inside ZIP, GZIP and RAR files are unpacked and caught, with decompression-bomb protection built in.
Signed webhooks
Every verdict is delivered with a cryptographic signature and retried automatically, so results arrive and can't be forged.
Scan by link
Send a URL instead of the file itself — useful when uploads already live in your cloud storage.
Fair-use built in
Clear monthly allowances and per-minute limits, with live usage visible in your dashboard and via the API.
WordPress plugin
Paste an API key and every form and media upload on a WordPress or WooCommerce site is vetted automatically — no code at all.
AI booby-trap detection
Feeding uploads to an AI? We catch hidden prompt-injection instructions — white-on-white text, invisible fonts, payloads inside images — that no virus scanner looks for.
Pricing
Priced in pounds. Sized for real websites.
Every plan includes the full engine — archives, webhooks, dashboard, the lot. Plans differ only in how much you scan.
Business
£29/month
15,000 scans / month
- Everything in Starter
- Larger file sizes
- Priority support
Agency
£79/month
75,000 scans / month
- Cover all client sites
- Multiple API keys
- Onboarding help
Launch pricing. Over your allowance? Scans continue at £0.005 each — no hard cut-offs mid-month.
Questions
The things people ask first
What happens to files after scanning?
They're deleted immediately — it's a built-in step of every scan, including ones that error. We retain only the file's SHA-256 fingerprint and the verdict, which contain none of the file's content.
How fast is a scan?
Your request is acknowledged in milliseconds, and most documents get a verdict within a few seconds. Large files take longer; because everything is asynchronous, your users never wait on us.
What file types and sizes are supported?
Any file type, including archives (which are scanned inside). Size limits depend on your plan — the Free tier covers typical documents and images, with larger limits on Business and Agency.
Do I need to install anything?
No. UpScan is an API — your website sends files over HTTPS and receives verdicts back. If you're on WordPress, a plugin that needs no code at all is on the way.
Put a checkpoint on your upload form today
100 free scans a month, no card required. Your first verdict is about two minutes away.
Start scanning free