Skip to content

VirusTotal Setup

Junto uses VirusTotal for threat-intelligence lookups — checking the reputation of URLs, file hashes, domains, and IP addresses when it analyzes suspicious emails and investigates security tickets.

By default these lookups share Junto's platform VirusTotal key, which is limited to 4 requests per minute. Adding your own VirusTotal API key raises that limit so lookups run faster and don't queue during busy periods. This is optional — the integration works without a key, just at the shared rate.

Prerequisites

  • A VirusTotal account (a free account works; higher VirusTotal tiers allow higher request rates)
  • Your VirusTotal API key

Step 1: Get Your API Key

  1. Sign in at virustotal.com.
  2. Open your API key page (also found under your profile → API key).
  3. Copy the API key.

Step 2: Add the Key in Junto

  1. In Junto, go to Settings > Integrations > VirusTotal.
  2. Paste your VirusTotal API key and click Save key. The key is encrypted before storage.

Once saved, threat-intelligence lookups for your organization use your key instead of the shared one. VirusTotal is an organization-wide setting — a single key applies to all of your clients, with no per-company mapping.

Managing the Key

  • Replace the key -- Paste a new key in the Replace key field and click Update.
  • Remove the key -- Click Remove key. Lookups fall back to Junto's shared VirusTotal key (4 requests per minute).

What It Powers

Your VirusTotal key raises the rate limit on reputation lookups used by:

  • Analyze Email -- Checking links, attachments (by file hash), sender domains, and IP addresses when assessing whether an email is malicious.
  • Security investigations -- The agent's threat-intelligence tools for URL, file-hash, domain, and IP reputation.

Adding a key doesn't add new capabilities — it just lets existing lookups run at a higher rate.

Troubleshooting

  • Key won't save -- Confirm you pasted the full API key. Keys are at least 32 characters.
  • Lookups still slow or rate-limited -- A free VirusTotal account has a modest request rate. If your team runs heavy analysis volume, consider a higher VirusTotal tier.
  • Not sure a key is active -- The VirusTotal settings page shows a Connected status when your key is in use.