Threat intel scale VirusTotal operates the richest crowdsourced threat intelligence platform with extensive API and on-premise and cloud deployment options, presenting a broad opportunity to upsell enterprise-grade integrations and data access for security operations.

Enterprise partnerships Recent and ongoing enterprise partnerships (Knostic, Glamourstone, ClawHub/OpenClaw, OpenClaw, LearnClaw) indicate a strong channel and co-sell motion to embed VirusTotal Enterprise into security workflows and marketplace ecosystems.

AI and automation Crowdsourced AI integrations and the release of YARA-X enhance detection accuracy and reduce false negatives, providing a pathway to cross-sell advanced rule automation, threat hunting capabilities, and proactive defense offerings.

Global reach With a public scanning service engaging over 2 million monthly users across 232 countries and cloud-agnostic infrastructure, there is potential to monetize expanded data access, API rate plans, and tailored threat feeds for multinational customers.

Financial potential Revenue scale in the low to mid single digits in USD millions alongside a robust partner ecosystem suggests opportunities for tiered Enterprise agreements, licensing for large security operations centers, and expanded services around threat intelligence orchestration.