Overview
Interested in a significant discount? Reach out to us at sales@cloudstoragesec.com for a Private Offer and get discounted pricing.
Ensure the data in data lakes and application workflows built using AWS storage are free of viruses, ransomware, trojans and other payloads by scanning it with Antivirus for Amazon S3 by Cloud Storage Security.
WHY THIS SOLUTION IS DIFFERENT
- Support for Multiple Data Sources
- Triple Engine Technology
- Multiple Scanning Models
- Static, Dynamic & Forensic Analysis
- Configuration Intelligence
- Simplified Setup
- Security First Approach with In-Tenant Scanning
Data Sources This solution is built for AWS storage and supports Amazon S3, Amazon EBS, Amazon EFS, and Amazon FSx.
Engines Identify malware at petabyte scale across all buckets by leveraging the power of Sophos, CSS Premium, or CSS Secure. Engines may be used simultaneously to optimize accuracy and performance.
Scanning Models Integrate the method that fits your needs to minimize process interruptions and eliminate service disruptions. Choose from:
- Event - scan new/modified objects in real time when they are dropped into storage (easy to integrate into workflows because minimal code changes are needed)
- Retro - scan existing objects on demand or via schedule (useful to baseline data and for compliance audits)
- API - scan objects inside or outside of AWS in real time via a REST-based API before they are written (useful if you are migrating to/building a new app on AWS and want inline scanning before the file is written or if you initiate a workflow where the scan dictates whether the object should be stored)
Analysis Analyze files in real time without having to execute them or by detonating them in a sandbox using the latest analysis techniques; Static and Dynamic Analysis is powered by the SophosLabs Intelix™ Platform. The solution also assists with Forensic Analysis as files are segmented by bucket and account enabling you to trace where the file entered and into which account it was added.
Configurations Gain visibility into misconfigurations - quickly identify all buckets with secure and insecure permission policies via a single unified dashboard.
Setup Deploy via AWS CloudFormation or Terraform in less than 10 minutes. Initial bucket protection/scanning setup takes less than 5 minutes with just a few clicks of the mouse. Follow the Getting Started Guide: https://help.cloudstoragesec.com/getting-started/summary/Â .
Security First The solution installs and runs in your AWS account, so data never leaves your environment or region. Additional ways to further enhance security include centralized security services account deployment with linked accounts and a private VPC endpoint deployment option.
Case Studies https://cloudstoragesec.com/case-studiesÂ
WHAT YOU SHOULD EXPECT FROM ANY AV SOLUTION (of course we provide these too)
- Automated serverless architecture
- Real-time & on-demand scanning
- Easy management console, Built-in dashboards & Detailed reporting
- Automatic discovery & scaling across multiple accounts & regions
- XL file scanning
- Problem file remediation (Quarantine, Tag, Delete)
- Robust notifications & integrations - this solution integrates with third party ticketing, Slack, Microsoft Teams, Amazon Chime, SIEM, Amazon SNS, AWS Security Hub, AWS CloudTrail, AWS Control Tower, AWS Transfer Family, and more
ONLY PAY FOR WHAT YOU SCAN Pricing at payment terms that fit with your procurement process. We offer pay-as-you-go pricing, prepaid discounts, and private offers. Contact us during your free trial to discuss the best pricing option for you.
BONUS: Reach out to get started with a no-cost trial: https://cloudstoragesec.com/contactÂ
NOT TO MISS ARTICLES ON AWS https://aws.amazon.com/blogs/apn/integrating-amazon-s3-malware-scanning-into-your-application-workflow-with-cloud-storage-security/Â
Highlights
- Do not be fooled by the name, this solution supports Amazon S3, Amazon EBS, Amazon EFS, and Amazon FSx.
- Scan a wide variety of file types with industry-leading virus detection engines Sophos, CSS Premium, and CSS Secure.
- Have confidence that your data is secure - the solution installs within your AWS account, so data never leaves your environment or region.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/GB |
|---|---|---|
FreeTrial Usage | FreeTrial Usage | $0.00 |
Monthly Subscription - includes 100GB of premium engine scanning | Monthly Subscription - includes 100GB of premium engine scanning | $99.00 |
Scan 101-500GB per month | Scan 101-500GB per month | $0.80 |
Scan 501-1500GB per month | Scan 501-1500GB per month | $0.80 |
Scan 1501-3000GB per month | Scan 1501-3000GB per month | $0.80 |
Scan >=3001GB per month | Scan >=3001GB per month | $0.80 |
Scan pre-existing objects | Scan pre-existing objects | $0.80 |
Premium Engine per GB Add-on - pre-existing objects - Sophos | Premium Engine per GB Add-on - pre-existing objects - Sophos | $0.10 |
Premium Engine per GB Add-on - Sophos | Premium Engine per GB Add-on - Sophos | $0.10 |
Cloud Detonation - Static Analysis (Per File) | Cloud Detonation - Static Analysis (Per File) | $0.05 |
Vendor refund policy
We do not currently support refunds, but you can cancel at any time.
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Console Deployment and Permission Setup
- Amazon ECS
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
Additional details
Usage instructions
Subscribing to this product will take you through the sign-up and deployment process. Deployment consists of launching a CloudFormation Template provided to you on the last configuration page of signup (also located in the Help Docs). Once Stack creation is completed, look to the Stack Outputs for the Console access URL and open that in your browser. Any additional deployment and management tasks are performed from within the Console.
For detailed steps on how to subscribe, deploy and use the product, please review: http://help.cloudstoragesec.com/getting-started/how-to-subscribe/Â
Resources
Vendor resources
Support
Vendor support
If you need help during your 30-day free trial, we are happy to provide email support via support@cloudstoragesec.com . We respond to support requests via email during your 30-day free trial within 24 hours Monday through Friday. We can also provide more in-depth support via phone and web meetings for Proof of Concept (POC) engagements. If you would like more information about initiating a POC, please contact one of our experts at https://cloudstoragesec.com/contact . Cloud Storage Security also offers Premium Support and Professional Service plans for purchase in AWS Marketplace
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

Standard contract
Customer reviews
Secure file sharing has protected global storage and improves confidence with external partners
What is our primary use case?
My main use case for Antivirus for Amazon S3Â is that my customers use S3Â for a variety of use cases where data is constantly uploaded and downloaded from S3Â , making it extremely important to protect my S3 buckets globally from any kind of virus that might corrupt files, that might create other security concerns and introduce bugs into my AWSÂ ecosystem.
A quick specific example of how I have used Antivirus for Amazon S3Â in one of those scenarios is when we expose S3 endpoints for our external partners to upload files, and we have applied antivirus there to do a check on the files being uploaded prior to those being uploaded into S3, which gives us confidence that the files being uploaded are not corrupt or a security threat for us.
How has it helped my organization?
Antivirus for Amazon S3 has positively impacted my organization by giving us the confidence that we can really expose our S3 buckets to the external world without having to worry about security, and from a developer standpoint, we know that at any point in time globally if S3 buckets are created, we have templates that will automatically enforce the antivirus policies there, improving our overall security posture rather than compromising it because we do have a large footprint on S3.
What is most valuable?
The best features Antivirus for Amazon S3 offers include that it is really a built-in feature which is really great, as you don't have to do anything extra, there's no operational complexity or cost overhead associated with it, and because it's a managed solution, it's easy for us to configure policies as S3 buckets are created globally and make sure they have the necessary virus protection as needed.
The simplicity and ease of policy configuration have helped my team day-to-day because, as it is part of the AWSÂ ecosystem, I don't need to really hire a separate skill set to configure this service, and moreover, if I use the console, all the features are available to me at a click, and I can also programmatically control it, making configuring the antivirus part of setting S3 objects rather than setting up a separate service altogether on top of S3.
What needs improvement?
I think Antivirus for Amazon S3 could be improved by slightly further automating the process; beyond just the ability to send notifications, if an email could be crafted or if communication through any channel could be established with the person or team who uploaded the file, that level of automation could be avoided on our end, allowing us to configure an entire loop from detecting a malicious upload to contacting the uploader and taking corrective action, which I think would be really cool.
For how long have I used the solution?
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
I have not had a need to contact customer support many times, but during the weekdays, they have been fairly available to us, and in the initial days during the 30-day trial period, we received email support and could contact their expert when required while setting it up, so overall, I'm pleased with the basic support model provided.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
How was the initial setup?
My experience with pricing, setup cost, and licensing is that it really is appealing, priced at an optimal point of view, where it feels practically free.
What about the implementation team?
What was our ROI?
I have seen a return on investment with Antivirus for Amazon S3; while it is a little too early to see the overall impact, detecting 200 plus malware in a month is a good sign of our improved security posture.
What's my experience with pricing, setup cost, and licensing?
Since using Antivirus for Amazon S3, we have been able to detect malicious files, and we have configured AWS EventBridge to notify us whenever such an incident occurs, leading to an average of 200 to 300 notifications of malware per month globally, which gives us confidence that the antivirus is working, and the entire notification service in AWS allows us to dig a little bit deeper into audit trails and CloudWatch to figure out where incidents occurred and work with those individuals or teams to ensure that accidental attempts don't happen again or address any malicious activity with our partners.
Which other solutions did I evaluate?
My advice to others looking into using Antivirus for Amazon S3 is that it is absolutely essential; there are options like MetaDefender , Bucket AV, and Amazon GuardDuty to consider, but it's a no-brainer to have antivirus on it when you're thinking about exposing S3 endpoints externally.
What other advice do I have?
I chose that rating because I would have given a 10 if it had the end-to-end feature of automation I spoke about, where from the point of detection all the way to communicating with the person who uploaded the file, that entire loop is automated.
I found this interview logical and appreciated providing feedback in this format for the first time. I assigned a review rating of 8 to Antivirus for Amazon S3.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Simple and Effective
This solution provides the functionality we need, mainly private deployment and set-and-forget scheduled scanning, compared to competitors that operate via a SaaS scanning model or bundle malware protection within a larger data security suite.
This is the second organization that I've used this solution with and it has worked well both times.
Great Product
Have been using this product for about 2 years and it works well, easy to manage, has good support and is always releasing helpful features.
Great tool API-driven virus scanning
We are a consumer facing product that allows users to upload profile pictures as well as allows service providers to upload documentation. Thus, we needed a solution that would allow us to scan files upload by end users before storing them. We chose Cloud Storage Security because of its API driven scanning capability and couldn't be happier. The set up took no time at all via CloudFormation template and the documentation is excellent. On top of that, the only support request I ever had with them was met with great service and technical expertise.
Highly Recommend