Install bucketAV powered by Sophos in just 15 minutes and detect malware like viruses, worms, and trojans in your S3 buckets. Choose when to scan and keep full data control within your AWS account.
Real-time, scheduled, on-demand, on-access, and API virus scanning;
Commercial antivirus engine (Sophos);
Maximum file size of 5 TB (maximum S3 object size);
Real-time notifications and periodic reports about your bucket's status;
Automated mitigation: bucketAV automatically tags, deletes, or quarantines infected files;
It supports multiple AWS accounts and multiple S3 buckets
Key Benefits
Highest security standards: scan your data immediately or when suits you best and stay informed with instant notifications to detect even the latest viruses;
Data sovereignty: you can keep full control over your data because they never leave your AWS account;
Scalable: automatically scan as many files as needed ensuring cost efficiency even for spiky workloads;
Cost efficient: bucketAV runs on EC2 spot instances, which provide compute capacity at reduced costs compared to on-demand instances;
Simple: there is no need for additional UI or access management;
Fast: bucketAV will scan uploaded files within seconds to immediately detect malware;
Up-to-date Malware Database: bucketAV continuously updates malware signatures to protect you against the latest threats;
Streamlined process: bucketAV automatically tags, deletes, quarantines, and moves your data and notifies you about infected files
Want to know more about bucketAV or want to try it for free?
Contact us at hello@bucketav.com, we will be more than happy to help you!
Keeping your data safe and ensuring compliance has never been so easy and will take you just 15 minutes.
This product optionally collects your e-mail address for sending operational alerts. Your e-mail address is stored and processed using Amazon SNS in your AWS Account and is not shared with bucketAV.
Highlights
**Just 15 minutes to install** with a clear step-by-step setup guide and efficient support;
**Runs on Sophos**: commercial antivirus engine ideal for enterprises and critical
**Automated and ready-to-deploy solution**: it immediately runs on your own cloud infrastructure for Real-time, Scheduled, On-demand, On-access, and API virus scanning
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
You pay across two usage-based dimensions that combine to form your total cost. The first charges for each GB of data scanned, whether the file turns out clean or infected. The second charges per vCPU hour for the EC2 instances that run the scans. As you scan more data, the per-GB charge grows with volume. As those instances run longer or scale up, the vCPU-hour charge grows too. You only pay while instances run; charges stop once you uninstall. Underlying AWS infrastructure charges bill separately from these two dimensions.
Top-of-mind questions for buyers
What counts as one GB of scanned data for billing?
One GB is a binary gigabyte, meaning 2^30 bytes, also called a gibibyte (GiB). You are charged per GB whether the scanned file is clean or infected. The volume of data your scanners process each billing period determines this charge.
Which dimension drives most of my bill — scanned data or vCPU hours?
Both charges apply at the same time. The per-GB charge grows with the amount of data you scan. The vCPU-hour charge grows as scan instances run longer or scale up. Data-heavy workloads lean toward the per-GB charge; long-running or high-throughput setups raise the vCPU-hour charge.
Am I charged when no files are being scanned or when instances stop?
You pay for vCPU hours only while EC2 scan instances run. Once you uninstall the software, those charges stop. The per-GB charge applies only to data actually scanned. Underlying AWS resources like storage and queues bill separately from these two dimensions.
bucketav.com
Helpful?
Vendor refund policy
There is no refund policy, but you can try bucketAV for free to see if it meets all your needs.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
Deprecating DeleteInfectedFiles parameter use Delete infected files add-on instead
bucketAV Amazon S3 Antivirus powered by Sophos - Quick and decisive support via email:hello@bucketav.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Commercial antivirus engine powered by Sophos for malware detection
Malware Detection Capabilities
Detects viruses, worms, trojans, and latest malware threats with continuously updated malware signatures
Scanning Modes
Supports real-time, scheduled, on-demand, on-access, and API-based virus scanning
Automated Threat Response
Automatically tags, deletes, quarantines, or moves infected files with notifications via email, Slack, Microsoft Teams, AWS Security Hub, Systems Manager OpsCenter, or Amazon SNS
File Size Support
Supports scanning of files up to 5 TB maximum S3 object size
Multi-Storage Platform Support
Malware scanning across Amazon S3, Amazon EBS, Amazon EFS, and Amazon FSx for object, block, and file storage environments.
Multiple Scanning Engines
Support for Sophos, CSS Premium, and CSS Secure engines that can be used individually or simultaneously to optimize detection accuracy and performance.
Flexible Scanning Models
Event-based scanning on upload, retroactive scanning on-demand or scheduled, and API-based scanning before write operations for migrations and application workflows.
In-Tenant Deployment Architecture
Installation and operation within customer AWS accounts with data remaining in the specified region, supporting private VPC endpoints and linked account management.
Automated Response and Remediation
Automated quarantine, tagging, and deletion of detected malware with integration to downstream workflows, alerts, and enforcement policies through object tagging.
Multi-Engine Malware Detection
Utilizes 30+ anti-malware engines for malware detection and threat identification.
Real-Time File Scanning
Conducts real-time scanning of files prior to upload to S3 buckets, triggered by S3 events.
Deep Content Disarm and Reconstruction
Implements Deep CDR technology to disarm active embedded threats and reconstruct sanitized file versions to prevent zero-day attacks and advanced evasive malware.
Scheduled and On-Demand Scanning
Supports flexible scanning modes including real-time, scheduled weekly or monthly scans, and on-demand file inspections.
Sensitive Data Detection and Redaction
Automatically detects compliance violations and sensitive data within files, with capability to redact or report identified sensitive information.
Secure file scanning has supported privacy compliance while pricing still needs improvement
Reviewed on Jun 30, 2026
Review from a verified AWS customer
What is our primary use case?
We use BucketAV for scanning S3 objects for potential malware and viruses.
How has it helped my organization?
BucketAV has helped our organization by assisting with privacy compliance when handling highly sensitive data.
What is most valuable?
The ease of set-up and configuration are valuable. The ability to scan S3 objects on upload and quarantine files if appropriate is very useful since it allows us to have a compliant architecture. In addition, the support from the BucketAV team has been quick and reliable. I trust that we can rely on this product for future maintenance.
What needs improvement?
The pricing is a little high. We still need to evaluate if pricing is acceptable once we start scanning more objects.
For how long have I used the solution?
I have been using the solution for 3 weeks.
Which solution did I use previously and why did I switch?
We did not use a different product before BucketAV.
What's my experience with pricing, setup cost, and licensing?
The pricing is competitive, but I wish it was a little cheaper.
Which other solutions did I evaluate?
We evaluated Cloud Storage Security.
What other advice do I have?
I don't have additional comments.
Jhair C.
Nice product
Reviewed on Nov 04, 2024
Review from a verified AWS customer
Easy to install and integrate. It also has a lot of configurations that makes very flexible. Quick technical support responses too.
It is really good for our use case.
Christoph E.
Good product
Reviewed on Jun 23, 2024
Review from a verified AWS customer
BucketAV conviced us regarding - slim infrastructure requirements and costs (at least one EC2 instance, SQS, SNS and Lambdas) prepared as handy CloudFormation stack templates. - setup modes (creates a dedicated VPC or re-use an existing one) - intuitive and comprehensible data flows and great documententation - dashboard tooling - easy to integrate into own applications with prepared SNS finding topics - it fits with GDPR - reduced maintenance (automated AV updates) - quick support responsive
Tanmay
Good product for most use cases
Reviewed on Jun 07, 2024
Review from a verified AWS customer
BucketAV has a comprehensive list of features and scan modes that can fulfill a wide variety of scanning needs - scheduled scans, on demand, realtime (on file upload) and on access (on file download) as well as reporting integrations and dashboards
Its not a perfect product as there is no "one shoe fits all sizes" in this category. Out of the box it will fulfill 95% of use cases. For the remaining 5% the user will find a really good base setup that they can build upon to get their custom solution
They are really fast with support, and organised a call with me within a day
Its a really good product and I hope that it keeps getting better
Michael
Well built product, easy to use and great support
Reviewed on Mar 08, 2024
Review from a verified AWS customer
Well built and easy to install product. The installation stack works seamlessly and has a lot of configurable options to attain the behaviour you need. Updates are easy to install. Documentation is exellent and explains all options well and includes step-by-step instructions on how to install and modify your stack. The provided dashboard is comprehensive and gives good metrics on the performance of the stack. Scanning is prompt and caught our tests very quickly. Engine is very economical to run in our use case of approx 10GB per month. We've added on a couple of add-on stacks too which integrate seamlessly with the core product. The support team are always on hand for questions and have been fast and friendly. Highly recommend this solution to provide peace of mind for the precious data in your buckets.