S3 object scanning

Scan it before you trust it.

Send ZeroSieve a presigned URL the moment an object lands, and a fleet of scan workers clears it before anything downstream trusts it. No storage credentials shared, ever, and it works with any S3-compatible bucket - just a URL and a verdict.

zerosieve-worker-07 · live

How it works

One queue, four steps, every time.

The same pipeline runs on every object, from a single invoice to a bulk import - connect a bucket once, then request scans on demand or watch a prefix continuously.

01

Generate

Your app finishes an upload and mints a short-lived presigned URL for the object.

02

Submit

That URL is POSTed to ZeroSieve and queued for a worker the instant it arrives.

03

Scan

A dedicated worker fetches the object straight from the URL and scans it for threats.

04

Verdict

Clean, infected, or error - delivered to your dashboard and your webhook within seconds.

Pricing

Pick a scan quota, not a seat count.

Every plan includes the full pipeline.

Free

$0 /month

20 scans / month to try the full pipeline. No card required.

Start free

Starter

$9 /month

  • 500 scans / month
  • No storage credentials required
  • Live scan status
Choose Starter
Most teams

Pro

$19 /month

  • 2,000 scans / month
  • No storage credentials required
  • Live scan status
Choose Pro

Business

$99 /month

  • 20,000 scans / month
  • No storage credentials required
  • Live scan status
Choose Business