Nucleon Malprob
por Nucleon Security
AI malware detection and file analysis API for SOC teams, MSSPs and developers.
Get a verdict on any suspicious file in seconds, without running your own sandbox.
Nucleon Malprob is an AI-powered malware detection and file analysis service for SOC teams, MSSPs and developers. Submit a file through the web console or the REST API and get a clear verdict, a machine-learning risk score and an analyst-ready AI Insight, including on zero-day samples where signature-based approaches fail.
What Malprob does
- AI detection built on extensive file feature extraction and machine-learning models designed and continuously trained in-house by Nucleon Security
- 98% detection accuracy, validated by West Coast Labs
- Clear verdict (malicious / clean), risk score and AI Insight with recommended next steps
- Static analysis, YARA rule matching and full file identification (SHA-256, SHA-1, MD5, file type)
- Recursive analysis of archives and smart-scan prioritisation
- Upload from the console (up to 50 MB) or through the API (up to 1 GB)
- Public threat feed and searchable reports on community submissions
Full visibility, not a black-box API
Every Malprob subscription includes a customer console. Track every file you submit with its status, verdict and full report. Monitor your consumption in real time: uploads, API requests, success rate and volume by file type. Filter, search and export your analysis history, and manage your own custom YARA rules.
Supported formats
Windows executables (PE: .exe, .dll, .sys), Linux/Unix binaries (ELF), macOS and iOS binaries (Mach-O), Android packages (APK), scripts (.py, .js, .sh, .bat), PDF, Microsoft Office documents, archives (.zip, .rar, .tar.gz) and images.
Built for your workflows
A documented REST API (OpenAPI) lets you automate submissions and pull verdicts straight into your EDR, SIEM or SOAR playbooks. Malprob is natively integrated with Nucleon EDR. Microsoft Sentinel integration is on the roadmap.
Data handling and privacy
- Hosted entirely on Microsoft Azure, West Europe region
- Submitted files are retained for 30 days
- From the console, customers can opt out of their files being used to train Nucleon's AI models
How to buy
- Free one-month trial
- Pay-as-you-go plan: 1,000 API calls per month included, then per-call billing
- Enterprise and partner pricing available through Microsoft private offers: contact us
About Nucleon Security
Nucleon Security is a European sovereign cybersecurity vendor headquartered in Paris, behind Nucleon EDR/XDR and ATOM AI, the agentic SOC automation platform.