A coworker and I were recently tasked with securing cloud storage against malware — specifically for S3. We expected to find a simple API-based antivirus service. Instead, we mostly found self-hosted ClamAV setups and/or a lot of duct tape.

So, we built Bucketscan. It’s an API-first malware scanner for cloud object storage (S3, Azure Blob, R2, etc). You can get scanning up and running in about 15 minutes. There’s also a dashboard for visibility into detections and usage, and we’re working on things like policy-based actions and historical forensics.

We have tried to keep the MVP as small as possible - functional, but far from "done". We’re keen to hear from others who’ve faced similar challenges. What would make something like this actually useful for you? We’re offering steep discounts in exchange for feedback and would love to involve early users in shaping the roadmap.

Would love your thoughts!