ClamAV
Open-source antivirus engine for gateway and file scanning
ClamAV is an open-source antivirus engine and toolkit designed primarily for mail gateway and on-demand file scanning. It provides a shared engine library, a multi-threaded scanning daemon, command-line utilities, and automated signature updates for detecting trojans, viruses, and other malware. (docs.clamav.net)
Key Features
- Multi-threaded scanning daemon (clamd) and command-line scanners (clamscan/clamdscan) for on-demand and gateway scanning. (docs.clamav.net)
- Automatic signature updates and signed signature databases for trusted definitions. (docs.clamav.net)
- Bytecode signature runtime (LLVM or custom interpreter) for complex detection routines. (docs.clamav.net)
- Broad file-format and archive unpacking support (ZIP, RAR, 7Zip, ISO, DMG, OLE2/OOXML, many others). (docs.clamav.net)
- Flexible deployment: daemon for servers, CLI tools for ad-hoc scanning, and Docker images for containerized use. (github.com)
Use Cases
- Mail gateway scanning: integrate clamd with MTA stacks to scan incoming/outgoing mail for malware. (docs.clamav.net)
- On-demand file and archive scanning: scheduled or manual scans of file shares, uploads, or CI/CD artifacts. (docs.clamav.net)
- Embedded or containerized scanning: run ClamAV in containers or include libclamav in tooling to provide detection capabilities. (github.com)
Limitations and Considerations
- Large file/archive size: ClamAV historically has limitations scanning archives larger than ~2 GiB; community tools exist to work around that limitation. Users scanning very large archives should verify current limits and consider supplemental tooling. (github.com)
ClamAV is maintained by the Cisco Talos team and is licensed under GPLv2. The project source, build system (CMake), and supplemental Rust components are available in the public repository. The official site lists the latest stable release and downloads, while full documentation and platform support details are published in the project manual. (github.com)
Categories:
Tags:
Tech Stack:
Jenkins
Docker
C
Rust
Git
CMakeSimilar Services
Pi-hole
Network-wide DNS sinkhole for ad and tracker blocking
Pi-hole is a network-wide DNS sinkhole that blocks ads and trackers for all devices on your network, with a web dashboard, query logs, and optional DHCP server.
Headscale
Self-hosted control server for Tailscale-based WireGuard networks
Headscale is an open source, self-hosted implementation of the Tailscale control server for managing a private tailnet, nodes, keys, IPs, and routes.
AdGuard Home
Network-wide DNS server that blocks ads, trackers, phishing and malware
Open-source DNS-based ad & tracker blocking server for networks. Offers per-device rules, parental controls, encrypted upstream DNS (DoH/DoT/DNSCrypt), web UI and API.
Web-Check
All-in-one OSINT tool for analyzing any website.
Comprehensive on-demand OSINT to analyze a website's security, architecture, and tech stack.
wg-easy
WireGuard VPN server with a web-based admin interface
Run a WireGuard VPN server with an easy web admin UI to manage clients, generate configs and QR codes, and monitor connections and traffic.
NetBird
WireGuard-based overlay network with SSO/MFA and granular access controls.
Open-source zero-trust networking platform delivering a WireGuard-based private network with centralized access control, SSO/MFA, and cross-platform clients.