Skip to main content
Security

Plugin versions scanned before they are offered

Multi-engine VirusTotal v3 scanning on the plugin versions we serve, with the scan status shown on every plugin page before you install.

The problem

The trust question with GPL plugins

GPL plugins save serious money. A plugin that costs $199/year on the developer's site can be legally redistributed under the GPL license for a fraction of the price. The code is identical. The license allows it. Zeebrar removes the guesswork.

How it works

Scanned before you see it

01

New Versions Are Submitted to VirusTotal

When a new plugin version enters the Zeebrar catalog, it is automatically submitted to VirusTotal v3 for analysis. Versions still waiting for a result are labelled as such on their version list.

02

Multi-Engine Analysis Runs

VirusTotal checks the plugin files against 70+ antivirus engines simultaneously. This is not a single scanner with blind spots. It is the same service used by security professionals worldwide.

03

Results Displayed on the Plugin Page

Scan results are shown directly on each plugin page before you install. You can see exactly how many engines flagged the file and make your own decision.

Engines per scan70+
Scan serviceVirusTotal v3
ScannerRuns 24/7

New versions pass the same multi-engine check as they arrive; results and the linked VirusTotal report are shown on each version.

Benefits

Security you can actually see

Multi-Engine Scanning

A single antivirus engine misses things. VirusTotal runs your file through 70+ engines at once, catching threats that any individual scanner would overlook.

Scan Results Before You Install

You do not have to trust blindly. Every plugin page shows the scan status so you can check before clicking install.

Catalog Scanning That Keeps Up

Scanning runs around the clock: every new version is queued as it arrives, and older versions that never received a result are backfilled. Each result links to its VirusTotal report, which reflects the latest engine verdicts.

Trust Signal for GPL Plugin Users

GPL plugins are a great way to save money, but trust is essential. Visible scan results give you confidence that the files have been verified by independent security engines.

Clean File Guarantee

If a plugin version is flagged by multiple engines, it is marked clearly on the catalog. You will never accidentally install a file that failed its security scan.

Same Pipeline Powers GPLCoffee

All plugins available through GPLCoffee are verified through this same scanning pipeline. One security standard across both platforms. gplcoffee.dev

FAQ

Common questions

What is VirusTotal and why does it matter?
VirusTotal is a free service owned by Google that analyzes files using over 70 antivirus engines simultaneously. Instead of relying on one scanner, it aggregates results from dozens of independent security companies. A clean result from VirusTotal means the file passed scrutiny from the broadest possible range of threat detection systems.
What happens if malware is found in a plugin?
If a plugin version is flagged by multiple VirusTotal engines, it is marked on the plugin page with a warning. Depending on the severity, the version may be pulled from the catalog entirely. Existing installs are not automatically removed from your site, but you will see an alert on your dashboard recommending that you replace or remove the affected version.
Are GPL plugins safe to use?
GPL plugins are identical in code to their premium counterparts. The GPL license requires that the source code be freely redistributable. The risk is not in the license itself, but in where you download them. Unverified sources may inject malicious code. Zeebrar addresses this by scanning versions with VirusTotal and showing the result before you install.
How often are plugins scanned?
New versions are scanned as they enter the catalog, and the scanner runs continuously to backfill any version that has not received a result yet. Antivirus engines update their definitions constantly, so the VirusTotal report linked from each result shows the latest verdicts for that file.
Can I see the full VirusTotal report?
The plugin page shows a summary of the scan results, including how many engines were used and whether any flagged the file. For the full detailed report, a link to the VirusTotal analysis page is provided where available.

Download plugins you can trust

Scanned with VirusTotal. Results visible before you install. No guesswork.