Skip to main content
Security

Plugin versions scanned before they are offered

Multi-engine VirusTotal v3 scanning on the plugin versions we serve, with the scan status shown on every plugin page before you install.

See PricingLog In to Browse

The problem

The trust question with GPL plugins

GPL plugins save serious money. A plugin that costs $199/year on the developer's site can be legally redistributed under the GPL license for a fraction of the price. The code is identical. The license allows it. Zeebrar removes the guesswork.

How it works

Scanned before you see it

01

New Versions Are Submitted to VirusTotal

When a new plugin version enters the Zeebrar catalog, it is automatically submitted to VirusTotal v3 for analysis. Versions still waiting for a result are labelled as such on their version list.

02

Multi-Engine Analysis Runs

VirusTotal checks the plugin files against 70+ antivirus engines simultaneously. This is not a single scanner with blind spots. It is the same service used by security professionals worldwide.

03

Results Displayed on the Plugin Page

Scan results are shown directly on each plugin page before you install. You can see exactly how many engines flagged the file and make your own decision.

Versions scanned17,000+
Engines per scan70+
Scan serviceVirusTotal v3
Malicious verdictInstall blocked

Live count of catalog versions with a completed scan, floored to the nearest thousand. Each version shows its verdict and links the VirusTotal report.

Benefits

Security you can actually see

Multi-Engine Scanning

A single antivirus engine misses things. VirusTotal runs your file through 70+ engines at once, catching threats that any individual scanner would overlook.

Scan Results Before You Install

You do not have to trust blindly. Every plugin page shows the scan status so you can check before clicking install.

Catalog Scanning That Keeps Up

Scanning runs around the clock: every new version is queued as it arrives, and older versions that never received a result are backfilled. Each result links to its VirusTotal report, which reflects the latest engine verdicts.

Trust Signal for GPL Plugin Users

GPL plugins are a great way to save money, but trust is essential. Visible scan results give you confidence that the files have been verified by independent security engines.

Clean File Guarantee

If a plugin version is flagged by multiple engines, it is marked clearly on the catalog. You will never accidentally install a file that failed its security scan.

Same Pipeline Powers GPLCoffee

All plugins available through GPLCoffee are verified through this same scanning pipeline. One security standard across both platforms. gplcoffee.dev

FAQ

Common questions

What is VirusTotal and why does it matter?
VirusTotal is a free service owned by Google that analyzes files using over 70 antivirus engines simultaneously. Instead of relying on one scanner, it aggregates results from dozens of independent security companies. A clean result from VirusTotal means the file passed scrutiny from the broadest possible range of threat detection systems.
What happens if malware is found in a plugin?
Every version carries a threat level from its scan. A version rated malicious cannot be installed from the dashboard or the connector at all: the install is blocked before any file is downloaded and no credits are charged. A version rated suspicious installs only after you confirm the warning. Existing installs are not removed from your site automatically; the plugin page shows the verdict and links the VirusTotal report so you can decide.
Are GPL plugins safe to use?
GPL plugins are identical in code to their premium counterparts. The GPL license requires that the source code be freely redistributable. The risk is not in the license itself, but in where you download them. Unverified sources may inject malicious code. Zeebrar addresses this by scanning versions with VirusTotal and showing the result before you install.
How often are plugins scanned?
Each version is scanned once when it enters the catalog; the result and the VirusTotal report link are stored with the version and refreshed into Zeebrar every 6 hours with the catalog sync. Antivirus engines update their definitions constantly, so the linked VirusTotal report shows the latest verdicts for that file even after the initial scan.
Can I see the full VirusTotal report?
The plugin page shows a summary of the scan results, including how many engines were used and whether any flagged the file. For the full detailed report, a link to the VirusTotal analysis page is provided where available.

Download plugins you can trust

Scanned with VirusTotal. Results visible before you install. No guesswork.

See PricingLog In to Browse