Blog
Notes on scanning uploads for malware — what running ClamAV in production actually involves, and how to put a scan in front of user-generated files.
- Economics· 6 min read
What it actually costs to self-host ClamAV
The engine is free; the scanning service around it is not. A full cost model — the VM, the integration build, and the operations time — with every assumption stated.
Read - Architecture· 4 min read
Your file upload endpoint has no antivirus
Endpoint antivirus protects devices. A file arriving at a cloud API never touches one — which means most upload pipelines are an AV coverage gap by construction.
Read