Antivirus for Platform Operators

For platform team members with the Manage Platform Antivirus right. Open Settings → Platform → Configuration → Antivirus.

Scanner Health

Each scanner and whether it's ready, with the release it's running. If no scanner is ready, uploads are held (or refused with "try again in a moment") and inbound mail is deferred so senders retry. Nothing unchecked is ever let through.

Releases

Antivirus updates itself many times a day. Each candidate release must catch a test file and pass a clean set of files before it's promoted.

• Refresh Now asks for an update check immediately.
• Roll Back pins the scanners to an earlier promoted release, for example if a new release causes false alarms.

False-Alarm Review Queue

Reports from every organization. Each shows the file name, the kind of harm, the internal detection name, the organization, who reported it and their note.

• Allowlist clears that exact file for every organization. Saved copies unlock and the people involved are told. A note is required, and the decision is recorded.
• Uphold keeps the file blocked; your note is shown to the organization.

Allowlist

Every file cleared by hand. Revoke removes a clearance; the file is judged normally again.

Outbreaks

Files stopped in three or more organizations within a day — a sign of a campaign worth warning customers about.

Run a Safety Drill

Sends a harmless test file through the real checking path and shows whether it was caught and how fast. Nothing is stored. Use it after an update or whenever you want proof that protection is working.