Virus Scanning

Here's a question nobody wants to answer after the fact: how did a malicious file get into our production's photo library?

When your team accepts uploads from dozens of photographers, assistants, and external contractors, every file is a potential risk. A compromised camera card, an infected laptop, a bad actor using your upload link. The attack surface is real, even for photo files.

ReelStorage scans every uploaded file automatically before it enters your project. No configuration. No extra steps. No exceptions.

How scanning works

Every file that enters ReelStorage passes through the same pipeline, regardless of who uploaded it or how:

1. The file arrives (direct upload, drag-and-drop, or external upload link)
2. The security scanner checks it for known viruses, malware, trojans, and other threats
3. Clean files continue through normal processing (previews, indexing, and delivery)
4. Flagged files are quarantined immediately and never appear in your project

The scan runs as part of the upload processing pipeline, alongside file processing. For most image files, it adds less than a second to processing time.

Why this matters for production teams

External upload links are a security boundary

Upload links are one of the most useful features in ReelStorage. They let external photographers send content directly into your project without needing an account. But every external upload link is also a door into your library.

Virus scanning means that door has a guard. Every file that comes through gets scanned the same way, whether it's from your lead unit photographer or a day-player you hired for one scene.

Studios have security requirements

If you're working with a major studio or streaming platform, there are security policies in place. Many require malware scanning on all incoming digital assets. ReelStorage handles this at the platform level so you don't have to bolt on a separate scanning workflow.

Scan results are logged in the activity feed, giving IT and security teams the audit trail they need for compliance reviews.

Compromised devices happen

Camera cards get passed between people. Laptops connect to hotel Wi-Fi. USB drives show up from who-knows-where. The entertainment industry involves a lot of file transfers between a lot of people on a lot of different hardware.

Virus scanning catches the obvious threats before they propagate through your library and onto your team's devices when they download assets for editing or delivery.

What gets scanned

Everything. Every file uploaded to ReelStorage goes through automatic virus scanning:

• Direct uploads from team members through the web interface
• Drag-and-drop uploads from desktop
• External upload link submissions from photographers and contractors
• Bulk uploads of hundreds or thousands of files at once

There's no way to skip scanning and no setting to disable it. This is a security baseline, not a preference.

Quarantine process

When a threat is detected, the file never makes it into your project:

• The file is quarantined in isolated storage
• The uploader sees a notification that their file was flagged
• Project admins receive an alert with scan details
• The event is logged in the activity feed with the threat classification
• The quarantined file cannot be accessed, downloaded, or shared

No manual intervention needed. The system handles containment automatically.

How scanning works behind the scenes

We use an industry-standard antivirus engine deployed across enterprise and cloud environments — the same class of scanning used by major email providers and cloud storage platforms worldwide. It's battle-tested infrastructure, not an experimental scanning tool.

Virus definitions update automatically on a regular schedule, so the scanning stays current with new threats. You don't manage updates, check versions, or worry about stale signatures. That's handled at the platform level.

Audit and compliance

Every scan result is recorded:

• File name and upload source (who uploaded it, through which method)
• Scan timestamp and processing duration
• Result (clean or threat detected, with classification if applicable)
• Action taken (processed normally or quarantined)

This data lives in the project activity log and is available to project admins and organization owners. For teams that need to demonstrate security compliance during audits, the records are there.

Zero-trust file handling

Virus scanning is one layer in ReelStorage's security model. It works alongside role-based permissions, encrypted storage, expiring access links, and activity logging to create a system where no single point of trust failure compromises your content.

Your photographers don't need to think about it. Your production coordinators don't need to configure it. Your IT team can verify it's running through the audit logs. Scanning just happens, on every file, every time.

Perfect for

IT security teams enforcing upload scanning policies, studio managers responsible for digital asset security across productions, and production coordinators accepting content from external contributors through upload links.