- Home
- Malware Removal Software
- ClamAV
ClamAV
What it is
ClamAV is a free, open-source antivirus engine for scanning email and web content and supporting endpoint security work. It provides a multi-threaded daemon, a command-line scanner, and a utility for automatic virus database updates. The database is refreshed multiple times per day; the updater supports scripted updates and digital signatures. ClamAV handles standard mail formats and many archive and executable formats, along with documents such as MS Office files, HTML, RTF, and PDF. A Milter interface supports Sendmail integration. On modern Linux versions, ClamOnAcc can scan files on access and can optionally block file access until scanning finishes. Signed signature databases ensure the engine uses trusted definitions. The project regularly tests GNU/Linux, FreeBSD, macOS, and Windows, and provides official Docker images for Alpine Linux and Debian Linux. ClamAV is an engine and related tools, not a traditional antivirus or endpoint security suite. Its recommended minimum resources are 3 GiB of RAM, a 2.0 GHz CPU, and 5 GiB of free disk space. The project does not guarantee extraction of every supported format variant.
For and against
For
- Free and open-source
- Database updates multiple times per day
- Scans mail, archive, executable, and document formats
- On-access scanning is available on modern Linux
- Official Docker images for Alpine and Debian
Against
- Not a traditional endpoint security suite
- Recommended minimum is 3 GiB RAM and 5 GiB disk
- Does not guarantee extraction of every format variant
The verdict
ClamAV offers scanning tools across several operating systems and format types, with frequent database updates. Readers looking for a full endpoint suite should note the project's stated scope, and the recommended hardware resources before deployment.
Who it suits
ClamAV may suit users who need a free scanning engine and can work with its tools and deployment options. It is not presented as a complete endpoint security suite.
Plans and prices
ClamAV open-source software
GPL-2.0 software · self-hosted
Read 15 Oct 2026 · en.wikipedia.org
ClamAV
Open-source anti-virus engine under GPL; no paid plan or price stated
Read 7 Oct 2026 · clamav.net
On the record
- API and library
- The core engine is available as a shared library, and applications can use clamd through its socket protocol.docs.clamav.net · read 15 Oct 2026
- Archive support
- Built-in extraction covers formats including ZIP, RAR, 7-Zip, ARJ, TAR, gzip, bzip2, DMG, ISO, OLE2, OOXML, Cabinet and CHM.docs.clamav.net · read 15 Oct 2026
- Automatic updates
- FreshClam periodically downloads new virus databases and verifies signed updates.docs.clamav.net · read 15 Oct 2026
- Bytecode engine
- Its bytecode runtime lets signature authors distribute complex detection routines that execute inside the scanner.docs.clamav.net · read 15 Oct 2026
- Command-line scanner
- ClamAV includes the clamscan command-line utility for on-demand file scanning.clamav.net · read 15 Oct 2026
- Company founded
- LinkedIn lists Cisco as founded in 1984.linkedin.com · read 15 Oct 2026
- Company funding record
- Crunchbase lists Sequoia Capital as a Cisco investor and shows one funding round, while concealing the amount.crunchbase.com · read 15 Oct 2026
- Company headquarters
- Cisco is headquartered in San Jose, California, United States.linkedin.com · read 15 Oct 2026
- Company legal name
- Crunchbase lists the maker's legal name as Cisco Systems, Inc.crunchbase.com · read 15 Oct 2026
- Company size
- LinkedIn lists Cisco's company size as 10,001 or more employees.linkedin.com · read 15 Oct 2026
- Current release
- The stable release listed in 2026 is version 1.5.4, released on 7 August 2026.en.wikipedia.org · read 15 Oct 2026
- Database cadence
- The official virus database is normally updated once or twice daily.docs.clamav.net · read 15 Oct 2026
- Deployment options
- Official Docker images are available for Alpine Linux and Debian Linux.docs.clamav.net · read 7 Oct 2026
- Documentation depth
- The documentation includes usage diagrams, installation procedures, configuration guidance, signature writing, FAQs and on-access recipes.docs.clamav.net · read 15 Oct 2026
- Document support
- The engine parses formats such as Microsoft Office, HTML, RTF, PDF, OneNote and HWP.docs.clamav.net · read 15 Oct 2026
- Download verification
- ClamAV release packages from its downloads page can be verified using GnuPG and the Cisco Talos public key.docs.clamav.net · read 7 Oct 2026
- Executable support
- ClamAV parses 32-bit and 64-bit PE files plus ELF and Mach-O binaries, including several packed formats.docs.clamav.net · read 15 Oct 2026
- Extensibility
- Administrators can add custom signature files and use supported YARA rules alongside the standard databases.freebsdsoftware.org · read 15 Oct 2026
