---
schema_version: "1"
id: 7c3c3551083a0c5ac635a2ad2e0fd20b7d60e4a361c2d4a9fcb4483b318dda73
title: Protect Your Salesforce Org and Users by Scanning Files for Malware (Beta)
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/260-0-0/rn_experiences_files_malware_scan.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_experiences_files_malware_scan.htm&release=260&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 3e35609c5530b4fe43e3b8e2e7d9a8e5bb009d6e6d4ebf07deda1e85bc48dbb0
description: For improved security in your Salesforce org, files are now scanned for malware in Salesforce Files. When a user tries to upload a file, the process is blocked if the scanned file is malicious. If a malicious file is uploaded via the API, it’s scanned asynchronously, and it appears in the new Malicious Files (Beta) list. When a user attempts to download an existing file, the download is blocked if it’s malicious. This feature was developed based on your idea on IdeaExchange.
products:
  - Cross Cloud Packages Solutions
release: "260"
---
# Protect Your Salesforce Org and Users by Scanning Files for Malware (Beta)

For improved security in your Salesforce org, files are now scanned for malware in Salesforce Files. When a user tries to upload a file, the process is blocked if the scanned file is malicious. If a malicious file is uploaded via the API, it’s scanned asynchronously, and it appears in the new Malicious Files (Beta) list. When a user attempts to download an existing file, the download is blocked if it’s malicious. This feature was developed based on your idea on IdeaExchange.

**Where:** This change applies to Salesforce Files accessed through Lightning Experience and Salesforce Classic in Essentials, Group, Enterprise, Professional, Performance, Unlimited, Contact Manager, and Developer editions hosted on Hyperforce.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-salesforce_release_notes-260-0-0-production-enus/ba62a63b-6cd1-440e-8d24-e867afab0363/images/icon_note.png)

Note Scan files for viruses or malware is a pilot or beta service that is subject to the Beta Services Terms at [Agreements - Salesforce.com](https://www.salesforce.com/company/legal/agreements/) or a written Unified Pilot Agreement if executed by Customer, and applicable terms in the [Product Terms Directory](https://ptd.salesforce.com/). Use of this pilot or beta service is at the Customer's sole discretion.

**When:** This functionality is available on a rolling basis starting in Spring ’26. For details about timing and eligibility, contact your Salesforce account executive.

**Who:** File owners, or users who have access to a file that was shared with them, can view a file even if it’s malicious. To access the Malicious Files (Beta) list and all identified malicious files or to download malicious files, you need the Manage Malicious Files (Beta) user permission. To only download malicious files, you need the Download Malicious Files (Beta) user permission.

**How:** From Setup, in the Quick Find box, enter Files, and then select **Salesforce Files** | **General Settings**. The setting **Scan files for viruses or malware (beta)** is turned on by default. If a new file isn’t scanned during the initial upload, it’s scanned asynchronously and added to the Malicious Files List (Beta) if it contains malware.

![Salesforce Files Settings in Setup, with the new preference for scanning files enabled](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-salesforce_release_notes-260-0-0-production-enus/ba62a63b-6cd1-440e-8d24-e867afab0363/salesforce_release_notes/images/experience_cloud/rn_260_experience_cloud_files_malware_scan.png)

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-salesforce_release_notes-260-0-0-production-enus/ba62a63b-6cd1-440e-8d24-e867afab0363/images/icon_note.png)

Note Malware scanning in Salesforce Files flags only files that have a high probability of being malicious. If you require more stringent scanning, consider using one of Salesforce's malware scanning partners.

#### See Also

- [_Idea Exchange_: Salesforce.com should do virus scan on all the uploaded files](https://ideas.salesforce.com/s/idea/a0B8W00000GddmUUAR/salesforcecom-should-do-virus-scan-on-all-the-uploaded-files)
- [_Salesforce Help_: Malware Scanning for Salesforce Files (Beta)](https://help.salesforce.com/s/articleView?id=experience.collab_files_malware_scan.htm&language=en_US)