Directus upload security

Scan files before they enter your Directus content workflow

CypherScan helps Directus teams scan uploaded files, detect malware, and optionally remove blocked uploads automatically.

Live workflow preview

Directus upload decision

The integration sends the upload through CypherScan and receives a deterministic action before the file remains in the CMS workflow.

Protected pipeline

Presign

Upload

Scan

Verdict

Decision Engine

Upload evaluated before release

Decision secured

Action

BLOCK

Risk

CRITICAL

Confidence

HIGH

Why this decision

Malware indicator detected

The upload is stopped before it becomes available to editors, visitors, or downstream services.

Example: CypherScan evaluates the upload before it remains in the Directus workflow.

npm install cypherscan-directus

CYPHERSCAN_API_KEY=your_api_key
CYPHERSCAN_API_BASE_URL=https://cyphernetsecurity.com
CYPHERSCAN_BLOCK_INFECTED=true

Malware indicators

Exposed API keys

JWT secrets

Suspicious payloads

Risky upload patterns

Step 1

Install the Directus extension

Step 2

Add your CypherScan API key

Step 3

Upload files normally

Step 4

Remove blocked files automatically

• Clean uploads are retained.

• Blocked uploads can be removed automatically.

• Scans use your CypherScan account limits.

• API keys are configured through environment variables.

Add a CypherScan API key and start scanning Directus uploads before risky files remain in your content workflow.