Scan files before they enter your Payload CMS workflow
CypherScan helps Payload teams detect malware, exposed secrets, and risky uploads before files are accepted by the CMS.
Payload upload decision
The integration sends the upload through CypherScan and receives a deterministic action before the file remains in the CMS workflow.
The upload is stopped before it becomes available to editors, visitors, or downstream services.
Example: CypherScan evaluates the upload before it remains in the Payload workflow.
Quick installation
npm install cypherscan-payloadimport { cypherScanPayload } from "cypherscan-payload";
export default buildConfig({
plugins: [
cypherScanPayload({
apiKey: process.env.CYPHERSCAN_API_KEY!,
}),
],
});What CypherScan catches
How it works
Install the Payload plugin
Add your CypherScan API key
Upload files normally
Block suspicious or malicious uploads
Default plugin behavior
• Clean uploads are allowed.
• Suspicious uploads are blocked by default.
• Malicious uploads are blocked by default.
• failOpen=true is enabled by default.
Secure your Payload upload pipeline
Add a CypherScan API key and start scanning Payload uploads before risky files reach production.