Month in Review - December 2025

We look back with gratitude on a successful year for bucketAV. More than 1,600 customers are running bucketAV to scan files stored on Amazon S3 or Cloudflare R2 for viruses and malware. In the following, we look back on the year and discuss the latest releases.

2025 The Year in Figures

2025 was an outstanding year for bucketAV. The following figures summarize the year.

• bucketAV scanned more than 5 Petabyte of data.
• In total we shipped 129 releases of the core product and add-ons.
• 1,610 customers use bucketAV to protect Amazon S3 and Cloudflare R2 from viruses, trojans, and malware.
• We were thrilled to welcome 441 new customers in 2025.

Releases

Here is a list of all releases that we shipped in December 2025.

• bucketAV for Amazon S3 powered by Sophos®: v3.1.0
• bucketAV for Amazon S3 powered by ClamAV®: v3.1.0
• bucketAV for Cloudflare R2 powered by Sophos®: v3.1.0
• bucketAV for Cloudflare R2 powered ClamAV®: v3.1.0

Follow the update guide to upgrade your installation of bucketAV to the latest version.

ClamAV 1.5.1

We are updating ClamAV from 1.4.3 to 1.5.1 which comes with the following improvements.

First, ClamAV 1.5.1 adds CVD signing/verification with external .sign files. We have also updated our ClamAV mirrors to ensure .sign files are getting distributed to all EC2 instances running bucketAV.

Second, ClamAV reduces the maximum recursion limit when scanning archived files to 100.

Third, enhanced detection of encrypted OLE2-based Microsoft Office documents.

For more details about ClamAV 1.5 refer to the blog post ClamAV 1.5.0 released!.

ClamAV Signature Retirement

Starting December 16th, 2025, ClamAV began retiring older, low-value ClamAV signatures to optimize the database for the modern security landscape. This initiative is expected to reduce signature database sizes by approximately 50%, leading to faster updates and a potential reduction in RAM usage of up to 25% for the scanning engine.

For more details about ClamAV 1.5 refer to the blog post ClamAV Signature Retirement Announcement.

What’s next?

We are planning to work on the following features and improvements within the next few weeks.

• Upgrade to AWS SDK v3
• Show failed scheduled scans in the CloudWatch dashboard.

Feedback

We would appreciate your feedback to help us improve bucketAV. What feature do you miss? What is particularly important to you when it comes to protecting Amazon S3 and Cloudflare R2 from malware? hello@bucketav.com