SafeCheck
Is this link or file safe to open?
Typical useSomeone sent you a link or an attachment and you are not sure — check it before anyone clicks.
Check whether a link or a file is safe before you open it — against 15+ threat-intelligence sources, with document analysis for macros, embedded scripts and hidden URLs.
Free to start on every tool — no card, no time limit. You pay only for what grows beyond the free tier. Sign in with your qzila account to use it.
What it checks
- URL reputation across 15+ threat-intel feeds, with a verdict that flips when a source changes its mind
- Office and PDF files: macros, auto-exec, DDE, JavaScript, launch actions, embedded files
- URLs found inside documents, checked the same way
- Shareable verdict page for the person who sent you the file
How this tool bills
Indicative prices, EUR excl. VAT. The current price list is in your account and applies from the day you add something.
Pricing examples
Three typical situations, worked through the way the invoice would show them. Prices are indicative; the current price list is in your account.
- Example 1 · Trying it out300 checks a month
A freelancer or a small company signs in and adds 300 checks to see what the tool finds.
Everything you add is within the free tier (300 checks free every month), so nothing is billed. There is no time limit — it stays free while you stay within it.
300 − 300 free = 0 × €0.05Monthly bill: €0.00 — free. - Example 2 · A small company1200 checks a month
A company adds 1200 checks — its main systems and a couple it acquired along the way.
The first 300 are covered by the free tier. The remaining 900 are billed at €0.05 each, metered per month.
1200 − 300 free = 900 × €0.05Monthly bill: 900 × €0.05 = €45.00. - Example 3 · An agency or a larger estate6000 checks a month
An MSP, an auditor or a larger company watches 6000 checks across several clients or business units.
The free tier still covers the first 300. The other 5700 are billed at €0.05 each. Remove something mid-month and it stops counting the same day; set a budget and you are warned before you reach it.
6000 − 300 free = 5700 × €0.05Monthly bill: 5700 × €0.05 = €285.00, itemised on one invoice.
Try your own numbers
The API
Every qzila tool is a GraphQL API first; the web UI is one client of it. Anything you can do in the browser you can do from a script, a CI job or the Asign platform.
https://link-and-file-check.qzila.com/graphqlPOST · application/json · { "query": "…" }
Requests are authenticated with your qzila session (the same sign-in as the browser). For automation, sign in once at identity.qzila.com and reuse the session cookie; API keys for service accounts are on the roadmap.
Whatever this tool detects — a verdict flip, a regression, a change, an incident — is emitted as a signal to the qzila alert hub, which forwards it to email, Slack, a webhook, SMS or Jira, and to ServiceWatch. Each signal carries the asset it belongs to, so you can correlate it back to your own inventory (or to an Asign asset).
Main operations
checkLinkmutationCheck one URL and get the verdict, score and the normalised URL back.
mutation { checkLink(url: "https://example.com/invoice.pdf") { verdict score normalisedUrl } }requestUploads / checkFilemutationAsk for an upload slot, PUT the file bytes, then check the uploaded file by id.
mutation { checkFile(id: "upl_9f3…") { verdict findings { kind detail } } }sessionHistoryqueryYour own recent checks and their verdicts.
query { sessionHistory { url verdict checkedAt } }
Send requests to https://link-and-file-check.qzila.com/graphql
Questions about SafeCheck
What does SafeCheck look at?
The link is followed through every redirect to its final destination, which is then checked against fifteen reputation and malware sources plus our own heuristics. Files are scanned by several engines and inspected for macros, embedded scripts and known-bad hashes.
Is my file or link stored?
Files are kept only for the time of the scan and deleted afterwards. The verdict and the normalised URL stay in your history so you can show later what was checked and when.
Can my staff use it without an account?
Yes — the public check page works without signing in. Signed-in use adds history, the API and higher limits.
What counts as a check?
One URL or one file. Re-checking the same link on the same day is not billed again.
Is the free tier a trial?
No. It stays free for as long as you stay within it — no card, no time limit. You only start paying when you add more than the free tier covers.
How am I billed?
Monthly, for what you actually had in the tool during the month, at the public price per unit. Everything lands on one invoice itemised per tool. Remove something and it stops billing the same day.
Where do alerts go?
Every tool reports through one alert hub. You choose per destination: email, Slack, a webhook, SMS or a Jira ticket — and ServiceWatch shows the same signals on one board.
Where is my data kept?
In the European Union. qzila is built and operated by adcore s.r.o., a Slovak company; the tools run on EU infrastructure.
Start with one tool. Add the rest when you need them.
Sign in once and every tool is a click away. You pay only for what you watch, per month, with no minimum and no contract — the price list is in your account before you add anything.
- One account across every qzila tool
- Free tier on every tool, then pay-as-you-go
- Alerts to email, Slack, webhook, SMS or Jira