NSRL, online
NSRL lookup online — query the NIST RDS by API
Check MD5, SHA-1, and SHA-256 hashes against the NIST National Software Reference Library without downloading a single byte of the Reference Data Set. 1.5 billion+ known files, queryable in bulk and at scale.
Background
What is the NSRL?
The National Software Reference Library (NSRL) is a project of the U.S. National Institute of Standards and Technology (NIST). It publishes the Reference Data Set (RDS) — a catalog of cryptographic hashes for known files: software that has been collected, analyzed, and recorded.
Crucially, NIST does not label these files “good” or “bad.” A known file is simply one that has been cataloged in the RDS. Investigators use it to filter out the files they already recognise — operating-system components, common applications, library files — so the unknown remainder rises to the top for review.
HashScanner is built on this public NSRL/RDS dataset. We don’t change the data — we make it instant to query in bulk and at scale.
The challenge
The Problem with Self-Hosting NSRL
The NIST National Software Reference Library contains more than 1.5 billion known file records and continues to grow with every release.
While many teams download and host NSRL locally, maintaining a searchable copy comes with operational challenges:
For individual investigations, local databases may be sufficient. At organizational scale, maintaining and distributing NSRL often becomes a project of its own.
HashScanner provides instant access to the latest NIST NSRL data through a globally distributed API and web interface—without downloads, database management, or update cycles.
The fix
The same data, one API call away
No download, no setup
Skip the download, the extraction, and the quarterly rebuild. Query the NSRL straight from your code with a Bearer token.
1.5B+ known files
The full Reference Data Set across modern, legacy, iOS, and Android — over 1.5 billion cataloged file records.
Bulk and at scale
Look up a single hash in realtime, or submit large bulk jobs — up to 100,000 hashes per job on higher plans.
Always current, global edge
We keep the dataset up to date for you, served from the point of presence closest to you anywhere in the world.
NSRL FAQ
Is this the official NSRL?
HashScanner is built on the public NIST NSRL/RDS dataset, but we are not affiliated with or endorsed by NIST. We make the same data faster to query — in bulk and at scale — without the local download.
Does a match mean the file is safe?
No. A match means the file is known — cataloged in the NSRL — not that it is safe, clean, or malicious. NIST does not label files good or bad. Use it to set aside the files you already recognise and focus on the unknown.
Which hash types are supported?
MD5 (32 hex), SHA-1 (40 hex), and SHA-256 (64 hex). The type is detected automatically from the hash length.
Can I query the NSRL in bulk?
Yes — submit a bulk job via the API and download structured CSV results. Bulk job size scales with your plan, up to 100,000 hashes per job.
Query the NSRL in seconds
2,500 free lookups / month. No credit card needed.