VMware vShield Endpoint offloads antivirus functions to a hardened security virtual machine supplied by partners such as Trend Micro. vShield Endpoint uses VMware endpoint security (EPSEC) APIs to access the file system to scan and remediate viruses. This removes the need for agents in the guest operating system and prevents antivirus storms from consuming CPU cycles during scanning or antivirus update activities. Offloading antivirus functions provides enhanced security, as a malware attack often begins by disabling antivirus agents. The efficient antivirus architecture of vShield Endpoint provides antivirus as a service for large-scale vCloud environments.