In-the-cloud detection uses real-time online checking of data in order to detect threats.

The goal of in-the-cloud detection is to reduce the time taken for a security product to use a new malware signature. By querying data published online (i.e. “in the cloud”), security products avoid having to send out signatures to computers.

In-the-cloud detection offers a very rapid response to new threats as they are discovered, but it has the drawback that it requires an internet connection in order to do the checking.