diff --git a/salt/sensoroni/files/analyzers/virustotal/README.md b/salt/sensoroni/files/analyzers/virustotal/README.md
new file mode 100644
index 000000000..d160dcae4
--- /dev/null
+++ b/salt/sensoroni/files/analyzers/virustotal/README.md
@@ -0,0 +1,17 @@
+# Virustotal
+
+## Description
+Submit a domain, hash, IP, or URL to Virustotal for analysis.
+
+## Configuration Requirements
+
+``api_key`` - API key used for communication with the Virustotal API
+
+This value should be set in the pillar, like so:
+
+```
+sensoroni:
+  analyzers:
+    virustotal:
+      api_key: $yourapikey
+```