1. A host computer system, comprising: at least one processor; a first memory including first instructions that, when executed by the at least one processor, cause the host computer system to operate in a resource provider environment owned by a resource provider; and a peripheral device including a co-processor and second memory for storing second instructions, the peripheral device connected to the host computer system using a core system bus, the peripheral device further being under logical control of a customer of the resource provider such that the customer is a sole entity enabled to cause actions to be performed by the peripheral device, the peripheral device further including an interface enabling a request to be received to scan at least a subset of resources of the host computer system for malicious software, the peripheral device configured to obtain data from the host computer system using the core system bus independent of the at least one processor, the peripheral device further configured to analyze the data using malicious software detection software executing on the co-processor and provide a notification regarding detection of the malicious software on the host machine, wherein the malicious software on the host machine is unable to gain access to the peripheral device.