CyberIndexBeta

Product

Hosted multiscanning API and web service, sold separately from the on-premises platform. It is available as a cloud instance. It is recorded as supporting API integration, Archive Extraction, Central Management Console and Content Disarm & Reconstruction. Its record also notes DLP integration, File-based Vulnerability assessment, file structure validation and hash reputation lookup. It is aimed at Enterprise, Government and small and medium business buyers.

Current Version
Cloud service · no version
Market
Critical InfrastructureEnterpriseGovernment
Licence
Free tier available
Price
Free · paid plans
Record Created
2026-10-05
Last Updated
2026-10-28

Vendor

OPSWAT sells to plant operators rather than households. Founded in 2002 by Benny Czarny, it built its business around a problem ordinary endpoint security does not address: files and removable media crossing into networks that cannot be patched, rebooted or taken offline — power, water, manufacturing, defence, air-gapped government systems — where the answer is to inspect and sanitise whatever crosses the boundary rather than to install an agent on the far side of it. Everything sits on the MetaDefender Platform. MetaDefender Core and MetaDefender ICAP Server scan files in transit using Metascan Multiscanning, which runs one file past many antivirus engines instead of trusting a single verdict, and Deep CDR, which rebuilds a document without its active content rather than judging whether that content is hostile. MetaDefender Kiosk scans removable media at a site entrance and MetaDefender Drive boots a machine to inspect it before it is admitted; MetaDefender Managed File Transfer carries what passes inward; MetaDefender Optical Diode and MetaDefender Unidirectional Security Gateway make a network link physically one-way. MetaDefender Network Access Control and MetaDefender Endpoint cover device posture. The company moved its headquarters to Tampa, Florida in 2023 and has grown partly by acquisition — Impulse (network access control, 2019), Fend (data diodes) and InQuest (file inspection and threat intelligence). OPSWAT also appears in this index as an assessor, not only as a vendor. The OPSWAT Certification column — Platinum down to Bronze — is its assessment of how well another company's antimalware product interoperates with the OESIS Framework, the component that access-control systems use to check what protection a device is running. A level shown in that column is OPSWAT's judgement of someone else's product, not of its own. Vendor page →

Website
opswat.com
Country
United States
Headquarters
Tampa, United States
Year Established
2002
Customers
2,100 organisations
Users
300M users
Revenue
$300.0M (2026)

Platforms

Cloudnative

Target Market

Critical Infrastructure primaryEnterprise primaryGovernment secondary

Capabilities

Multi-Engine Scanningkeynative
Archive Extractionkeynative
True File Type Verificationkeynative
Password-Protected Archive HandlingNot known
Hash Reputation Lookupnative
Content Disarm & Reconstructionkeynative
Sandbox Analysisnative
Threat Intelligencenative
File-Based Vulnerability Assessmentnative
File Structure Validationnative
DLP Integrationnative
API Integrationkeynative
ICAP / Gateway Integrationkeynative
Object Storage ScanningkeyNot known
Managed Upload PortalNot known
Central Management Consolenative

3 of 16 not yet known — not recorded, which is not the same as not supported.

Specifications

Scanning Engines20+ engines
Scanning Engines UsedNot known
File Types Supported200+ file types

Pricing

PlanLicencePriced perBilledPrice
SummaryFree tier availablenot statedno recurring chargeNot known

Versions

A cloud service: the vendor runs it, so there is no version for customers to install or upgrade.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-10-05. Everything below is what has changed since.

  • 2026-10-19Product updatedNo longer sold to: SMBevidence
  • 2026-10-18Product updatedSold to: Critical Infrastructureevidence
  • 2026-10-10Capability addedFile-Based Vulnerability Assessment: built inevidence
  • 2026-10-10Capability addedFile Structure Validation: built inevidence
  • 2026-10-10Capability addedCentral Management Console: built inevidence
  • 2026-10-09Capability addedThreat Intelligence: built inevidence
  • 2026-10-09Capability addedDLP Integration: built inevidence
  • 2026-10-09Pricing plan addedPrice: free tier availableevidence
  • 2026-10-08Capability addedICAP / Gateway Integration: built inevidence
  • 2026-10-08Platform addedRuns on Cloudevidence
  • 2026-10-06Pricing plan addedPrice: price on requestevidence
  • 2026-10-06Product updatedAlso sold to: SMBevidence
  • 2026-10-06Product updatedAlso sold to: Governmentevidence
  • 2026-10-06Product updatedSold to: Enterpriseevidence
  • 2026-10-05Capability addedHash Reputation Lookup: built inevidence
  • 2026-10-05Capability addedAPI Integration: built inevidence
  • 2026-10-05Capability addedTrue File Type Verification: built inevidence
  • 2026-10-05Capability addedArchive Extraction: built inevidence
  • 2026-10-05Capability addedSandbox Analysis: built inevidence
  • 2026-10-05Capability addedContent Disarm & Reconstruction: built inevidence
  • 2026-10-05Capability addedMulti-Engine Scanning: built inevidence
  • 2026-10-05Product createdNew product, listed in Malware File Scannerevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.