CyberIndexBeta

Product

Endpoint agent that detects missing updates and deploys them, alongside peripheral and removable-media control, managed from My OPSWAT Central Management. The vendor states it detects vulnerabilities in over 975 applications and patches over 425 third-party applications as well as operating-system updates. MetaDefender Endpoint covers Linux, macOS, Windows and Windows Server. It is delivered as on-premises software and a hosted SaaS service. It is recorded as supporting air-gap operation, application patching, automated patch deployment and central management console. Its record also notes local patch repository, multi-tenant (msp) management, operating system patching and patch compliance reporting.

Current Version
15.6.2609
Market
Critical InfrastructureEnterpriseGovernment
Licence
Paid
Price
Paid · price unknown
Record Created
2026-10-04
Last Updated
2026-10-28

Vendor

OPSWAT sells to plant operators rather than households. Founded in 2002 by Benny Czarny, it built its business around a problem ordinary endpoint security does not address: files and removable media crossing into networks that cannot be patched, rebooted or taken offline — power, water, manufacturing, defence, air-gapped government systems — where the answer is to inspect and sanitise whatever crosses the boundary rather than to install an agent on the far side of it. Everything sits on the MetaDefender Platform. MetaDefender Core and MetaDefender ICAP Server scan files in transit using Metascan Multiscanning, which runs one file past many antivirus engines instead of trusting a single verdict, and Deep CDR, which rebuilds a document without its active content rather than judging whether that content is hostile. MetaDefender Kiosk scans removable media at a site entrance and MetaDefender Drive boots a machine to inspect it before it is admitted; MetaDefender Managed File Transfer carries what passes inward; MetaDefender Optical Diode and MetaDefender Unidirectional Security Gateway make a network link physically one-way. MetaDefender Network Access Control and MetaDefender Endpoint cover device posture. The company moved its headquarters to Tampa, Florida in 2023 and has grown partly by acquisition — Impulse (network access control, 2019), Fend (data diodes) and InQuest (file inspection and threat intelligence). OPSWAT also appears in this index as an assessor, not only as a vendor. The OPSWAT Certification column — Platinum down to Bronze — is its assessment of how well another company's antimalware product interoperates with the OESIS Framework, the component that access-control systems use to check what protection a device is running. A level shown in that column is OPSWAT's judgement of someone else's product, not of its own. Vendor page →

Website
opswat.com
Country
United States
Headquarters
Tampa, United States
Year Established
2002
Customers
2,100 organisations
Users
300M users
Revenue
$300.0M (2026)

Platforms

Linuxnative
macOSnative
Windowsnative
Windows Servernative

Target Market

Critical Infrastructure primaryEnterprise secondaryGovernment primary

Capabilities

Application Patchingkeynative
Operating System Patchingkeynative
Automated Patch Deploymentkeynative
Vulnerability-Based Prioritisationkeynative
Patch Rollbackkeynot supported
Phased / Ring Deploymentnative
Roaming Endpoint Patchingkeynative
Patch Compliance Reportingnative
Reboot Managementnative
Software Deploymentnative
Vulnerability ShieldingNot known
Central Management Consolenative
Air-Gap Operationkeynative
Local Patch Repositorynative
Agentless Patchingkeynot supported
Multi-Tenant (MSP) Managementkeynative

1 of 16 not yet known — not recorded, which is not the same as not supported.

Specifications

Third-Party Applications Supported425+ applications

1 other specification for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
PaidPaidnot statedyearlyNot known

Versions

  • 15.6.2609Linuxreleased 2026-09-23
  • 10.4.2609macOSreleased 2026-09-23
  • 7.6.2609Windowsreleased 2026-09-23

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-10-04. Everything below is what has changed since.

  • 2026-10-19Product updatedSold to: Governmentevidence
  • 2026-10-19Product updatedNo longer sold to: OT / ICSevidence
  • 2026-10-18Product updatedSold to: Critical Infrastructureevidence
  • 2026-10-15Pricing plan addedPrice: Paid — paidevidence
  • 2026-10-09New versionNew version: 15.6.2609 (Linux)evidence
  • 2026-10-09New versionNew version: 10.4.2609 (macOS)evidence
  • 2026-10-09New versionNew version: 7.6.2609 (Windows)evidence
  • 2026-10-08Product updatedAlso sold to: Enterpriseevidence
  • 2026-10-08Product updatedSold to: OT / ICSevidence
  • 2026-10-08Capability addedVulnerability Shielding: no longer recordedevidence
  • 2026-10-08Capability addedPatch Rollback: not supportedevidence
  • 2026-10-08Capability addedPatch Rollback: no longer recordedevidence
  • 2026-10-06Capability addedVulnerability Shielding: not supportedevidence
  • 2026-10-06Capability addedMulti-Tenant (MSP) Management: built inevidence
  • 2026-10-06Capability addedPhased / Ring Deployment: built inevidence
  • 2026-10-06Capability addedPatch Rollback: not supportedevidence
  • 2026-10-06Platform addedRuns on Windows Serverevidence
  • 2026-10-05Capability addedAgentless Patching: not supportedevidence
  • 2026-10-05Capability addedLocal Patch Repository: built inevidence
  • 2026-10-05Capability addedSoftware Deployment: built inevidence
  • 2026-10-05Capability addedRoaming Endpoint Patching: built inevidence
  • 2026-10-05Capability addedCentral Management Console: built inevidence
  • 2026-10-05Capability addedPatch Compliance Reporting: built inevidence
  • 2026-10-05Capability addedReboot Management: built inevidence
  • 2026-10-05Capability addedAir-Gap Operation: built inevidence
  • 2026-10-05Capability addedVulnerability-Based Prioritisation: built inevidence
  • 2026-10-05Capability addedAutomated Patch Deployment: built inevidence
  • 2026-10-05Capability addedApplication Patching: built inevidence
  • 2026-10-05Capability addedOperating System Patching: built inevidence
  • 2026-10-04Platform addedRuns on Windowsevidence
  • 2026-10-04Platform addedRuns on Linuxevidence
  • 2026-10-04Platform addedRuns on macOSevidence
  • 2026-10-04Product createdNew product, listed in Patch Managementevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.