CyberIndexBeta

Product

An intrusion prevention system and network firewall for operational technology (OT) and cyber-physical systems: a ruggedized hardware appliance with stateful packet inspection, a firewall learning mode, protocol-specific deep packet inspection and an integrated hardware bypass. Offered as a 4-port and an 8-port model. It is available as a hardware appliance. It is recorded as supporting application control, central management console, deep packet inspection and high availability. Its record also notes intrusion detection (ids), intrusion prevention (ips), stateful inspection and vpn gateway. It is aimed at Critical Infrastructure buyers.

Current Version
3.5.1
Market
Critical InfrastructureEnterpriseGovernment
Licence
Paid
Price
Paid · price unknown
Record Created
2026-10-08
Last Updated
2026-10-19

Vendor

OPSWAT sells to plant operators rather than households. Founded in 2002 by Benny Czarny, it built its business around a problem ordinary endpoint security does not address: files and removable media crossing into networks that cannot be patched, rebooted or taken offline — power, water, manufacturing, defence, air-gapped government systems — where the answer is to inspect and sanitise whatever crosses the boundary rather than to install an agent on the far side of it. Everything sits on the MetaDefender Platform. MetaDefender Core and MetaDefender ICAP Server scan files in transit using Metascan Multiscanning, which runs one file past many antivirus engines instead of trusting a single verdict, and Deep CDR, which rebuilds a document without its active content rather than judging whether that content is hostile. MetaDefender Kiosk scans removable media at a site entrance and MetaDefender Drive boots a machine to inspect it before it is admitted; MetaDefender Managed File Transfer carries what passes inward; MetaDefender Optical Diode and MetaDefender Unidirectional Security Gateway make a network link physically one-way. MetaDefender Network Access Control and MetaDefender Endpoint cover device posture. The company moved its headquarters to Tampa, Florida in 2023 and has grown partly by acquisition — Impulse (network access control, 2019), Fend (data diodes) and InQuest (file inspection and threat intelligence). OPSWAT also appears in this index as an assessor, not only as a vendor. The OPSWAT Certification column — Platinum down to Bronze — is its assessment of how well another company's antimalware product interoperates with the OESIS Framework, the component that access-control systems use to check what protection a device is running. A level shown in that column is OPSWAT's judgement of someone else's product, not of its own. Vendor page →

Website
opswat.com
Country
United States
Headquarters
Tampa, United States
Year Established
2002
Customers
2,100 organisations
Users
300M users
Revenue
$300.0M (2026)

Platforms

Hardware Appliancenative

Target Market

Critical Infrastructure primaryEnterprise primaryGovernment primary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keypartial
Intrusion Detection (IDS)partial
SSL/TLS InspectionkeyNot known
VPN Gatewaykeynative
SD-WANNot known
Application Controlkeypartial
High Availabilitypartial
Deep Packet Inspectionnative
Central Management Consolenative

2 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeIndustrial (OT)

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
PaidPaidnot statedyearlyNot known

Versions

  • 3.5.1platform not recordedreleased 2026-10-06

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-10-08. Everything below is what has changed since.

  • 2026-10-19Product updatedSold to: Governmentevidence
  • 2026-10-18Product updatedSold to: Enterpriseevidence
  • 2026-10-15Pricing plan addedPrice: Paid — paidevidence
  • 2026-10-09New versionNew version: 3.5.1evidence
  • 2026-10-08Capability addedHigh Availability: limitedevidence
  • 2026-10-08Capability addedApplication Control: limitedevidence
  • 2026-10-08Capability addedSSL/TLS Inspection: no longer recordedevidence
  • 2026-10-08Capability addedIntrusion Prevention (IPS): limitedevidence
  • 2026-10-08Capability addedVPN Gateway: built inevidence
  • 2026-10-08Capability addedSSL/TLS Inspection: limitedevidence
  • 2026-10-08Capability addedIntrusion Detection (IDS): limitedevidence
  • 2026-10-08Capability addedCentral Management Console: built inevidence
  • 2026-10-08Product updatedSold to: Critical Infrastructureevidence
  • 2026-10-08Capability addedIntrusion Prevention (IPS): built inevidence
  • 2026-10-08Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-08Capability addedStateful Inspection: built inevidence
  • 2026-10-08Platform addedRuns on Hardware Applianceevidence
  • 2026-10-08Product createdNew product, listed in Network Firewallevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.