Critical infrastructure security starts before a file enters the network.
OPSWAT helps protect files, devices and data transfers across IT and OT environments through a layered security approach.

File & Data Security

OPSWAT focuses on inspecting files uploaded to, stored within or transferred across enterprise environments. The MetaDefender platform brings together multiscanning, Deep CDR content sanitization and advanced malware analysis to help reduce file-borne risks that traditional controls may miss.

Product Portfolio

MetaDefender Core

Inspects files entering or leaving an organization with multiscanning, Deep CDR, file-type validation and optional advanced analysis layers. Its API-based integration helps organizations address file-borne threats before execution across portals, applications and file workflows.

MetaDefender ICAP Server

Integrates with ICAP-enabled proxies, gateways, load balancers and related systems to inspect or sanitize transferred files according to security policies. It adds a file-security layer to web uploads and enterprise transfers without requiring a fundamental redesign of the existing architecture.

MetaDefender Storage Security

Inspects files across on-premises, hybrid and cloud storage through real-time, scheduled or on-demand scanning. Working with MetaDefender Core, it provides centralized and auditable workflows to block, quarantine or sanitize malicious content.

MetaDefender Aether (Sandbox)

Analyzes suspicious files using reputation intelligence, static analysis, adaptive sandboxing and AI-assisted techniques to help identify advanced and evasive malware. It enriches security operations with actionable analysis results and indicators of compromise.

MetaDefender Managed File Transfer (MFT)

Applies identity, approval, logging and security policies to file transfers between IT and OT networks. By embedding layered file inspection and sanitization into transfer workflows, it enables controlled data exchange across segmented or highly sensitive environments.

OT/ICS & Critical Infrastructure Security

For manufacturing facilities, energy infrastructure and industrial control systems, operational continuity matters as much as cybersecurity. OPSWAT combines industrial traffic protection, controlled third-party access to OT systems and secure data flows across segmented networks.

Product Portfolio

MetaDefender Industrial Firewall

Provides active protection for production lines, control systems and OT networks with industrial-protocol-aware traffic inspection and network segmentation. It helps contain anomalous communications and unauthorized activity while taking operational continuity requirements into account.

MetaDefender OT Access

Enables controlled access to OT systems for maintenance teams, suppliers and remote specialists. Identity- and policy-based authorization, session monitoring and audit capabilities help reduce third-party access risk and improve accountability for critical operations.

MetaDefender Unidirectional Security Gateway (USG)

Creates a hardware-enforced, one-way data path between networks with different security classifications, supporting secure export of operational data from OT environments. It helps restrict reverse communication paths while preserving data availability for monitoring and reporting.

Device, Removable Media & Access Security

Every device connecting to a critical system and every file carried on removable media can introduce risk. OPSWAT helps organizations validate device posture, inspect files and apply security policies to access—from physical media checkpoints and supplier laptops to endpoints requesting access.

Product Portfolio

MetaDefender Kiosk

Inspects files carried on USB drives and other removable media before they enter critical networks. Multiscanning, Deep CDR and policy-based processing create a controlled checkpoint against media-borne threats, including in isolated networks.

MetaDefender Drive 2

A portable inspection tool for scanning supplier laptops, workstations and other transient devices before connecting them to critical networks. Pre-boot and supported in-session scanning help identify device-borne threats without relying on a permanent software installation.

MetaDefender Endpoint

Applies security checks to the use of USB drives and other peripherals on critical IT and OT endpoints. Its removable-media inspection and sanitization workflows support centralized policies for safer file use.

MetaDefender Access

Evaluates device security posture before users access enterprise resources. Compliance checks covering operating systems, security software, encryption, vulnerabilities and patch levels help enforce Zero Trust access policies.