A file security platform that uses multi-scanning (30+ AV engines), deep content disarm and reconstruction (CDR), and sandbox analysis to detect and neutralize malware in files, URLs, and IP addresses at upload/transfer points.
What is OPSwat?
OPSwat is a file security platform specializing in content inspection and sanitization for files moving across organizational boundaries. Its core capabilities include multi-scanning, which runs submitted files through 30 or more antivirus engines simultaneously and aggregates the verdicts into a single confidence score, and Deep Content Disarm and Reconstruction (CDR), which strips potentially malicious active content from documents and files and rebuilds clean versions without affecting the visible content. OPSwat also provides sandbox analysis for behavioral inspection of executable files, and its MetaDefender platform can be deployed at email gateways, web proxies, file upload portals, and removable media inspection stations. This makes it particularly relevant for organizations in regulated industries or critical infrastructure sectors where the risk of introducing malware through file transfers is a significant concern.
How does OPSwat work with Qevlar?
Qevlar integrates with OPSwat to analyze suspicious files encountered during automated investigations. When an alert involves a file of unknown provenance, Qevlar can submit it to OPSwat's multi-scanning engine to obtain a rapid, high-confidence verdict based on the consensus of multiple detection engines.
Want to help your analysts focus on the most critical alerts?
Frequently asked questions
What is OPSWAT?
OPSWAT is a file security platform that uses multi-scanning across 30+ antivirus engines, deep Content Disarm and Reconstruction (CDR) and sandbox analysis to detect and neutralize malware in files, URLs and IP addresses.
What can you do with OPSWAT in Qevlar?
Qevlar can submit suspicious files to OPSWAT's multi-scanning engine during an investigation, obtaining a rapid, high-confidence verdict based on the consensus of many detection engines.
Does Qevlar analyze unknown files automatically?
Yes. When an alert involves a file of unknown provenance, Qevlar uses OPSWAT to assess it and folds the verdict into the investigation without manual effort.
Why multi-engine scanning?
A single engine can miss a sample that others catch. By aggregating 30+ engines through OPSWAT, Qevlar reaches a more reliable verdict than any one scanner alone.
Other integrations
.avif)
