強大的Endpoint 安全Software 開發平台
The OESIS Framework is a cross-platform, modular framework that enables technology vendors to integrate ZTNA (Zero Trust Network Access), device compliance, vulnerability assessment, patch management, and other advanced endpoint protection capabilities into their products, quickly and efficiently.
- Ready-to-Integrate
- 縮短產品上市時間
- Customizable SDK
OPSWAT 以下機構的信賴
150+
50+
15
Move Faster with Our Industry-Leading Endpoint Security SDK
The OESIS Framework gives your engineering team a ready-to-integrate endpoint security SDK that empowers your product across Windows, macOS, and Linux.
Modular Framework
Integrate only the functions you need today, and add more as your product grows, no build-from-scratch burden required.
縮短開發時間
Pre-built modules and streamlined APIs let you accelerate time-to-market without sacrificing quality or protection.
降低開發成本
Minimize resource investment by leveraging a ready-to-integrate SDK, reducing the need for in-house security development.
降低維護與支援成本
持續更新、威脅情資和合規功能可降低您的長期維護負擔和支援費用。
Continuous Threat & CVE Updates
OPSWAT maintains the underlying detection data, so your product stays current without dedicating engineering time to research.
Embed Proven Expertise
Integrate a framework hardened by decades of OPSWAT experience and innovation, trusted by leading technology vendors worldwide.
Zero Trust Starts with Knowing the Device
OESIS Framework provides the device trust layer behind modern ZTNA and allows technology vendors to embed powerful endpoint security features directly into your applications. Our SDK offers APIs for device posture, vulnerability scanning, patch management, and malware detection - fully customizable, lightweight, and easy to integrate.
Device Compliance
Discover, detect, and enforce policy across 5,000+ applications to power device-trust decisions for ZTNA and NAC deployments continuously, not just at the login gate.
Patch Management
Automatically detect missing patches and remediate vulnerabilities across hundreds of third-party applications and operating systems, keeping access decisions based on current data.
弱點評估
Identify, assess, and map over 98,500 unique CVEs and more than 175,000 vulnerability instances with 1000+ applications supported.
應用程式卸載
無需使用者介入，即可乾淨卸載不需要或不符合規定的應用程式。
支援的平臺
平台* | 版本 |
|---|---|
| Windows Desktop | 7, 8, 8.1, 10, 11 |
| Windows Server | 2008 R2, 2012, 2012 R2, 2016, 2019, 2022, 2025 |
| macOS 作業系統 | Yosemite (10.10), El Capitan (10.11), Sierra (10.12), High Sierra (10.13), Mojave (10.14), Catalina (10.15), Big Sur (11), Monterey (12), Ventura (13), Sonoma (14), Sequoia (15), Tahoe (26) |
| Linux作業系統 | Fedora (41, 42, 43, 44), Red Hat Enterprise Linux (8, 9, 10), CentOS (7, 8), Ubuntu (22.04, 24.04, 25.04, 25.10, 26.04), AlmaLinux (8, 9, 10), Rocky Linux (8, 9, 10), Debian (12, 13), SUSE (15, 15.1, 15.2, 15.3, 15.4, 15.5, 15.6, 15.7, 16.0), Oracle Linux (8, 9, 10), Amazon Linux (2, 2023), Linux Mint (20, 21, 22, 22.1, 22.2, 22.3) |
也可能支援其他發行版 (**)
24+ Years
Of Experience and Innovation
250 Million
Endpoints Worldwide
值得信賴
Top 20
Tier-1 Vendors
符合合規要求
Ready-to-Integrate
with Customizable SDK
4 Dozen+ Partners
Cross-Platform Coverage
(Windows, macOS, Linux)
OESIS Framework vs. Building in-house
Most teams underestimate what it takes to keep threat intelligence database accurate and current. Maintaining signature currency, tracking new CVEs, handling OS version changes, and managing real-world edge cases at scale is an ongoing operational commitment that consumes significant resources. OESIS Framework lifts that burden from your organization and gives you production-ready endpoint security capabilities.
能力 | OESIS框架 | Build In-House |
|---|---|---|
Time to Market | Days to Weeks | Six to twelve months |
Ongoing Research & Database Updates | CVEs, patch research, security controls and threat database are maintained continuously by OPSWAT | Dedicated internal team required |
Broad Coverage | 4 dozen+ partners contribute to a shared intelligence network running on 250 million endpoints worldwide | Solo team with limited resources and coverage |
Cross-Platform Support | Windows, macOS, and Linux from one SDK | Separate effort per OS |
Long-Term Maintenance | Continuous updates delivered as part of the SDK | Ongoing engineering cost |
合規準備狀況 | Compliance-Ready Features Included | Built and validated internally |
Customer Support & Enablement | Dedicated support, plus training for your support team to build the skills needed to operate and troubleshoot | Support relies entirely on internal resources and expertise |
OPSWAT MetaDefender Threat Research & Intelligence (TRI)
Daily vulnerability intelligence at a glance — what changed today, what is being exploited, and what affects you.
Integrate the Way Your Architecture Already Works, with the Languages Your Team Already Uses
OESIS Framework can be easily integrated into endpoint agents built with virtually any programming language. Its straightforward JSON-in/JSON-out interface provides a language-independent integration model, making it easy to incorporate OESIS Framework capabilities into existing endpoint products.
Sample OESIS Framework projects are available in the following programming languages: C, C++, C#, Go, Python, Ruby, and Objective-C.
C++ 程式庫
我們的共用函式庫是原生 C++ 整合，可輕鬆適應其他端點語言。
JSON
簡單的 JSON 輸入、JSON 輸出協定，用於調用功能
Trusted by Industry Leaders
OPSWAT的產品幫助了我們，主要是讓我們能夠順利、無縫地整合到現有的中央技術平台」。
OPSWAT 是Ivanti的戰略合作夥伴......我們實際上是利用OPSWAT的合作關係來確保我們沒有任何惡意程式碼......」
"......加上OPSWAT 所提供的裝置合規性和勢態檢查......將一切結合起來，提供整體的端對端安全性。
Built to Help You Meet Compliance
The OESIS Framework gives your product the device posture, patch, and vulnerability data needed to support compliance requirements. The SDK also provides evidence artifacts for 13+ controls for regulatory compliance frameworks.
三步驟輕鬆上手
與我們的專家聯繫
Talk through your architecture and requirements with the OPSWAT team to scope the right modules for your product.
無縫整合
Integrate quickly and efficiently with our customizable endpoint security SDK
Enforce ZTNA & Attain Device Trust with Confidence
Put real-time device posture to work, making and continuously re-evaluating trust decisions across your users' devices.
Are you OESIS OK?
Verify that your application interoperates cleanly with the world's leading endpoint security and ZTNA products. The OESIS OK certification program verifies compatibility and security effectiveness for endpoint security vendors so partners and customers know your product is ready.
開始
OESIS API Documentation
常見問題
The OESIS Framework, part of OPSWAT OEM Solutions, is a cross-platform endpoint security software development framework enabling developers and technology vendors to efficiently integrate vulnerability and patch management, ZTNA and device posture check into their products with customizable SDK. With more than 24 years of continuous development, OESIS Framework is trusted by the Top 20 Tier-1 security vendors and a network of partners across 250 million endpoints globally.
ZTNA (Zero Trust Network Access) and NAC (Network Access Control) policies depend on understanding the real-time security state of a device before granting access, and continuously throughout the session.
The OESIS Framework goes far beyond simply determining whether security software is installed or a process is running. It provides deep security posture intelligence to determine whether endpoint protection is installed, running, properly configured, and actively protecting the device. For antimalware and EDR products, this can include checks such as real-time protection status, definition and engine updates, and detected threats. OESIS Framework also provides posture intelligence for other critical security controls, including firewalls, disk encryption, vulnerabilities, missing patches, and application security.
OPSWAT has built relationships with endpoint security vendors over more than two decades, including vendor-specific integrations and enhancements that enable OESIS Framework to accurately monitor security products beyond what is possible through generic operating-system checks.
With support for more than 4,000 applications across Windows, macOS, and Linux, OESIS gives ZTNA and NAC vendors a single framework for evaluating endpoint security posture across a broad security ecosystem.
The OESIS Framework offers four core endpoint security modules: Device Posture & Compliance, Vulnerability Detection, Patch Management, and AppRemover. Device Posture & Compliance provides the endpoint intelligence needed to deliver the Device Trust component of ZTNA, enabling solutions to continuously evaluate whether a device meets security requirements before and during access. Together, these modules provide deep endpoint security intelligence and control across Windows, macOS, and Linux, backed by continuously updated application, vulnerability, CVE, and patch intelligence.
The OESIS Framework supports Windows, macOS, and Linux, with coverage varying by module. Full details are available in the platform support charts in the technical documentation. View Support Charts and Documentation.
Most teams move from engagement to a working integration in days to weeks, using the sample projects and JSON in, JSON out protocol rather than building detection logic from scratch.
OESIS Framework can be easily integrated into endpoint agents built with virtually any programming language. Its straightforward JSON-in/JSON-out interface provides a language-independent integration model, making it easy to incorporate OESIS Framework capabilities into existing endpoint products.
Sample OESIS Framework projects are available in the following programming languages: C, C++, C#, Go, Python, Ruby, and Objective-C.
OESIS Framework is powered by OPSWAT MetaDefender Threat Research & Intelligence (TRI), providing continuously updated vulnerability and patch intelligence without requiring customers to build and maintain their own research infrastructure. OPSWAT continuously collects, analyzes, and enriches intelligence covering CVEs, Known Exploited Vulnerabilities (KEVs), zero-day and emerging vulnerabilities, EPSS exploit-likelihood data, vendor advisories, and patch information—and maps that intelligence to the applications and operating systems running on endpoints.
This enables your product to quickly identify vulnerable software, detect exposure to newly discovered and actively exploited threats, understand available remediation, and prioritize risk using continuously updated OPSWAT intelligence.
Explore OPSWAT MetaDefender TRI: Search Center - MetaDefender TRI
