强大的Endpoint 安全软件 平台
The OESIS Framework is a cross-platform, modular framework that enables technology vendors to integrate ZTNA (Zero Trust Network Access), device compliance, vulnerability assessment, patch management, and other advanced endpoint protection capabilities into their products, quickly and efficiently.
- Ready-to-Integrate
- 缩短产品上市时间
- Customizable SDK
OPSWAT 以下机构信赖
150+
50+
15
Move Faster with Our Industry-Leading Endpoint Security SDK
The OESIS Framework gives your engineering team a ready-to-integrate endpoint security SDK that empowers your product across Windows, macOS, and Linux.
Modular Framework
Integrate only the functions you need today, and add more as your product grows, no build-from-scratch burden required.
缩短开发时间
Pre-built modules and streamlined APIs let you accelerate time-to-market without sacrificing quality or protection.
削减开发成本
Minimize resource investment by leveraging a ready-to-integrate SDK, reducing the need for in-house security development.
降低维护和支持成本
持续更新、威胁情报和合规就绪功能可降低长期维护负担和支持开销。
Continuous Threat & CVE Updates
OPSWAT maintains the underlying detection data, so your product stays current without dedicating engineering time to research.
Embed Proven Expertise
Integrate a framework hardened by decades of OPSWAT experience and innovation, trusted by leading technology vendors worldwide.
Zero Trust Starts with Knowing the Device
OESIS Framework provides the device trust layer behind modern ZTNA and allows technology vendors to embed powerful endpoint security features directly into your applications. Our SDK offers APIs for device posture, vulnerability scanning, patch management, and malware detection - fully customizable, lightweight, and easy to integrate.
Device Compliance
Discover, detect, and enforce policy across 5,000+ applications to power device-trust decisions for ZTNA and NAC deployments continuously, not just at the login gate.
Patch Management
Automatically detect missing patches and remediate vulnerabilities across hundreds of third-party applications and operating systems, keeping access decisions based on current data.
脆弱性评估
Identify, assess, and map over 98,500 unique CVEs and more than 175,000 vulnerability instances with 1000+ applications supported.
应用程序移除
无需用户干预，即可卸载不需要或不符合要求的应用程序。
支持的平台
平台* | 版本 |
|---|---|
| Windows Desktop | 7, 8, 8.1, 10, 11 |
| Windows Server | 2008 R2, 2012, 2012 R2, 2016, 2019, 2022, 2025 |
| MacOS | Yosemite (10.10), El Capitan (10.11), Sierra (10.12), High Sierra (10.13), Mojave (10.14), Catalina (10.15), Big Sur (11), Monterey (12), Ventura (13), Sonoma (14), Sequoia (15), Tahoe (26) |
| 利纳克斯 | Fedora (41, 42, 43, 44), Red Hat Enterprise Linux (8, 9, 10), CentOS (7, 8), Ubuntu (22.04, 24.04, 25.04, 25.10, 26.04), AlmaLinux (8, 9, 10), Rocky Linux (8, 9, 10), Debian (12, 13), SUSE (15, 15.1, 15.2, 15.3, 15.4, 15.5, 15.6, 15.7, 16.0), Oracle Linux (8, 9, 10), Amazon Linux (2, 2023), Linux Mint (20, 21, 22, 22.1, 22.2, 22.3) |
也可能支持其他发行版 (**)
24+ Years
Of Experience and Innovation
250 Million
Endpoints Worldwide
值得信赖
Top 20
Tier-1 Vendors
符合合规要求
Ready-to-Integrate
with Customizable SDK
4 Dozen+ Partners
Cross-Platform Coverage
(Windows, macOS, Linux)
OESIS Framework vs. Building in-house
Most teams underestimate what it takes to keep threat intelligence database accurate and current. Maintaining signature currency, tracking new CVEs, handling OS version changes, and managing real-world edge cases at scale is an ongoing operational commitment that consumes significant resources. OESIS Framework lifts that burden from your organization and gives you production-ready endpoint security capabilities.
能力 | OESIS 框架 | Build In-House |
|---|---|---|
Time to Market | Days to Weeks | Six to twelve months |
Ongoing Research & Database Updates | CVEs, patch research, security controls and threat database are maintained continuously by OPSWAT | Dedicated internal team required |
Broad Coverage | 4 dozen+ partners contribute to a shared intelligence network running on 250 million endpoints worldwide | Solo team with limited resources and coverage |
Cross-Platform Support | Windows, macOS, and Linux from one SDK | Separate effort per OS |
Long-Term Maintenance | Continuous updates delivered as part of the SDK | Ongoing engineering cost |
合规准备情况 | Compliance-Ready Features Included | Built and validated internally |
Customer Support & Enablement | Dedicated support, plus training for your support team to build the skills needed to operate and troubleshoot | Support relies entirely on internal resources and expertise |
OPSWAT MetaDefender Threat Research & Intelligence (TRI)
Daily vulnerability intelligence at a glance — what changed today, what is being exploited, and what affects you.
Integrate the Way Your Architecture Already Works, with the Languages Your Team Already Uses
OESIS Framework can be easily integrated into endpoint agents built with virtually any programming language. Its straightforward JSON-in/JSON-out interface provides a language-independent integration model, making it easy to incorporate OESIS Framework capabilities into existing endpoint products.
Sample OESIS Framework projects are available in the following programming languages: C, C++, C#, Go, Python, Ruby, and Objective-C.
C++ 库
我们的共享库是一个本地 C++ 集成库，可轻松适用于其他终端语言。
JSON
用于调用功能的简单 JSON 输入和 JSON 输出协议
Trusted by Industry Leaders
"OPSWAT的产品帮助了我们，主要是让我们能够顺利、无缝地集成到现有的中央技术平台中"。
"OPSWAT 是 Ivanti 的战略合作伙伴......实际上，我们利用OPSWAT的合作伙伴关系来确保我们没有任何恶意代码......"
"......加上OPSWAT 提供的设备合规性和态势检查......将这一切结合在一起，提供整体的端到端安全。
Built to Help You Meet Compliance
The OESIS Framework gives your product the device posture, patch, and vulnerability data needed to support compliance requirements. The SDK also provides evidence artifacts for 13+ controls for regulatory compliance frameworks.
三步轻松入门
与我们的专家联系
Talk through your architecture and requirements with the OPSWAT team to scope the right modules for your product.
无缝集成
Integrate quickly and efficiently with our customizable endpoint security SDK
Enforce ZTNA & Attain Device Trust with Confidence
Put real-time device posture to work, making and continuously re-evaluating trust decisions across your users' devices.
Are you OESIS OK?
Verify that your application interoperates cleanly with the world's leading endpoint security and ZTNA products. The OESIS OK certification program verifies compatibility and security effectiveness for endpoint security vendors so partners and customers know your product is ready.
入门
OESIS API Documentation
常见问题
The OESIS Framework, part of OPSWAT OEM Solutions, is a cross-platform endpoint security software development framework enabling developers and technology vendors to efficiently integrate vulnerability and patch management, ZTNA and device posture check into their products with customizable SDK. With more than 24 years of continuous development, OESIS Framework is trusted by the Top 20 Tier-1 security vendors and a network of partners across 250 million endpoints globally.
ZTNA (Zero Trust Network Access) and NAC (Network Access Control) policies depend on understanding the real-time security state of a device before granting access, and continuously throughout the session.
The OESIS Framework goes far beyond simply determining whether security software is installed or a process is running. It provides deep security posture intelligence to determine whether endpoint protection is installed, running, properly configured, and actively protecting the device. For antimalware and EDR products, this can include checks such as real-time protection status, definition and engine updates, and detected threats. OESIS Framework also provides posture intelligence for other critical security controls, including firewalls, disk encryption, vulnerabilities, missing patches, and application security.
OPSWAT has built relationships with endpoint security vendors over more than two decades, including vendor-specific integrations and enhancements that enable OESIS Framework to accurately monitor security products beyond what is possible through generic operating-system checks.
With support for more than 4,000 applications across Windows, macOS, and Linux, OESIS gives ZTNA and NAC vendors a single framework for evaluating endpoint security posture across a broad security ecosystem.
The OESIS Framework offers four core endpoint security modules: Device Posture & Compliance, Vulnerability Detection, Patch Management, and AppRemover. Device Posture & Compliance provides the endpoint intelligence needed to deliver the Device Trust component of ZTNA, enabling solutions to continuously evaluate whether a device meets security requirements before and during access. Together, these modules provide deep endpoint security intelligence and control across Windows, macOS, and Linux, backed by continuously updated application, vulnerability, CVE, and patch intelligence.
The OESIS Framework supports Windows, macOS, and Linux, with coverage varying by module. Full details are available in the platform support charts in the technical documentation. View Support Charts and Documentation.
Most teams move from engagement to a working integration in days to weeks, using the sample projects and JSON in, JSON out protocol rather than building detection logic from scratch.
OESIS Framework can be easily integrated into endpoint agents built with virtually any programming language. Its straightforward JSON-in/JSON-out interface provides a language-independent integration model, making it easy to incorporate OESIS Framework capabilities into existing endpoint products.
Sample OESIS Framework projects are available in the following programming languages: C, C++, C#, Go, Python, Ruby, and Objective-C.
OESIS Framework is powered by OPSWAT MetaDefender Threat Research & Intelligence (TRI), providing continuously updated vulnerability and patch intelligence without requiring customers to build and maintain their own research infrastructure. OPSWAT continuously collects, analyzes, and enriches intelligence covering CVEs, Known Exploited Vulnerabilities (KEVs), zero-day and emerging vulnerabilities, EPSS exploit-likelihood data, vendor advisories, and patch information—and maps that intelligence to the applications and operating systems running on endpoints.
This enables your product to quickly identify vulnerable software, detect exposure to newly discovered and actively exploited threats, understand available remediation, and prioritize risk using continuously updated OPSWAT intelligence.
Explore OPSWAT MetaDefender TRI: Search Center - MetaDefender TRI
