Plate-forme de développement de Software sécurité des Endpoint
The OESIS Framework is a cross-platform, modular framework that enables technology vendors to integrate ZTNA (Zero Trust Network Access), device compliance, vulnerability assessment, patch management, and other advanced endpoint protection capabilities into their products, quickly and efficiently.
- Ready-to-Integrate
- Accélération de la mise sur le marché
- Customizable SDK
OPSWAT la confiance de
150+
50+
15
Move Faster with Our Industry-Leading Endpoint Security SDK
The OESIS Framework gives your engineering team a ready-to-integrate endpoint security SDK that empowers your product across Windows, macOS, and Linux.
Modular Framework
Integrate only the functions you need today, and add more as your product grows, no build-from-scratch burden required.
Réduire le temps de développement
Pre-built modules and streamlined APIs let you accelerate time-to-market without sacrificing quality or protection.
Réduire les coûts de développement
Minimize resource investment by leveraging a ready-to-integrate SDK, reducing the need for in-house security development.
Réduire les coûts de maintenance et d'assistance
Les mises à jour permanentes, la veille sur les menaces et les fonctions de mise en conformité réduisent la charge de maintenance à long terme et les frais d'assistance.
Continuous Threat & CVE Updates
OPSWAT maintains the underlying detection data, so your product stays current without dedicating engineering time to research.
Embed Proven Expertise
Integrate a framework hardened by decades of OPSWAT experience and innovation, trusted by leading technology vendors worldwide.
Zero Trust Starts with Knowing the Device
OESIS Framework provides the device trust layer behind modern ZTNA and allows technology vendors to embed powerful endpoint security features directly into your applications. Our SDK offers APIs for device posture, vulnerability scanning, patch management, and malware detection - fully customizable, lightweight, and easy to integrate.
Device Compliance
Discover, detect, and enforce policy across 5,000+ applications to power device-trust decisions for ZTNA and NAC deployments continuously, not just at the login gate.
Patch Management
Automatically detect missing patches and remediate vulnerabilities across hundreds of third-party applications and operating systems, keeping access decisions based on current data.
Évaluation de la vulnérabilité
Identify, assess, and map over 98,500 unique CVEs and more than 175,000 vulnerability instances with 1000+ applications supported.
AppRemover
Désinstaller proprement les applications indésirables ou non conformes sans intervention de l'utilisateur.
Plates-formes prises en charge
Plateformes* | Version |
|---|---|
| Windows Desktop | 7, 8, 8.1, 10, 11 |
| Windows Server | 2008 R2, 2012, 2012 R2, 2016, 2019, 2022, 2025 |
| macOS | Yosemite (10.10), El Capitan (10.11), Sierra (10.12), High Sierra (10.13), Mojave (10.14), Catalina (10.15), Big Sur (11), Monterey (12), Ventura (13), Sonoma (14), Sequoia (15), Tahoe (26) |
| Linux | Fedora (41, 42, 43, 44), Red Hat Enterprise Linux (8, 9, 10), CentOS (7, 8), Ubuntu (22.04, 24.04, 25.04, 25.10, 26.04), AlmaLinux (8, 9, 10), Rocky Linux (8, 9, 10), Debian (12, 13), SUSE (15, 15.1, 15.2, 15.3, 15.4, 15.5, 15.6, 15.7, 16.0), Oracle Linux (8, 9, 10), Amazon Linux (2, 2023), Linux Mint (20, 21, 22, 22.1, 22.2, 22.3) |
D'autres distributions peuvent également être prises en charge (**)
24+ Years
Of Experience and Innovation
250 Million
Endpoints Worldwide
Confiance de la part de
Top 20
Tier-1 Vendors
Conformité assurée
Ready-to-Integrate
with Customizable SDK
4 Dozen+ Partners
Cross-Platform Coverage
(Windows, macOS, Linux)
OESIS Framework vs. Building in-house
Most teams underestimate what it takes to keep threat intelligence database accurate and current. Maintaining signature currency, tracking new CVEs, handling OS version changes, and managing real-world edge cases at scale is an ongoing operational commitment that consumes significant resources. OESIS Framework lifts that burden from your organization and gives you production-ready endpoint security capabilities.
Capacité | Cadre OESIS | Build In-House |
|---|---|---|
Time to Market | Days to Weeks | Six to twelve months |
Ongoing Research & Database Updates | CVEs, patch research, security controls and threat database are maintained continuously by OPSWAT | Dedicated internal team required |
Broad Coverage | 4 dozen+ partners contribute to a shared intelligence network running on 250 million endpoints worldwide | Solo team with limited resources and coverage |
Cross-Platform Support | Windows, macOS, and Linux from one SDK | Separate effort per OS |
Long-Term Maintenance | Continuous updates delivered as part of the SDK | Ongoing engineering cost |
Préparation à la conformité | Compliance-Ready Features Included | Built and validated internally |
Customer Support & Enablement | Dedicated support, plus training for your support team to build the skills needed to operate and troubleshoot | Support relies entirely on internal resources and expertise |
OPSWAT MetaDefender Threat Research & Intelligence (TRI)
Daily vulnerability intelligence at a glance — what changed today, what is being exploited, and what affects you.
Integrate the Way Your Architecture Already Works, with the Languages Your Team Already Uses
OESIS Framework can be easily integrated into endpoint agents built with virtually any programming language. Its straightforward JSON-in/JSON-out interface provides a language-independent integration model, making it easy to incorporate OESIS Framework capabilities into existing endpoint products.
Sample OESIS Framework projects are available in the following programming languages: C, C++, C#, Go, Python, Ruby, and Objective-C.
Bibliothèques C++
Notre bibliothèque partagée est une intégration native de C++, facilement adaptable à d'autres langages d'extrémité.
JSON
Protocole simple d'entrée et de sortie JSON pour l'invocation des fonctionnalités
Trusted by Industry Leaders
"Les produits d'OPSWATnous aident, surtout dans la mesure où ils nous permettent de nous intégrer en douceur dans notre plateforme technologique centrale existante".
"OPSWAT est un partenaire stratégique d'Ivanti... nous utilisons en fait le partenariat de OPSWATpour nous assurer que nous n'avons pas de code malveillant..."
"...avec la conformité des appareils et les contrôles de posture qu'OPSWAT fournit... tout est réuni pour fournir une sécurité holistique de bout en bout".
Built to Help You Meet Compliance
The OESIS Framework gives your product the device posture, patch, and vulnerability data needed to support compliance requirements. The SDK also provides evidence artifacts for 13+ controls for regulatory compliance frameworks.
Commencez en 3 étapes simples
Se connecter avec nos experts
Talk through your architecture and requirements with the OPSWAT team to scope the right modules for your product.
Intégrer de manière transparente
Integrate quickly and efficiently with our customizable endpoint security SDK
Enforce ZTNA & Attain Device Trust with Confidence
Put real-time device posture to work, making and continuously re-evaluating trust decisions across your users' devices.
Are you OESIS OK?
Verify that your application interoperates cleanly with the world's leading endpoint security and ZTNA products. The OESIS OK certification program verifies compatibility and security effectiveness for endpoint security vendors so partners and customers know your product is ready.
Documentation technique
Pour commencer
OESIS API Documentation
Soutien
Exploiter tout le potentiel de nos produits
FAQ
The OESIS Framework, part of OPSWAT OEM Solutions, is a cross-platform endpoint security software development framework enabling developers and technology vendors to efficiently integrate vulnerability and patch management, ZTNA and device posture check into their products with customizable SDK. With more than 24 years of continuous development, OESIS Framework is trusted by the Top 20 Tier-1 security vendors and a network of partners across 250 million endpoints globally.
ZTNA (Zero Trust Network Access) and NAC (Network Access Control) policies depend on understanding the real-time security state of a device before granting access, and continuously throughout the session.
The OESIS Framework goes far beyond simply determining whether security software is installed or a process is running. It provides deep security posture intelligence to determine whether endpoint protection is installed, running, properly configured, and actively protecting the device. For antimalware and EDR products, this can include checks such as real-time protection status, definition and engine updates, and detected threats. OESIS Framework also provides posture intelligence for other critical security controls, including firewalls, disk encryption, vulnerabilities, missing patches, and application security.
OPSWAT has built relationships with endpoint security vendors over more than two decades, including vendor-specific integrations and enhancements that enable OESIS Framework to accurately monitor security products beyond what is possible through generic operating-system checks.
With support for more than 4,000 applications across Windows, macOS, and Linux, OESIS gives ZTNA and NAC vendors a single framework for evaluating endpoint security posture across a broad security ecosystem.
The OESIS Framework offers four core endpoint security modules: Device Posture & Compliance, Vulnerability Detection, Patch Management, and AppRemover. Device Posture & Compliance provides the endpoint intelligence needed to deliver the Device Trust component of ZTNA, enabling solutions to continuously evaluate whether a device meets security requirements before and during access. Together, these modules provide deep endpoint security intelligence and control across Windows, macOS, and Linux, backed by continuously updated application, vulnerability, CVE, and patch intelligence.
The OESIS Framework supports Windows, macOS, and Linux, with coverage varying by module. Full details are available in the platform support charts in the technical documentation. View Support Charts and Documentation.
Most teams move from engagement to a working integration in days to weeks, using the sample projects and JSON in, JSON out protocol rather than building detection logic from scratch.
OESIS Framework can be easily integrated into endpoint agents built with virtually any programming language. Its straightforward JSON-in/JSON-out interface provides a language-independent integration model, making it easy to incorporate OESIS Framework capabilities into existing endpoint products.
Sample OESIS Framework projects are available in the following programming languages: C, C++, C#, Go, Python, Ruby, and Objective-C.
OESIS Framework is powered by OPSWAT MetaDefender Threat Research & Intelligence (TRI), providing continuously updated vulnerability and patch intelligence without requiring customers to build and maintain their own research infrastructure. OPSWAT continuously collects, analyzes, and enriches intelligence covering CVEs, Known Exploited Vulnerabilities (KEVs), zero-day and emerging vulnerabilities, EPSS exploit-likelihood data, vendor advisories, and patch information—and maps that intelligence to the applications and operating systems running on endpoints.
This enables your product to quickly identify vulnerable software, detect exposure to newly discovered and actively exploited threats, understand available remediation, and prioritize risk using continuously updated OPSWAT intelligence.
Explore OPSWAT MetaDefender TRI: Search Center - MetaDefender TRI
