MetaDefender Core™ v5.17.0 Release

MetaDefender Core introduces OPSWAT Alin, an AI-predictive threat detection engine that works alongside Metascan™ Multiscanning to deliver deeper and more accurate threat detection. Powered by a domain-trained machine learning model, OPSWAT Alin analyzes file structures, entropy patterns, and semantic relationships to identify potentially harmful files earlier and with greater precision.

Administrators will see a cleaner layout with updated visuals and a more streamlined flow that creates a smoother entry point into the product and sets the foundation for future usability improvements.

The Processing History view offers clearer visibility into file events, timestamps, outcomes, and processing steps. This helps teams understand what happened to each file and speeds up investigations while supporting validation for auditing and compliance.

The updated interface delivers a detailed breakdown of each engine's verdict, including reasons and severity. It also provides improved navigation for nested archives. Users can see which engines detected which indicators and understand why a file received its final verdict, so triage becomes faster.

MetaDefender Core now combines part files automatically, extracts their contents, and scans all child files so teams can submit an archive in parts through the API without manual recombination. This simplifies automation and strengthens coverage for a format frequently abused by attackers who rely on archive-based delivery methods such as archive file concatenation.

A new filter highlights archives that could not be extracted during processing. This helps administrators quickly identify potential corruption, legacy compression approaches, or evasion attempts that require follow-up.

Organizations with strict confidentiality or regulatory requirements can export a support package and share log information with OPSWAT Support in a controlled and privacy-conscious way. This enables faster issue resolution while preserving data governance.

Alerts for malicious detections are consolidated into a single summary email which reduces inbox noise and prevents large automated workflows from overwhelming administrators, so focus stays on critical issues.

Environments that use Network Interface Card teaming on Windows Server benefit from improved stability because MetaDefender Core no longer requires license reactivation when interfaces change or fail over. This reduces administrative effort in high availability network architectures.