MetaDefender Aether for Cloud

MetaDefender Aether for Cloud is a cloud-native advanced threat analysis service that provides dynamic, zero-day threat detection. Delivered as a scalable, API-driven solution, it is designed to integrate seamlessly with cloud applications, storage, and security workflows.

Core Technologies

• Adaptive Sandbox Analysis: At its core, Aether for Cloud uses a dynamic sandbox to detonate files in an isolated cloud environment. It performs deep behavioral analysis to identify malicious activities, evasive maneuvers, and indicators of compromise (IOCs) characteristic of advanced threats like ransomware and targeted attacks.

• Multiscanning and File-Based Vulnerability Analysis: The service leverages OPSWAT's Multiscanning technology, running files against 30+ anti-malware engines to maximize detection rates for known threats. It also identifies vulnerabilities within binaries and installers before they are deployed.

• Deep Content Disarm and Reconstruction (Deep CDR): To proactively neutralize potential threats, the platform can sanitize over 100 common file types, removing embedded objects like macros and scripts while reconstructing the files to preserve their original functionality.

Cloud-Native Architecture and API

• REST API: All functionalities are exposed through a comprehensive RESTful API, enabling developers and security teams to programmatically submit files, URLs, and hashes for analysis. The API provides detailed results in formats like JSON, facilitating easy integration into CI/CD pipelines, web applications, and SOAR platforms.

• Scalability and Performance: As a cloud-hosted service, MetaDefender Aether for Cloud offers high availability and elastic scalability to handle fluctuating loads, from a few files to millions of daily scans, without requiring infrastructure management.

• Threat Intelligence: The service is powered by OPSWAT's global threat intelligence network, aggregating data from a worldwide sensor network to provide real-time reputation and threat context for hashes, IPs, domains, and URLs.

Primary Use Cases

• Securing Cloud Applications: Integrating with web and mobile applications to scan user-generated content and file uploads in real time.

• Threat Intelligence and SOC Enrichment: Providing security operations teams with high-fidelity threat verdicts, detailed sandbox reports, and actionable IOCs to accelerate incident response.

• Automated Security Workflows: Integrating with SIEM, SOAR, and other security tools to automate the analysis of suspicious files and URLs discovered within an environment.