MetaDefender ICAP Cloud

Real-Time Threat Protection for
Cloud and File-Based Workloads

Part of MetaDefender Cloud, MetaDefender ICAP Cloud uses the ICAP protocol to scan and filter content as it enters and moves
through your network, including data exchanged between your cloud-hosted environments and external cloud services.

It detects and mitigates threats, while reducing the need for on-premises infrastructure.

  • The Most Broadly Compatible ICAP Server
  • No Infrastructure Changes Required
  • Plug-and-Play with Limitless Scalability Options
0 0 0 0 0 0 436 65 0 0 0 0 0 0 0 0 436 65 0 0

OPSWAT is Trusted by

0
Customers Worldwide
0
Technology Partners
0
Endpoint Cert. Members

Effortless Integration Across Network Security Devices

MetaDefender ICAP Cloud integrates seamlessly with existing ICAP-enabled devices such as load balancers, proxies, and web application
firewalls, making deployment straightforward and maintenance minimal.

It’s a perfect fit for industries like finance and healthcare, where secure data handling and compliance are critical.

Get Started with MetaDefender ICAP Cloud in
3 Simple Steps

1

Establish a Secure Connection

1

Establish a Secure Connection

Use the secure ICAP protocol to encrypt all traffic between your ICAP client and MetaDefender Cloud.

2

Add Your OPSWAT API Key

2

Add Your OPSWAT API Key

Configure your ICAP client to include the required header. This key lets MetaDefender ICAP Cloud recognize and authorize your requests.

3

Connect to the MetaDefender ICAP Cloud

3

Connect to the MetaDefender ICAP Cloud

Point your system to the MetaDefender ICAP Cloud address: icap.metadefender.com

After this, any files that pass through your device will be automatically scanned, sanitized, or blocked based on your security settings.

  • Establish a Secure Connection

    Use the secure ICAP protocol to encrypt all traffic between your ICAP client and MetaDefender Cloud.

  • Add Your OPSWAT API Key

    Configure your ICAP client to include the required header. This key lets MetaDefender ICAP Cloud recognize and authorize your requests.

  • Connect to the MetaDefender ICAP Cloud

    Point your system to the MetaDefender ICAP Cloud address: icap.metadefender.com

    After this, any files that pass through your device will be automatically scanned, sanitized, or blocked based on your security settings.

MetaDefender ICAP Cloud Benefits

Protect your network with a cloud-native ICAP security layer that delivers automated threat prevention, seamless integration,
and enterprise-grade resilience without added complexity or hardware.

Automated Threat Scanning for ICAP Traffic

Automatically inspect and block viruses, malware, and advanced threats in ICAP requests, ensuring files are secure before entering your network or applications.

Seamless ICAP Integration

Fully compatible with ICAP-enabled proxies, gateways, and applications, enabling smooth deployment without changes to existing infrastructure.

No-Code, Cloud-Native Deployment

Launch in minutes with a fully automated, cloud-native architecture that requires no coding, manual setup, or hardware management.

Real-Time, Scalable Processing

Analyze incoming ICAP requests instantly with elastic performance that adapts to high-volume workloads without slowing operations.

Advanced Multi-Layer Threat Defense

Powered by Metascan™ Multiscanning, Deep CDR™, and Adaptive Sandbox technologies to deliver proactive, prevention-focused protection.

Centralized Enterprise Protection

Extend consistent security across all ICAP-connected applications and environments through a unified, organization-wide security layer.

High Availability for Critical Environments

Built for enterprise reliability with multi-node redundancy, disaster recovery, and multi-region support for mission-critical uptime.

Market-Leading Technologies for
Advanced Threat Prevention & Protection

MetaDefender ICAP Cloud uses OPSWAT’s market-leading technologies to deliver high-level protection 

against malware, zero-day attacks, and data breaches.

Deep CDR

Stop Threats That Others Miss

  • Supports 200+ file formats
  • Recursively sanitize multi-level nested archives
  • Regenerate safe and usable files
100% Protection Score
from SE Labs
Metascan Multiscanning

More Engines Are Better Than One

  • Detect nearly 100% of malware
  • Scan simultaneously with 20+ leading AV engines
99.2% detection
with Max Engines package
Adaptive Sandbox

Detect Evasive Malware with Advanced Emulation-Based Sandboxing

  • Analyze files in a high-speed
  • Anti-evasion sandbox engine extracts IOCs
  • Identify zero-day threats
  • Enable deep malware classification via API or local integration
100x more resource efficient
than other sandboxes
Native and API Integrations available
and we’re working to help protect you from malware
Proactive DLP

Prevent Sensitive Data Loss

  • Utilize AI-powered models to locate and classify unstructured text into predefined categories
  • Automatically redact identified sensitive information like PII, PHI, PCI in 110+ file types
  • Support for Optical Character Recognition (OCR) in images
110+
Supported file types
OCR
image to text recognition
  • Deep CDR

    Stop Threats That Others Miss

    • Supports [supportedFileTypeCount] file formats
    • Recursively sanitize multi-level nested archives
    • Regenerate safe and usable files
    100% Protection Score
    from SE Labs
  • Metascan Multiscanning

    More Engines Are Better Than One

    • Detect nearly 100% of malware
    • Scan simultaneously with 20+ leading AV engines
    99.2% detection
    with Max Engines package
  • Adaptive Sandbox

    Detect Evasive Malware with Advanced Emulation-Based Sandboxing

    • Analyze files in a high-speed
    • Anti-evasion sandbox engine extracts IOCs
    • Identify zero-day threats
    • Enable deep malware classification via API or local integration
    100x more resource efficient
    than other sandboxes
    Native and API Integrations available
    and we’re working to help protect you from malware
  • Proactive DLP

    Prevent Sensitive Data Loss

    • Utilize AI-powered models to locate and classify unstructured text into predefined categories
    • Automatically redact identified sensitive information like PII, PHI, PCI in 110+ file types
    • Support for Optical Character Recognition (OCR) in images
    110+
    Supported file types
    OCR
    image to text recognition

Files Are Automatically
Intercepted, Scanned, and Secured

Step 1

Files Enter the System

Step 1

Files Enter the System

Automatically intercepted via ICAP protocol.

Step 2

Scanned in the Cloud

Step 2

Scanned in the Cloud

Multi-scanning engine checks for malware, threats, and sensitive content.

Step 3

Safe Files Delivered

Step 3

Safe Files Delivered

Only clean, compliant files reach your network.

Step 4

Threats Blocked & Reported

Step 4

Threats Blocked & Reported

Detailed reporting visibility.

  • Step 1

    Files Enter the System

    Automatically intercepted via ICAP protocol.

  • Step 2

    Scanned in the Cloud

    Multi-scanning engine checks for malware, threats, and sensitive content.

  • Step 3

    Safe Files Delivered

    Only clean, compliant files reach your network.

  • Step 4

    Threats Blocked & Reported

    Detailed reporting visibility.

End-to-End Threat Defense for
Files and Cloud Workloads

MetaDefender ICAP ensures your network is secure, and your organization is compliant without interfering in the way your business works.

File Upload & Transfer Protection

Files uploaded to your cloud storage or transferred across systems are automatically scanned for malware and vulnerabilities. Scanning runs seamlessly in the background, so your teams can stay focused without worrying about file threats.

Securing Web Traffic

MetaDefender ICAP Cloud integrates with your existing web application firewalls, securing all traffic happening inside your network.

Regulatory Compliance Enforcement

MetaDefender ICAP Cloud contributes to compliance enforcement through Proactive DLP, helping you meet regulatory requirements and prevent data exposures, without manually reviewing all data leaving your organization.

Fully Managed. Secure.
Universally Compatible.

MetaDefender ICAP Cloud works for virtually any industry, but it’s especially effective for customers in highly regulated organizations, handling large volumes of data.

Universal Compatibility

Works with virtually any ICAP-enabled infrastructure; it can be adapted to work with legacy ICAP-based workflows.

Vendor Certified

MetaDefender ICAP Cloud is the only NGINX-certified dynamic module for advanced file security.

Adaptive Filtering

For seamless data inspection and control across cloud workflows and legacy applications.

Data Privacy & Regional Control

Keeps sensitive data in your chosen regions to maintain regulatory compliance.

Fully Managed Service

OPSWAT manages updates, engines, and infrastructure, reducing operational overhead.

Multi-Layered Security Defense

Integrates across multiple security layers for advanced threat protection.

Cloud-Native Scalability

Modern architecture scales to enterprise needs while maintaining control and compliance.

Enterprise-Grade Performance & Global Coverage

MetaDefender ICAP Cloud operates with MetaDefender Cloud to provide consistent protection, scalability, and regional flexibility for enterprise environments. Designed for low latency and high throughput, it ensures rapid scanning performance and continuous availability across multiple regions worldwide.

Availability Ahead of SLA

Up to 99.9% availability in Enterprise tier.

Low‑Latency & Fast Scanning

90% of files processed under 8 seconds (Enterprise tier).

Disaster Recovery & Failover

RTO as low as 4 hours for enterprise licensing; global redundancy and automatic failover.

Global Footprint & Regional Choice

Multiple data‑regions (US, Europe, Canada, India, Singapore, Japan, Australia) plus decision support for region‑specific deployments.

Leading Financial Services Provider Secures Their Digital Platform with MetaDefender Cloud

How Static Scanning, File Sanitization, and Dynamic Threat Analysis Stop File-Borne Threats

ABOUT

A global financial services leader, serving over 40 million accounts and offering banking, investment, and advisory services, needed a reliable way to secure large volumes of AWS-hosted customer-uploaded files.

Industry: Financial services 
Location:
US-based, global presence
Employees:
10,000+

USE CASE

By implementing MetaDefender Cloud with its Prevention and Adaptive Sandbox APIs, the organization enhanced malware prevention, protected sensitive and PII data, and strengthened the security of their digital platform.

PRODUCTS USED:

  • Purpose-Built for Highly Regulated Industries

    Like all other modules and technologies on MetaDefender Cloud, MetaDefender ICAP Cloud is designed with security, compliance, and governance at its core.

    OPSWAT helps organizations stay compliant with: ISO 27001, SOC 2 Type II, ISO 9001, HIPAA, PCI DSS, GDPR, and NIST.

    Frequently Asked Questions on Security, Scalability, and Compliance

    MetaDefender ICAP Cloud is OPSWAT’s cloud-based ICAP threat-prevention service for securing file uploads and web traffic without on-premises infrastructure. Delivered as SaaS and powered by MetaDefender Cloud, it integrates with ICAP-enabled devices (load balancers, WAFs, proxies, MFT systems, ingress controllers) to inspect files before they reach critical systems.

    MetaDefender ICAP Cloud allows files to be automatically intercepted and scanned before reaching your network, using multiscanning for advanced malware detection, and content sanitization for Zero-Days. These processes happen in the background, without affecting workflows.

    Yes. MetaDefender ICAP Cloud is designed for environments handling high data volumes, with low-latency scanning and enterprise-grade availability.

    MetaDefender ICAP Cloud ensures data privacy by performing private, temporary file scanning. No files are permanently stored, and results are only accessible to the file owner. It supports regional deployments for compliance and with Proactive DLP, it can detect and redact sensitive or personal data as needed.

    As part of MetaDefender Cloud, MetaDefender ICAP Cloud aligns with major security and privacy standards, including ISO 27001, SOC 2 Type II, ISO 9001, HIPAA, PCI DSS, GDPR, and NIST, helping customers meet their compliance requirements with confidence.

    Connect ICAP Cloud for Scalable, Secure File Analysis

    Fill out the form and our security experts will contact you within 1 business day.
    Trusted by 2,000+ businesses worldwide.