Powerful Endpoint Security Software Development Platform
The OESIS Framework is a cross-platform, modular framework that enables technology vendors to integrate ZTNA (Zero Trust Network Access), device compliance, vulnerability assessment, patch management, and other advanced endpoint protection capabilities into their products, quickly and efficiently.
- Ready-to-Integrate
- Faster Time to Market
- Customizable SDK
OPSWAT Is Trusted By
150+
50+
15
Move Faster with Our Industry-Leading Endpoint Security SDK
The OESIS Framework gives your engineering team a ready-to-integrate endpoint security SDK that empowers your product across Windows, macOS, and Linux.
Modular Framework
Integrate only the functions you need today, and add more as your product grows, no build-from-scratch burden required.
Reduce Development Time
Pre-built modules and streamlined APIs let you accelerate time-to-market without sacrificing quality or protection.
Cut Development Costs
Minimize resource investment by leveraging a ready-to-integrate SDK, reducing the need for in-house security development.
Reduce Maintenance & Support Costs
Ongoing updates, threat intelligence, and compliance-ready features lower your long-term maintenance burden and support overhead.
Continuous Threat & CVE Updates
OPSWAT maintains the underlying detection data, so your product stays current without dedicating engineering time to research.
Embed Proven Expertise
Integrate a framework hardened by decades of OPSWAT experience and innovation, trusted by leading technology vendors worldwide.
Zero Trust Starts with Knowing the Device
OESIS Framework provides the device trust layer behind modern ZTNA and allows technology vendors to embed powerful endpoint security features directly into your applications. Our SDK offers APIs for device posture, vulnerability scanning, patch management, and malware detection - fully customizable, lightweight, and easy to integrate.
Device Compliance
Discover, detect, and enforce policy across 5,000+ applications to power device-trust decisions for ZTNA and NAC deployments continuously, not just at the login gate.
Patch Management
Automatically detect missing patches and remediate vulnerabilities across hundreds of third-party applications and operating systems, keeping access decisions based on current data.
Vulnerability Assessment
Identify, assess, and map over 98,500 unique CVEs and more than 175,000 vulnerability instances with 1000+ applications supported.
AppRemover
Cleanly uninstall unwanted or out of compliance applications without user intervention.
Supported Platforms
Platforms* | Version |
|---|---|
| Windows Desktop | 7, 8, 8.1, 10, 11 |
| Windows Server | 2008 R2, 2012, 2012 R2, 2016, 2019, 2022, 2025 |
| macOS | Yosemite (10.10), El Capitan (10.11), Sierra (10.12), High Sierra (10.13), Mojave (10.14), Catalina (10.15), Big Sur (11), Monterey (12), Ventura (13), Sonoma (14), Sequoia (15), Tahoe (26) |
| Linux | Fedora (41, 42, 43, 44), Red Hat Enterprise Linux (8, 9, 10), CentOS (7, 8), Ubuntu (22.04, 24.04, 25.04, 25.10, 26.04), AlmaLinux (8, 9, 10), Rocky Linux (8, 9, 10), Debian (12, 13), SUSE (15, 15.1, 15.2, 15.3, 15.4, 15.5, 15.6, 15.7, 16.0), Oracle Linux (8, 9, 10), Amazon Linux (2, 2023), Linux Mint (20, 21, 22, 22.1, 22.2, 22.3) |
Other distributions may also be supported (**)
24+ Years
Of Experience and Innovation
250 Million
Endpoints Worldwide
Trusted By
Top 20
Tier-1 Vendors
Compliance Ready
Ready-to-Integrate
with Customizable SDK
4 Dozen+ Partners
Cross-Platform Coverage
(Windows, macOS, Linux)
OESIS Framework vs. Building in-house
Most teams underestimate what it takes to keep threat intelligence database accurate and current. Maintaining signature currency, tracking new CVEs, handling OS version changes, and managing real-world edge cases at scale is an ongoing operational commitment that consumes significant resources. OESIS Framework lifts that burden from your organization and gives you production-ready endpoint security capabilities.
Capability | OESIS Framework | Build In-House |
|---|---|---|
Time to Market | Days to Weeks | Six to twelve months |
Ongoing Research & Database Updates | CVEs, patch research, security controls and threat database are maintained continuously by OPSWAT | Dedicated internal team required |
Broad Coverage | 4 dozen+ partners contribute to a shared intelligence network running on 250 million endpoints worldwide | Solo team with limited resources and coverage |
Cross-Platform Support | Windows, macOS, and Linux from one SDK | Separate effort per OS |
Long-Term Maintenance | Continuous updates delivered as part of the SDK | Ongoing engineering cost |
Compliance Readiness | Compliance-Ready Features Included | Built and validated internally |
Customer Support & Enablement | Dedicated support, plus training for your support team to build the skills needed to operate and troubleshoot | Support relies entirely on internal resources and expertise |
OPSWAT MetaDefender Threat Research & Intelligence (TRI)
Daily vulnerability intelligence at a glance — what changed today, what is being exploited, and what affects you.
Integrate the Way Your Architecture Already Works, with the Languages Your Team Already Uses
OESIS Framework can be easily integrated into endpoint agents built with virtually any programming language. Its straightforward JSON-in/JSON-out interface provides a language-independent integration model, making it easy to incorporate OESIS Framework capabilities into existing endpoint products.
Sample OESIS Framework projects are available in the following programming languages: C, C++, C#, Go, Python, Ruby, and Objective-C.
C++ Libraries
Our shared library is a native C++ integration, easily adaptable to other endpoint languages.
JSON
Simple JSON in, JSON out protocol for invoking the functionalities
Trusted by Industry Leaders
“OPSWAT’s products help us, mostly in a way that it allowed us for a smooth, seamless integration into our existing central tech platform.”
“OPSWAT is a strategic partner of Ivanti... we actually use OPSWAT’s partnership to ensure we don't have any malicious code...”
"...with the device compliance and posture checks which OPSWAT provides... brings it all together to provide holistic end-to-end security."
Built to Help You Meet Compliance
The OESIS Framework gives your product the device posture, patch, and vulnerability data needed to support compliance requirements. The SDK also provides evidence artifacts for 13+ controls for regulatory compliance frameworks.
Get Started in 3 Simple Steps
Connect with Our Experts
Talk through your architecture and requirements with the OPSWAT team to scope the right modules for your product.
Integrate Seamlessly
Integrate quickly and efficiently with our customizable endpoint security SDK
Enforce ZTNA & Attain Device Trust with Confidence
Put real-time device posture to work, making and continuously re-evaluating trust decisions across your users' devices.
Are you OESIS OK?
Verify that your application interoperates cleanly with the world's leading endpoint security and ZTNA products. The OESIS OK certification program verifies compatibility and security effectiveness for endpoint security vendors so partners and customers know your product is ready.
Technical Documentation
Getting Started
OESIS API Documentation
Support
Unlock the Full Potential of Our Products
FAQs
The OESIS Framework, part of OPSWAT OEM Solutions, is a cross-platform endpoint security software development framework enabling developers and technology vendors to efficiently integrate vulnerability and patch management, ZTNA and device posture check into their products with customizable SDK. With more than 24 years of continuous development, OESIS Framework is trusted by the Top 20 Tier-1 security vendors and a network of partners across 250 million endpoints globally.
ZTNA (Zero Trust Network Access) and NAC (Network Access Control) policies depend on understanding the real-time security state of a device before granting access, and continuously throughout the session.
The OESIS Framework goes far beyond simply determining whether security software is installed or a process is running. It provides deep security posture intelligence to determine whether endpoint protection is installed, running, properly configured, and actively protecting the device. For antimalware and EDR products, this can include checks such as real-time protection status, definition and engine updates, and detected threats. OESIS Framework also provides posture intelligence for other critical security controls, including firewalls, disk encryption, vulnerabilities, missing patches, and application security.
OPSWAT has built relationships with endpoint security vendors over more than two decades, including vendor-specific integrations and enhancements that enable OESIS Framework to accurately monitor security products beyond what is possible through generic operating-system checks.
With support for more than 4,000 applications across Windows, macOS, and Linux, OESIS gives ZTNA and NAC vendors a single framework for evaluating endpoint security posture across a broad security ecosystem.
The OESIS Framework offers four core endpoint security modules: Device Posture & Compliance, Vulnerability Detection, Patch Management, and AppRemover. Device Posture & Compliance provides the endpoint intelligence needed to deliver the Device Trust component of ZTNA, enabling solutions to continuously evaluate whether a device meets security requirements before and during access. Together, these modules provide deep endpoint security intelligence and control across Windows, macOS, and Linux, backed by continuously updated application, vulnerability, CVE, and patch intelligence.
The OESIS Framework supports Windows, macOS, and Linux, with coverage varying by module. Full details are available in the platform support charts in the technical documentation. View Support Charts and Documentation.
Most teams move from engagement to a working integration in days to weeks, using the sample projects and JSON in, JSON out protocol rather than building detection logic from scratch.
OESIS Framework can be easily integrated into endpoint agents built with virtually any programming language. Its straightforward JSON-in/JSON-out interface provides a language-independent integration model, making it easy to incorporate OESIS Framework capabilities into existing endpoint products.
Sample OESIS Framework projects are available in the following programming languages: C, C++, C#, Go, Python, Ruby, and Objective-C.
OESIS Framework is powered by OPSWAT MetaDefender Threat Research & Intelligence (TRI), providing continuously updated vulnerability and patch intelligence without requiring customers to build and maintain their own research infrastructure. OPSWAT continuously collects, analyzes, and enriches intelligence covering CVEs, Known Exploited Vulnerabilities (KEVs), zero-day and emerging vulnerabilities, EPSS exploit-likelihood data, vendor advisories, and patch information—and maps that intelligence to the applications and operating systems running on endpoints.
This enables your product to quickly identify vulnerable software, detect exposure to newly discovered and actively exploited threats, understand available remediation, and prioritize risk using continuously updated OPSWAT intelligence.
Explore OPSWAT MetaDefender TRI: Search Center - MetaDefender TRI
