The MetaDefender Endpoint Security SDK by OPSWAT, also known as the OESIS Framework, is a cross-platform software development kit for Windows, macOS, and Linux. It is designed for developers to integrate endpoint security and management functions into software products, providing C++ APIs and a command-line interface to programmatically perform device posture assessment, check application compliance, and manage operating system configurations. The framework's architecture separates its core engine from a data package, allowing for data updates in both online and air-gapped environments without requiring full engine upgrades. This enables a host application to query the real-time status of security agents and enforce policies to establish device trust.
The SDK's technical capabilities include detecting, configuring, and removing installed applications, as well as evaluating the presence and operational state of security software. For vulnerability and patch management, it uses CVE data to assess systems and facilitates patching for both the operating system and third-party software, managing post-upgrade actions like system reboots. Threat detection is addressed through multi-scanning with multiple anti-malware engines, sandboxing, and Content Disarm and Reconstruction (CDR). The framework also provides functions to scan running processes, manage removable media access, and execute automated remediations such as updating definition files or enabling real-time protection to maintain policy adherence.
