The OESIS Framework by OPSWAT, also known as the MetaDefender Endpoint Security SDK, is a cross-platform, modular software development kit (SDK) designed for developers to integrate endpoint security capabilities into third-party products. It utilizes native C++ shared libraries and a JSON protocol to provide APIs and modules for Windows, macOS, and Linux operating systems. The framework's primary technical functions include device posture assessment, vulnerability scanning, patch management, malware detection, application management, and removable media control, enabling applications to perform security and compliance checks on endpoints.
To assess device posture, the framework identifies and manages a wide range of third-party applications, including security software like firewalls, VPN clients, and data loss prevention agents, by evaluating their installation and running states. For vulnerability management, it analyzes file hashes to identify software products and assesses their patch levels against known CVEs using both localized offline databases and cloud-based repositories, returning data such as CVE identifiers and CVSS scores. The SDK facilitates remediation by providing functions to start, stop, uninstall, or update applications, and to manage pre- and post-installation requirements to enforce security policies and ensure device compliance.
