What OPSWAT does

OPSWAT Inc. is a Tampa, Florida-based private cybersecurity company founded in 2002 that builds the MetaDefender Platform — a prevention-first, AI-augmented security suite designed to protect critical IT, OT, and air-gapped environments from file-borne, device-borne, and network-borne threats. The platform combines multiple proprietary technologies, including Deep CDR (Content Disarm and Reconstruction), Metascan Multiscanning with 30+ anti-malware engines, Predictive Alin AI for pre-execution threat scoring, the AI-native MetaDefender Aether decision engine, Proactive DLP for sensitive data redaction, Adaptive Sandbox, hardware-enforced data diodes (NetWall), and a portfolio of appliances (Kiosk, Drive, Industrial Firewall) for air-gapped and removable-media workflows. Acquisitions of FileScan.IO (2022), CIP Cyber (2024), InQuest (2024), and Fend Incorporated (2024) have added malware analysis, federal network detection, and data diode capabilities, while integrations with Emerson Ovation, NetApp ONTAP, F5, AWS, and SentinelOne extend reach into OT, storage, and cloud ecosystems.

OPSWAT serves a customer base of more than 2,100 organizations globally across primary verticals of energy and utilities, government and defense, financial services, and manufacturing, with additional exposure to nuclear, transportation, and healthcare. The platform is pre-validated against demanding regulatory frameworks including NIST 800-53, CMMC 2.0, NERC CIP, Common Criteria, DISA STIG, ISO 27001, and SOC 2, which positions it for regulated and high-assurance deployments. Named customers include Hitachi Energy, Genesis Energy, Indeed, Zendesk, a Canadian government agency, and a global logistics software company, with usage patterns spanning file upload security, supply chain protection, OT perimeter defense, and cross-domain data transfer.

The business model is primarily a recurring software subscription on the MetaDefender Platform — sold in engine-tier packages (4 Engines to Max Engines), with deployment options across on-premises, cloud, hybrid, and containerized environments — supplemented by hardware appliance sales (Kiosk, Drive, data diodes, Industrial Firewall), tiered premium support, professional services, and the OPSWAT Academy training and certification program. Distribution combines enterprise field sales, a certified global channel partner program (notably a global reseller agreement with Emerson), OEM integrations via the OESIS Framework, ICAP protocol integrations with nine major infrastructure vendors, and 17+ regional offices across the Americas, Europe, APAC, and the Middle East. OPSWAT reports 25%+ YoY ARR growth in 2025, 1,000+ employees globally, and 275K+ certified professionals through OPSWAT Academy.

Name

OPSWAT

Legal name

OPSWAT Inc.

Website

https://opswat.com

Company type

Private

Founded year

2002

Operating status

Operating

Headcount range

501–1,000 employees

Short description

OPSWAT builds the MetaDefender Platform, a prevention-first cybersecurity suite using Deep CDR, multi-engine scanning, and AI-native threat detection to protect files, devices, and data flows in critical IT and OT environments for 2,100+ energy, government, financial, and industrial customers worldwide.

Ownership category

akta.pro rank

Product category

Critical Infrastructure Cybersecurity

NAICS

Computer Systems Design and Related Services (5415), Security Systems Services (except Locksmiths) (561621)

SIC

Computer Communications Equipment (3576)

akta.pro primary industry

Secure Industrial Gateways, Data Diodes & Unidirectional Security (HDADAJAM)

akta.pro secondary industries

Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Email & Collaboration Threat Detection/Response (ICR/CTDR) (HDADAKAI)

Keywords

• Critical infrastructure cybersecurity
• OT and ICS threat prevention
• File security and sanitization
• Content disarm and reconstruction
• Zero-trust network access

Headquarters

HQ city

Tampa

HQ country

United States

HQ region

North America

Offices17 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Supply Chain

Revenue model

1. Software Licenses and Subscriptions: Annual subscription and perpetual license model for MetaDefender Platform products. Flexible deployment options including on-premises, cloud, and hybrid configurations. Tiered licensing based on engines, features, and capacity.
2. Hardware Sales: Sale of hardware appliances including MetaDefender Kiosk, MetaDefender Drive, MetaDefender NetWall data diodes, and industrial firewall products. Hardware supply chain brought in-house as of 2025.
3. Premium Support Services: Tiered support offerings including 24x7x365 premium support with dedicated phone lines, premium support customers have dedicated support phone lines, standard support through portal and community forums.
4. Training and Certification: OPSWAT Academy provides professional certifications in Critical Infrastructure Protection (CIP). On-site bootcamps, virtual training, partner programs, and scholarship programs. CPE credits available through ISC2.
5. Professional Services: Technical account management, implementation services, and managed My OPSWAT services for enterprise deployments.

Pricing tiers

Go-to-market motion3 records

Distribution channels6 records

Marketing channels8 records

Core offering

OPSWAT builds and sells the MetaDefender Platform, an AI-powered cybersecurity suite that combines Deep Content Disarm and Reconstruction, multi-engine malware scanning, sandboxing, AI-driven threat prediction, vulnerability assessment, data loss prevention, and hardware-enforced data diodes to prevent file-borne, device-borne, and network-borne threats across IT, OT, and air-gapped environments. The platform is delivered as on-premises, cloud, hybrid, container, and hardware-appliance form factors to critical infrastructure operators in energy, government/defense, financial services, and manufacturing.

Product overview

OPSWAT's product portfolio centers on the MetaDefender Platform, a unified AI-powered cybersecurity solution that secures files, devices, and data transfers across IT, OT, and cross-domain environments. The platform employs a modular architecture combining core scanning engines (MetaDefender Core, Cloud, ICAP Server) with specialized add-on modules for storage security, email security, endpoint protection, network detection and response, OT/ICS security, and data diode/gateway solutions. Key technologies embedded across the platform include Deep CDR Technology, Metascan Multiscanning with 30+ AV engines, Predictive Alin AI for threat prediction, Adaptive Sandbox, and AI Content Inspector. The portfolio extends through acquired technologies including InQuest (threat intelligence/Deep File Inspection) and FileScan.IO (malware analysis), plus OEM solutions via the OESIS Framework. All products are managed through My OPSWAT Central Management and My OPSWAT Portal, with deployment options spanning on-premises, cloud, container, and hardware appliances. The company serves critical infrastructure sectors including energy, government/defense, manufacturing, financial services, and utilities with compliance-validated solutions.

Differentiator

Problem solved

Functional benefit

Products and services

• MetaDefender Core Central scanning engine for integration with existing security architectures via REST API. Supports file security, multiscanning, Deep CDR, vulnerability assessment, and proactive DLP in on-premises or air-gapped environments. For enterprises integrating OPSWAT into existing security stacks.
• MetaDefender Cloud Cloud-native platform for file-borne threat prevention with 24/7 availability, no infrastructure maintenance required, and full MetaDefender functionality available via REST API and hash database. For organizations preferring SaaS-based deployment.
• MetaDefender ICAP Server Integration solution for web applications via WAF, Load Balancer, or API Gateway, and NAS storage. Uses ICAP protocol to offload uploaded or downloaded files for threat analysis and prevention with native support for F5, VMware/Broadcom, Microsoft, HelpSystems, Dell EMC, Axway, Squid, Citrix, and A10.
• MetaDefender Storage Security Security solution for cloud storage and on-premises storage environments that scans and sanitizes files, preventing malware and data leakage without disrupting workflows. Integrates with NetApp ONTAP across on-premises, cloud, and hybrid storage.
• MetaDefender Email Gateway Security Email security solution for Microsoft Exchange Server environments that neutralizes weaponized attachments and embedded threats before they reach the inbox using Deep CDR and Metascan multiscanning.
• MetaDefender Cloud Email Security Cloud-based email security solution providing advanced threat prevention for email pipelines with multi-layered scanning and sanitization capabilities. For organizations using cloud mail platforms.
• MetaDefender Endpoint Endpoint security solution that assesses and enforces device posture before granting network access. Supports vulnerability detection for over 20,000 applications and 1 million files. For IT teams managing endpoint compliance.
• MetaDefender Network Access Control (NAC) Zero-trust network access control solution that verifies endpoint compliance across managed and unmanaged devices before granting network access. Built on the OESIS Framework.
• MetaDefender Kiosk Hardware solution for processing files entering secure networks on portable media devices. Scans and sanitizes files from removable media before they enter secured networks in air-gapped environments. For nuclear, defense, and critical-infrastructure sites.
• MetaDefender Media Firewall Network security device for controlling what enters critical environments through USB drives, portable devices, and transient assets with kiosk-based scanning and compliance enforcement at the perimeter.
• MetaDefender Drive Portable device for verifying the security of portable devices before facility and network access. Inspects devices for threats and compliance status. For security teams conducting device checks at facility entry points.
• MetaDefender OT Security Security solution specifically designed for operational technology and industrial control system environments. Protects critical infrastructure from cyber threats with specialized OT-focused features including patch management into Emerson Ovation.
• MetaDefender OT Access Secure access solution for OT environments enabling controlled and monitored access to operational technology networks with zero-trust principles.
• MetaDefender Industrial Firewall Ruggedized industrial firewall designed to meet stringent demands of mission-critical infrastructure with intrusion prevention capabilities for OT environments.
• MetaDefender Aether AI-native decision engine for rapid zero-day threat detection at network perimeters. Processes files through four AI-powered layers: threat reputation, dynamic analysis, ML-driven threat scoring, and AI-powered threat hunting, providing unified confidence-scored verdicts and SIEM/SOAR integration.
• MetaDefender Managed File Transfer (MFT) Zero-trust managed file transfer solution protecting organizations from vulnerable applications and malicious files during cross-network transfers with built-in threat prevention, policy enforcement, and full audit trails. Named a G2 Leader in Managed File Transfer.
• MetaDefender NDR Network Detection and Response platform providing traffic inspection up to 100 gigabits per second, deep packet and file inspection, and retro hunting for retrospective threat analysis. Pre-validated against DISA STIG for federal agency deployments; integrates InQuest-acquired Deep File Inspection and RetroHunting technologies.
• MetaDefender Optical Diode Hardware-enforced data diode solution enabling secure, unidirectional data transfer between IT and OT networks for compliance-ready OT-to-IT log transfer.
• MetaDefender Unidirectional Security Gateway (USG) Hardware security gateway enforcing unidirectional data transfer to protect air-gapped and segmented networks with zero risk of reverse data flow.
• MetaDefender Bilateral Security Gateway (BSG) Security gateway solution enabling controlled bidirectional communications with advanced inspection and threat prevention capabilities between IT and OT networks.
• MetaDefender Diode X Advanced data diode product for high-performance unidirectional data transfer in critical infrastructure environments, built from the acquired Fend Incorporated technology base.
• MetaDefender Transfer Guard Transfer management solution for secure file transfers across security boundaries with inspection and sanitization capabilities for cross-domain and IT/OT environments.
• My OPSWAT Central Management Centralized management console providing single-pane-of-glass control for managing OPSWAT peripheral media protection products, inventory, and secure endpoint access across the organization.
• MetaDefender for Salesforce Security solution specifically designed for Salesforce CRM platforms, protecting file uploads and attachments within the Salesforce environment from malware and malicious content.
• OESIS Framework OEM solution providing endpoint security certification and verification framework for security vendors and IT teams to verify endpoint compliance across managed and unmanaged devices. Powers SentinelOne and other OEM endpoint integrations.
• MetaDefender Software Supply Chain Software supply chain security solution that identifies known vulnerabilities, validates licenses, and generates SBOM for open-source software, third-party dependencies, and containers. Supports 10+ programming languages and 5 million third-party libraries.
• MetaDefender Threat Intelligence Threat intelligence platform that detects known malicious domains and IP addresses in documents, enables real-time blocking based on IOCs, and aggregates data from hundreds of sources across 50B+ artifacts for high-quality threat detection.
• OPSWAT Academy Training and Certification Professional training and certification programs in Critical Infrastructure Protection (CIP) including on-site bootcamps (such as MetaDefender Platform Bootcamp), virtual training, partner programs, scholarship programs, and CPE credits via ISC2. For security professionals building expertise on MetaDefender products.
• MetaDefender InSights Threat Intelligence Threat intelligence add-on within the MetaDefender NDR ecosystem that correlates global IOCs, IPs, URLs, and file reputation across 50B+ artifacts to enrich downstream analysis and accelerate detection.
• MetaDefender InSights C2 Command-and-control detection add-on within the MetaDefender NDR ecosystem for identifying C2 communications and network threats in traffic flows.
• MetaDefender InSights OSINT Open-source intelligence add-on within the MetaDefender NDR ecosystem for threat detection using publicly available information sources.

Quantifiable outcome

• 99.9% zero-day detection efficacy with MetaDefender Aether
• +5 more outcomes

Named customers8 records

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration14 records

AI capability10 records

Feature10 records

Partnerships

Eight partnerships are on record, tiered core and minor.

• EmersoncoreChannel Partner/ Reseller/ Distributor · 21 April 2026Global reseller agreement to deliver OPSWAT's cybersecurity solutions to Emerson's power and water industry customers. First project integrates OPSWAT's patch management technology including MetaDefender Endpoint and My OPSWAT Central Management On-Premises into Emerson's Ovation Automation Platform deployed at over 800 sites globally.
• IconsysminorImplementation/ SI/ Consulting Partner · 25 March 2026Iconsys, a Telford-based automation firm, partnered with OPSWAT and Rhelative to deliver Guard cybersecurity service for manufacturers protecting OT and production facilities. Iconsys plans to recruit additional specialists over next 12 months.
• F5coreTechnology or Integration · 10 December 2025Strategic technology partner in F5's Application Delivery and Security Platform (ADSP) Partner Program as Select-tier partner. Provides validated interoperable solutions covering secure file traffic management for unified multicloud security ecosystem.
• NetAppcoreTechnology or Integration · 12 November 2025Integration of MetaDefender Storage Security with NetApp ONTAP to enhance file security across on-premises, cloud, and hybrid storage environments. Provides multi-layered security including multiscanning, CDR, and DLP without disrupting workflows.
• SANS InstitutecoreStrategic or Co-development Partner · 23 January 2025OPSWAT sponsored the 2025 SANS Institute ICS/OT Cybersecurity report based on survey of 330+ security professionals. The State of ICS/OT Cybersecurity 2025 report found 21.5% of organizations experienced cyber incidents affecting ICS/OT systems.
• Fend IncorporatedcoreStrategic or Co-development Partner · 19 December 2024Acquisition of Fend Incorporated in December 2024 to expand cybersecurity offerings particularly in data diodes and unidirectional gateway solutions. Fend, based in Arlington VA, provides solutions protecting connected equipment from cyberattacks and ransomware for energy, water, manufacturing, and government sectors.
• InQuestcoreStrategic or Co-development Partner · 7 August 2024Acquisition of InQuest in August 2024 to strengthen federal cybersecurity offerings. InQuest provides Deep File Inspection and RetroHunting technologies for threat intelligence and network detection capabilities protecting critical networks including Department of Defense.
• FileScan.IOcoreStrategic or Co-development Partner · 27 October 2022Acquisition of all assets of FileScan.IO malware analysis platform in October 2022 to enhance cybersecurity solutions and develop more comprehensive malware analysis platform while continuing free malware analysis services.

Scale indicators14 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• Votiro: Votiro is the most direct competitor to OPSWAT's Deep CDR technology, offering Content Disarm & Reconstruction for file-borne threat prevention. Both companies compete head-to-head in file sanitization for enterprise and government customers, making Votiro OPSWAT's closest technology peer.
• ReversingLabs: ReversingLabs provides file-based threat analysis, malware classification, and software supply chain security that overlap directly with MetaDefender's multiscanning, threat intelligence, and vulnerability assessment capabilities. Both serve enterprise security teams needing deep file inspection.
• Claroty: Claroty is a leading OT/ICS cybersecurity platform focused on critical infrastructure asset discovery, vulnerability management, and network segmentation. It competes with OPSWAT's MetaDefender OT Security, Industrial Firewall, and OT Access products in the same critical-infrastructure verticals.
• Dragos: Dragos specializes in industrial cybersecurity for OT/ICS environments, with deep incident-response and asset-monitoring capabilities. It is one of OPSWAT's primary competitors in protecting critical infrastructure (energy, water, manufacturing) from ransomware and ICS-targeted threats.
• Nozomi Networks: Nozomi Networks provides OT and IoT cybersecurity including network monitoring and threat detection for critical infrastructure. Like OPSWAT, it sells primarily to energy, utilities, and manufacturing customers needing visibility and protection for operational technology.

Broad incumbents

• Tenable: Tenable is a broader cybersecurity incumbent whose file-based and OT vulnerability-assessment capabilities overlap with OPSWAT's File-Based Vulnerability Assessment and SBOM modules. Both serve federal/compliance buyers, but Tenable's Nessus-based exposure platform spans much wider IT use cases.
• CrowdStrike: CrowdStrike is a leading endpoint security and XDR incumbent whose Falcon platform increasingly bundles file-prevention and CDR-style capabilities that intersect with MetaDefender. OPSWAT also has an OEM partnership with SentinelOne, positioning it both against and alongside large endpoint players.
• Palo Alto Networks: Palo Alto Networks is a broad cybersecurity platform whose WildFire sandboxing and Advanced Threat Prevention overlap with MetaDefender Aether, Metascan, and Deep CDR. As a SASE/Network-security incumbent, it competes at the perimeter with OPSWAT while remaining an integration partner via F5's ADSP.
• Fortinet: Fortinet provides network security appliances, OT/ICS security (FortiGate Rugged), and sandboxing (FortiSandbox) that compete with MetaDefender's Industrial Firewall and Adaptive Sandbox. Its broad networking footprint often displaces standalone OT-security vendors in cost-sensitive accounts.

Emerging players

• Cylera: Cylera is an emerging healthcare-focused IoT/medical-device security vendor with comparable OT/IoT asset discovery and threat detection. It targets a narrower vertical (healthcare) than OPSWAT but competes for healthcare-provider critical-infrastructure budget and partnership channels.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/channel/UC1OgXgU_8LtRsPlAnRsPlOg
• LinkedInlinkedin.com/company/opswat
• Xx.com/opswat
• Facebookfacebook.com/opswat

Compliance27 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles16 records

Subsidiaries3 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A8 records

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about OPSWAT