OPSWAT introduces MetaDefender Aether decision engine

OPSWAT introduced MetaDefender Aether, an AI-powered decision engine designed to detect zero-day threats at perimeter entry points and provide a single, confidence-scored file verdict before files entered networks.

The company said perimeter security presented a decision problem requiring fast, high-confidence judgments on files; existing endpoint-class tools deployed at the perimeter had produced queue backlogs, inconclusive results, and alert fatigue, while adversaries used Artificial Intelligence (AI) and Machine Learning (ML) to create evasive, obfuscated threats that bypassed static analysis.

Files were processed through four progressively deeper layers: threat reputation, dynamic analysis, ML-driven threat scoring, and similarity-based threat hunting. OPSWAT reported cumulative efficacy figures for those layers and stated the platform delivered 99.9% zero-day detection efficacy, 100x resource efficiency versus VM-based sandboxing, and a unified, confidence-scored verdict per file.

The system resolved nearly half of threats in the initial reputation layer and escalated only files that required deeper inspection. OPSWAT described enterprise-scale operation across cloud, hybrid, and air-gapped environments, listed support for multiple regulatory frameworks, and said MetaDefender Aether integrated with the MetaDefender ecosystem including Core, Cloud, Email Security, MFT, ICAP, Storage, Kiosk, and Cross-Domain.

“Traditional sandboxing was never built for AI-driven threats at scale,” said Jan Miller, Global CTO of OPSWAT. “Security teams don't need more telemetry. They need decisive answers. MetaDefender Aether delivers on what sandboxing was not designed to do: replacing isolated analysis with an AI-native pipeline that delivers a single, high-confidence verdict that SOC teams and automation platforms can act on immediately before any file reaches the network.”

OPSWAT said newly discovered Indicators of Compromise (IOC) were fed back to earlier layers and that every analyzed file would strengthen the global intelligence graph, with the intent of improving detection over time.