Introducing OPSWAT File Structure Validation. The security control gate every file passes through before inspection begins By Joseph Nguyen, Product Marketing Manager Aug 28, 2026 On August 28, 2026, OPSWAT is releasing File Structure Validation in MetaDefender Core(TM). File Structure Validation is a new technology that validates file format integrity, extracts embedded objects, and routes each component to the appropriate security engine. It is designed to close a structural enforcement gap that existing tools were not designed to fill: coverage across complex file formats, at the earliest point in the workflow, without modifying the files it inspects. What File Structure Validation does. Validate. File Structure Validation checks every file against its format specification across 160+ file types, including database files, GIS files, AI model formats, and other complex formats that AV and traditional file sanitization cannot fully process. This includes detection of polyglot files: files that are simultaneously valid under two format specifications; a technique used to bypass file type checks that conventional tools cannot catch at the surface level. For PDF files, FSV also validates digital signatures and verifies signer certificates against known Certificate Authorities. Extract. Once a file passes structural validation, FSV breaks it into its discrete components: macros, hyperlinks, embedded executables, metadata, images, and nested files. Each extracted component is classified as a risk object or a regular object. Child files are routed independently through the security workflow rather than assessed as part of the parent file, e.g. attachments or embedded objects buried three layers inside a compound document are evaluated on their own terms, not treated as binary content belonging to the file that contained it. Block. Blocking rules are configurable by object type and per-file-type condition, giving security teams precise control at the point of entry without blanket policies. In addition to standard file specifications, File Structure Validation also validates files against user-defined schema (supporting XML schema (XSD) in this version). Files with malformed, non-compliant, or anomalous structures are blocked before they reach any downstream engine. Files that fail structural checks are blocked before extraction begins, eliminating processing overhead for structurally invalid files. Only files that passed structural validation proceed to downstream engines. Who this is for. File Structure Validation addresses three specific gaps that other tools in the stack were not built to cover: * First, organizations handling database files, GIS files, AI model files, and other complex formats where AV cannot complete structural analysis. * Second, environments where file integrity must be preserved after inspection, including legal, forensic, and compliance-regulated workflows where file reconstruction is not applicable. * Third, security teams that need structural enforcement and object-level routing at the earliest point in the pipeline, before heavy inspection begins. What is included at launch. * File structure validation across 160+ file types * Polyglot file detection at the structural level * PDF digital signature validation and signer certificate verification * Schema validation against XML and related formats including ZEI, JNLP, TDS, RDF, BML, MPD, and TTML * Configurable blocking rules by object type and JSON path condition, per file type * Configurable object detail exposure, from structural overview to full object-level data including relationships and offsets * Non-modifying inspection: the original SHA256 hash is preserved after processing Get started. File Structure Validation is available natively in MetaDefender Core(TM). It is a layer in the existing workflow configuration, not a separate product to integrate. To see File Structure Validation in action or to discuss how it fits into your existing deployment, refer to the official documentation or contact the Support Team. Get the latest OPSWAT company updates along with event information and the news that's driving the industry forward. Follow OPSWAT on your LinkedIn, Facebook, Twitter, and YouTube for more! Stay up-to-date with OPSWAT! Sign up today to receive the latest company updates, stories, event info, and more.

OPSWAT joins Singapore's Cyber Security Agency at exclusive OTCEP Forum 2026, reinforcing commitment to critical infrastructure protection in the public sector. Aug 21, 2026 OPSWAT participated and spoke at the Operational Technology Cybersecurity Expert Panel (OTCEP) Forum 2026, held July 22-23 at Resorts World Convention Centre, Singapore. This was an invitation-only event convened by Singapore's Cyber Security Agency (CSA) that brought together a select group of government leaders, critical information infrastructure operators, and OT cybersecurity practitioners from around the world. Now in its sixth year, the OTCEP Forum is a cornerstone event under Singapore's OT Cybersecurity Masterplan, designed to strengthen cross-sector resilience against operational technology (OT) threats. This year's forum was opened by CSA Chief Executive Ms. Gwenda Fong and featured a keynote address from Mrs. Josephine Teo, Minister for Digital Development and Information and Minister-in-Charge of Cybersecurity and Smart Nation Group, who outlined Singapore's strategy to defend critical infrastructure against AI-driven threats. Sal Morlando, CTO for Data Diodes and Security Gateways at OPSWAT, presented "Every OT Breach Starts With a File," a session examining how file-borne threats enter OT environments and how organizations can close that gap without disrupting operations. The session drew strong attendance from public sector and CII stakeholders, reflecting growing demand across Singapore's government and critical infrastructure community for practical, deployable OT security guidance. Being invited to speak at OTCEP is a meaningful recognition of the work OPSWAT has done to protect the world's most sensitive networks. The turnout and the quality of the conversations Opswat had with operators and policymakers reinforced just how central data diode and cross-domain technology have become securing critical infrastructure. Opswat is looking forward to building on these relationships as Singapore continues to invest in OT resilience. Sal Morlando CTO for Data Diodes and Security Gateways at OPSWAT Morlando's presentation drew on OPSWAT's work expanding its network security portfolio, including the MetaDefender(R) Optical Diode and Diode X, which integrate MetaDefender Core(TM) file sanitization and have achieved EAL 4+ certification and NATO-approved product listing. These solutions support customers across power utilities, oil and gas, water and wastewater, manufacturing, and other critical infrastructure sectors that rely on strict network segmentation and air-gapped security. OPSWAT's participation at OTCEP Forum 2026 builds on the company's broader engagement with Singapore's public sector and reflects its ongoing investment in the region as demand for OT and cross-domain security accelerates across government and CII operators. Get the latest OPSWAT company updates along with event information and the news that's driving the industry forward. Follow OPSWAT on your LinkedIn, Facebook, Twitter, and YouTube for more! Stay up-to-date with OPSWAT! Sign up today to receive the latest company updates, stories, event info, and more.