OPSWAT Deep CDR Achieves 100% Sanitization in AV-Comparatives Test

Independent lab confirms 100% sanitization rate for OPSWAT Deep CDR Technology across 300+ file-borne attack scenarios.

File-borne threats — malicious macros, embedded executables, nested archives and AI-generated payloads — continue to bypass signature-based defenses. For CISOs and security architects, the question is no longer whether detection works, but whether files entering the enterprise can be trusted at all. OPSWAT has released independent proof that its prevention-first approach neutralizes these threats without relying on detection.

What was announced

On September 9, 2026, OPSWAT announced that Austrian ISO 9001:2015-certified testing lab AV-Comparatives recorded a 100% sanitization rate for Deep CDR Technology across more than 300 test cases. This is the third independent lab to record a 100% protection result for Deep CDR, following SE Labs and SecureIQLab. Deep CDR was also the first Content Disarm and Reconstruction technology to record a 100% accuracy score in SE Labs testing.

AV-Comparatives evaluated Deep CDR on sanitization effectiveness by attack scenario, coverage across approximately 50 file types, and file fidelity after reconstruction. The test set included AI-assisted malicious content, zero-day exploits, malicious macros, embedded executables, nested archives and other evasive file-borne attacks.

Macros, embedded executables, nested archives, AI-assisted payloads — 300-plus cases, and nothing came through. Our test is pass or fail. There is no partial credit.

Why this matters

For CIOs, CISOs, IT directors and procurement leaders, the AV-Comparatives result addresses a fundamental gap in file security strategy. Detection technologies must recognize a threat to stop it — a limitation that becomes critical when attackers use AI to generate novel payloads or exploit zero-day vulnerabilities. Deep CDR removes risky content whether the threat is known, unknown, or AI-generated.

Three independent lab validations provide the level of evidence critical infrastructure operators require for procurement and compliance decisions, reducing dependence on vendor claims alone.

At OPSWAT, we do not grade our own homework. Our commitment to CDR means repeatedly putting Deep CDR Technology in front of leading independent security testing organizations and asking them to stress test it against the newest file-borne attack techniques, including threats created or adapted with AI.

Technical details

• Sanitization rate: 100% across 300+ test cases in AV-Comparatives evaluation
• File type coverage: approximately 50 file types tested; 200+ supported in production
• Approach: treats every file as untrusted; disarms and rebuilds each file in milliseconds
• Threats addressed: malicious macros, embedded executables, nested archives, steganography, malformed archives, AI-assisted payloads, zero-day exploits
• File fidelity: preserves layout, formatting, tables and formulas so files remain usable
• Integration: email, web, file-transfer and endpoint workflows
• Platform: part of the MetaDefender platform
• Deployment: on-premises, cloud, or air-gapped environments

Softprom and OPSWAT

Softprom is the official distributor of OPSWAT. Enterprise and critical infrastructure customers can obtain licensing, technical consultation, proof-of-concept support and deployment services for Deep CDR and the broader MetaDefender platform through Softprom.

This content was prepared as part of the Softprom DistriFlow project — an automated system for monitoring and adapting vendor news. Original source: original article.