{
  "schema": "one.shield.enterprise.engines.v0.1",
  "integration_status": "catalog_and_policy_only",
  "production_scanning_enabled": false,
  "commercial_license_keys_installed": false,
  "reported_provider_count": 15,
  "providers": [
    {
      "id": "ms_defender",
      "name": "Microsoft Defender Antivirus",
      "kind": "endpoint_status",
      "acquisition": "bundled_windows",
      "requires_license": false,
      "supports": [
        "status"
      ],
      "integration": "read_only_prototype",
      "notes": "Engine remains managed by Windows.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "defender_endpoint",
      "name": "Microsoft Defender for Endpoint",
      "kind": "edr",
      "acquisition": "customer_subscription_and_oauth",
      "requires_license": true,
      "supports": [
        "alerts",
        "inventory",
        "actions"
      ],
      "integration": "planned",
      "notes": "Customer tenant and Entra authorization required.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "clamav",
      "name": "ClamAV",
      "kind": "on_demand_local",
      "acquisition": "gplv2_compliance",
      "requires_license": false,
      "supports": [
        "file_scan"
      ],
      "integration": "planned",
      "notes": "Use an isolated service/process; evaluate GPL obligations before commercial redistribution.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "opswat_core",
      "name": "OPSWAT MetaDefender Core",
      "kind": "multiscan",
      "acquisition": "commercial_contract",
      "requires_license": true,
      "supports": [
        "file_scan",
        "engine_verdicts"
      ],
      "integration": "planned",
      "notes": "Licensed engine counts and deployment entitlements vary.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "opswat_cloud",
      "name": "OPSWAT MetaDefender Cloud",
      "kind": "multiscan_cloud",
      "acquisition": "commercial_contract",
      "requires_license": true,
      "supports": [
        "hash_lookup",
        "file_scan",
        "engine_verdicts"
      ],
      "integration": "planned",
      "notes": "Uploads disabled by default; local residency options differ.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "vt_premium",
      "name": "VirusTotal Premium",
      "kind": "threat_intelligence",
      "acquisition": "premium_commercial_contract",
      "requires_license": true,
      "supports": [
        "hash_lookup",
        "url_lookup"
      ],
      "integration": "planned",
      "notes": "Public API prohibited in commercial services. Not an endpoint antivirus.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "bitdefender",
      "name": "Bitdefender GravityZone",
      "kind": "edr",
      "acquisition": "vendor_partner_api_contract",
      "requires_license": true,
      "supports": [
        "alerts",
        "inventory"
      ],
      "integration": "planned",
      "notes": "Partner API and customer entitlement required.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "eset",
      "name": "ESET PROTECT",
      "kind": "edr",
      "acquisition": "vendor_partner_api_contract",
      "requires_license": true,
      "supports": [
        "alerts",
        "inventory"
      ],
      "integration": "planned",
      "notes": "Partner API and customer entitlement required.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "sophos",
      "name": "Sophos Central",
      "kind": "edr",
      "acquisition": "vendor_partner_api_contract",
      "requires_license": true,
      "supports": [
        "alerts",
        "inventory"
      ],
      "integration": "planned",
      "notes": "Partner API and customer entitlement required.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "crowdstrike",
      "name": "CrowdStrike Falcon",
      "kind": "edr",
      "acquisition": "vendor_partner_api_contract",
      "requires_license": true,
      "supports": [
        "alerts",
        "inventory"
      ],
      "integration": "planned",
      "notes": "Partner API and customer entitlement required.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "sentinelone",
      "name": "SentinelOne Singularity",
      "kind": "edr",
      "acquisition": "vendor_partner_api_contract",
      "requires_license": true,
      "supports": [
        "alerts",
        "inventory"
      ],
      "integration": "planned",
      "notes": "Partner API and customer entitlement required.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "trendmicro",
      "name": "Trend Micro Vision One",
      "kind": "edr",
      "acquisition": "vendor_partner_api_contract",
      "requires_license": true,
      "supports": [
        "alerts",
        "inventory"
      ],
      "integration": "planned",
      "notes": "Partner API and customer entitlement required.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "trellix",
      "name": "Trellix",
      "kind": "edr",
      "acquisition": "vendor_partner_api_contract",
      "requires_license": true,
      "supports": [
        "alerts",
        "inventory"
      ],
      "integration": "planned",
      "notes": "Partner API and customer entitlement required.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "malwarebytes",
      "name": "Malwarebytes ThreatDown",
      "kind": "edr",
      "acquisition": "vendor_partner_api_contract",
      "requires_license": true,
      "supports": [
        "alerts",
        "inventory"
      ],
      "integration": "planned",
      "notes": "Partner API and customer entitlement required.",
      "connected": false,
      "actively_scanning": false
    },
    {
      "id": "kaspersky",
      "name": "Kaspersky enterprise solutions",
      "kind": "edr",
      "acquisition": "vendor_partner_api_contract",
      "requires_license": true,
      "supports": [
        "alerts",
        "inventory"
      ],
      "integration": "planned",
      "notes": "Regional legal/contractual restrictions may apply.",
      "connected": false,
      "actively_scanning": false
    }
  ]
}