For US manufacturers, defense contractors, and SMB IT teams

USB device control your team can actually deploy.

Block-by-default whitelisting that takes one PowerShell line to install. Transparent pricing, a 14-day no-card trial, and a NIST 800-171 mapping doc you can hand straight to an auditor.

No credit card required. Up and running in under 10 minutes.

Three things we believe.

Block by default.

Allow what you intend, block everything else. No 'audit-only' theater. Discovery mode lets you observe traffic for 14 days before enforcement kicks in.

Transparent buying motion.

Pricing is published. Trials don't need a credit card. Cancellation is one click. We tell you what's coming, what isn't, and what the v2 driver-mode roadmap is.

NIST 800-171 ready.

Direct mapping to controls 3.1.21 / 3.4.6 / 3.8.7 / 3.13.13 / 3.13.14, with auditor-ready language in the docs. Useful even if you're not chasing CMMC.

How it works.

  1. Step 1

    Sign up

    14-day trial, no card. We create your workspace + a working starter policy in one shot.

  2. Step 2

    Run one PowerShell line

    Copy from the dashboard, paste into elevated PowerShell on a test machine. Service installs, enrolls, and protects.

  3. Step 3

    Tune the policy

    Apply a template, drop a serial onto an allow list, group endpoints by team. Discovery mode keeps things audit-only until you're ready.

  4. Step 4

    Deploy at scale

    GPO, Intune, or your RMM — same MSI, same parameters. New endpoints land in the right group automatically.

What's in v1.

VID/PID, serial, class, vendor-name matching

Per-endpoint-group policies

14-day per-group discovery mode

Built-in templates: Standard Office / Engineering / Kiosk

Tray app with toast on every block

Self-protection: service ACL + watchdog

Stale-policy fail-closed

Email + webhook alerts

Export events to CSV / JSON

Read the full documentation or the v1 scope doc for the explicit "what's in / what's not yet" list.

Ready to take 10 minutes and find out?

Sign up, paste the one-liner on a test machine, plug a USB drive in, watch the event land in the dashboard. That's the demo.

Start free trial
PermitUSB — USB device control for SMB IT teams