PermitUSB documentation

PermitUSB is a USB device control platform for Windows endpoints. This site is the complete reference: how to install it, how to author policy, how it integrates with NIST 800-171, and the explicit list of what it does and doesn't do.

Start here

• Quickstart — sign up, install on a test machine, see your first event in under 10 minutes.
• Concepts — endpoints, groups, policies, rules, templates.
• Policy guide — match types, ordering, precedence, vendor-name match, device groups.

Deploy

• MSI installer — silent install with the parameters that matter.
• Group Policy — common SMB deployment path.
• Microsoft Intune — for cloud-managed fleets.

Operate

• Tray app — what users see and what it tells them.
• Self-protection — service ACLs, the watchdog, and what happens when admins try to tamper.
• Stale-policy fail-closed — what happens when an agent loses cloud connectivity.

Comply

• NIST 800-171 mapping — direct control mapping you can hand an auditor.
• v1 scope — what's in v1, what's deferred, and why.

Something missing? Send a note. Documentation gaps get filled fast.