About
One product. No roadmap theater.
PermitUSB is built and operated by JJMK Studios for anyone responsible for the Windows machines in their organization. Support goes straight to engineering, not a tier-one queue.
The facts
- Company
- JJMK Studios, LLC
- Built for
- Any team running Windows endpoints
- Platform
- Windows 10 and 11
- Fleet size
- One endpoint to thousands
- Price
- $2 per endpoint per month
- Support reply
- Within two business days
Why this exists
Existing USB device control tools target enterprise budgets and assume an admin who can spend weeks on policy authoring. Most teams do not have those weeks, and nobody should need a procurement cycle to close a USB port.
So PermitUSB ships as an MSI, sets sane defaults on day one, publishes its price, and tells the truth about what it does and does not do.
What it is
A Windows endpoint agent paired with a cloud control plane. Block-by-default whitelisting, per-endpoint-group policies, discovery mode for a risk-free rollout, MSI deployment, and a published NIST 800-171 control mapping.
It is device control, not file-content DLP. PermitUSB decides which devices may connect and records what happened; it does not inspect files, email or cloud uploads.
The full breakdown lives in the documentation, readable without an account.
How it is built
Current, long-support technology. Every piece is chosen so the product stays maintainable for a decade.
The installer is EV code-signed and the kernel driver is signed and attested by Microsoft, so Windows trusts both without anyone turning protections off to install them.
- Endpoint agent
- .NET 10 LTS Worker Service
- Enforcement
- Kernel-mode WDF filter driver
- User surface
- WPF tray app
- Dashboard
- Next.js 16 + Tailwind
- Data and auth
- Supabase Postgres with RLS
- Billing and email
- Stripe, Resend
Talk to engineering, not an AI bot.
No qualification call, no discovery deck, no gatekeeping. Ask a technical question and get a technical answer.