14-day trial, no credit cardStart now
PermitUSB
Sign inStart free trial

Documentation

Everything, written down.

How to install PermitUSB, how to author a policy, and how it maps to NIST 800-171. No login required to read any of it.

Start here

Quickstart

Signup to first blocked device on a test machine. Four steps, about ten minutes.

For auditors

NIST 800-171 mapping

Controls 3.1.21, 3.4.6, 3.8.7 and 3.8.8 with language you can hand to an assessor.

Getting started

OverviewWhat this documentation covers.FeaturesThe full list of what PermitUSB does, by area.QuickstartSignup to first event in under ten minutes.ConceptsEndpoints, groups, policies, rules, precedence.

Deployment

PowerShell scriptRecommended for interactive installs and upgrades.MSI installerDirect msiexec usage for GPO, SCCM and MDT.GPOThe common path for domain-managed fleets.Microsoft IntuneFor cloud-managed fleets.Network allowlistHosts and ports the agent needs to reach.

Policy

Policy guideMatch types, ordering, precedence, device groups.Discovery modeAudit-only until you turn enforcement on.Endpoint groupsDifferent policies for different teams.

Operations

Tray appWhat users see and what it tells them.ReportsBlocked devices, fleet inventory, device history.Self-protectionService ACLs, watchdog, tamper behavior.Stale-policy fail-closedWhat happens when an agent loses the cloud.Agent configurationEvery setting in agent.json.Reset an endpointClean re-enrollment on a rebuilt machine.Recover a deleted endpointUndo a deletion without losing history.

Integrations

SIEM relayCEF forwarding and the on-prem relay.

Compliance

NIST 800-171 mappingControl mapping you can hand an auditor.Plan comparisonTrial and Paid, side by side.FAQStraight answers to the common questions.

Something missing? Send a note. Documentation gaps get filled fast.