14-day trial, no credit cardStart now
PermitUSB
Sign inStart free trial

Quickstart

Get an agent enrolled and reporting events from a test Windows machine. Four steps, under ten minutes, one throwaway thumb drive.

~10 minWindows 10 / 11Local admin needed

No account yet? Start a free trial first. Nothing here needs a card.

  1. Sign in to the dashboard

    Sign in with your email and password. New workspaces are seeded with a working default policy on first sign-in: common peripherals are allowed (printers, audio, webcams, hubs, smart card readers) and USB mass storage is blocked. Customize it later on the Policy page.

    You should see

    The Events page loads empty, with one endpoint group and a default policy already attached.

  2. Get the installer

    On Agent releases, download Install-PermitUSB.ps1. It checks prerequisites, installs the .NET Desktop Runtime if the machine needs it, fetches the MSI and runs the install, so it is the shortest path on a machine you are setting up by hand. The bare MSI is there too for Group Policy, Intune or imaging.

    Both downloads are gated to signed-in users. Anonymous traffic cannot pull the binaries.

    You should see

    Install-PermitUSB.ps1 in your Downloads folder, signed and version-stamped.

  3. Generate a token and install

    On the Enrollment page, generate a token: single-use enrolls exactly one endpoint, reusable enrolls many. The page shows the exact install command with your token already filled in. Run it in PowerShell as Administrator on a Windows 10 or 11 test machine.

    powershell -ExecutionPolicy Bypass -File .\Install-PermitUSB.ps1 -EnrollToken pusb_live_… -Group line-1-workstations

    You should see

    The service installs, the agent enrolls, and the endpoint appears on the Endpoints page within about 30 seconds.

  4. Plug in a USB device

    Plug a thumb drive into the test machine. This is the whole demo: no scripted walkthrough, no sandbox, just the real enforcement path on a real machine.

    You should see

    An event row on the Events page, a toast from the tray app on the test machine, and the drive blocked or allowed exactly as your policy says.

That is the whole loop

From here you can author rules for specific serials, split endpoints into groups with different policies, invite teammates, or wire up alerts and SIEM forwarding.

Stuck on a step? Tell us where. A human replies within two business days.