Block unauthorized USB storage devices across your fleet. Whitelist approved drives by serial number. Real-time enforcement, full audit trail, zero complexity.
Deploy the lightweight PortGuard agent to your Windows endpoints. Under 4MB, installs in seconds, no reboot required.
The agent automatically detects all connected USB storage devices and reports them to your console. See exactly what is plugged in across your fleet.
Block all USB storage by default, then whitelist approved devices by serial number or hardware ID. Policies push to agents in seconds via MQTT.
See compliant vs non-compliant machines on your dashboard. Full audit trail of every USB device connection, block, and policy change.
Prevent data exfiltration by blocking all unauthorized USB storage devices. Flash drives, external hard drives, and memory card readers are blocked instantly.
Approve specific company-issued USB devices by serial number or hardware ID. Whitelisted drives work normally while everything else stays blocked.
Policies push to agents in seconds over MQTT. No waiting for GPO sync or reboots. Change a policy in the console and it takes effect immediately.
Every USB device connection, block event, and policy change is logged. Complete audit trail for compliance reviews and incident investigations.
Set policies at the company level or per-machine. Perfect for MSPs managing multiple clients from a single console with per-company isolation.
See compliant vs non-compliant machines at a glance. Identify endpoints with enforcement disabled or unauthorized devices connected.
Start with a 14-day free trial. No credit card required. Full access to all features.
PortGuard currently supports Windows 10 and Windows 11 endpoints. The lightweight agent runs as a Windows service and uses native device management APIs for enforcement.
No. PortGuard targets USB mass storage class devices only — flash drives, external hard drives, and memory card readers. HID devices like keyboards, mice, webcams, and headsets are completely unaffected.
When a USB device connects to any endpoint, it appears in your console with its serial number and hardware ID. You can whitelist it with one click. That device will then be allowed across all endpoints while everything else remains blocked.
The last-known policy continues to be enforced locally. If enforcement was enabled and the device goes offline, USB storage remains blocked until connectivity is restored. This fail-closed behavior prevents users from unplugging the network cable to bypass controls.
Group Policy USB controls are slow (up to 90-minute sync cycles), all-or-nothing at the OU level, and offer no real-time visibility. PortGuard gives you per-machine toggle control, live device inventory, instant policy changes, and a full audit trail — all without touching Active Directory.
Yes, every plan includes a 14-day free trial with full access. No credit card required.