TYREX Hardware Agent

USB Security Hardware For Critical Infrastructure

Secure software-restricted systems with hardware-enforced protection

The TYREX Hardware Agent is a plug-and-play USB security device that extends malware protection and access control to systems where software agents cannot be deployed.

USB Device icon

Removable Media Sanitization and Secure Data Transfer

Software installation may be prohibited or impractical on the most sensitive systems. The Hardware Agent delivers USB protection with a physical device that prevents the propagation of viruses, malware, and firmware-level attacks.

Enforce Security at the Endpoint

Extend TYREX protection directly to workstations that cannot run software agents. The Hardware Agent verifies decontaminated files and blocks unauthorized USB access.

 

Control USB Data Flow

Configure one-way or two-way USB transfers based on your security requirements. Whitelist approved file types and block everything else automatically.

Deploy Without Software

Implement removable device security on any device without installing drivers or software. The Hardware Agent works on Windows, Linux, macOS, and more.

 

hardware-agent-process-breakdown

Built for High-Security Environments

Non-Intrusive Integration

Security teams can deploy hardware-level protection across industrial control systems, legacy equipment, and locked-down environments where software agents are not an option.

ANSSI First Level Security Certification (CSPN) confirms the Hardware Agent meets the rigorous security standards required for critical infrastructure and government deployments.

Signature Verification and File Integrity

Verify that files transferred via USB have not been tampered with or modified. The Hardware Agent checks file signatures and validates integrity before allowing transfers to protected systems.

Bidirectional or Unidirectional Control

Configure the Hardware Agent to allow data flow in one direction only, or enable controlled two-way data transfers. Unidirectional mode provides maximum isolation for the most sensitive systems, while bidirectional mode supports environments that require secure data exchange.

Compatible with Enterprise Security Workflows

Incorporate hardware USB protection into established file sanitization, auditing, and compliance processes without disrupting current workflows. 

Secure Your Most Sensitive Infrastructure Today

TYREX removable media security is trusted by 350+ organizations worldwide across energy, manufacturing, maritime, aerospace, and government sectors. Our decontamination stations protect over 5,000 public and commercial infrastructure locations.

Hardware Agent Specifications

USB Support
OUSB Type A, USB 2.0 High Speed
File Systems
FAT, NTFS, EXT
OS Compatibility
Windows, Linux, macOS (no installation required)
Certification
ANSSI CSPN

TYREX USB Decontamination Stations for Any Scenario

A rugged, portable unit ideal for mobile teams.

A freestanding kiosk with a 22-inch display for high-traffic areas and self-service decontamination.

A desktop decontamination station for offices and standard workplaces.

For secure outbound data transfers to external parties.

Frequently Asked Questions

How does the Hardware Agent work with TYREX Decontamination Stations?

The Hardware Agent extends the protection provided by TYREX Decontamination Stations. A Station scans USB devices for malware and certifies devices as clean. The Hardware Agent verifies these signatures before allowing data transfer to protected systems. Together, the Station and Hardware Agent defend against both software-based malware and hardware-based attacks.

No. The Hardware Agent is an optional component for customers with specific security needs. TYREX Decontamination Stations scan, clean, and certify removable media, providing a complete USB security solution. The Hardware Agent adds a self-contained hardware endpoint protection device for those who need it.

The Hardware Agent is designed for environments where software installation is not possible or permitted. If your protected systems can accept software agents, the Workstation Protect Agent may be the right option. If they cannot, the Hardware Agent provides equivalent protection through hardware enforcement.

No. The Hardware Agent is a plug-and-play device that works without any software installation or driver configuration. 

The ANSSI CSPN (First Level Security Certification) is issued by France’s national cybersecurity agency and validates that the Hardware Agent meets rigorous security requirements. It provides independent verification that the device delivers the security level claimed. ANSSI CSPN certification may be required for deployments in critical infrastructure, government facilities, and defense establishments.

Secure Your Spaces from USB Threats