txOne

txOne Portable Inspector Pro for OT Systems Malware Scanning

SKU TXPISSE1X00H1

Included with this product:

  • ElementOne software license (required) - $275/unit
  • Portable Inspector Pro software license (required) - $1650/unit

*minimum 3 per order

$2,425.00
$2,425.00

Included with this order: txOne ElementOne Central Management Console License - 1 year (TXP1ZAE1X0001) — $included

Add to Quote
Download the data sheetPortable Inspector Datasheet TXOne Networks 20260729 · PDF
Product specsInstall guide & demo video

Why we endorse this product

  • Scans without installing software or rebooting the target, so running processes stay up
  • Covers the legacy OS long tail — Windows 2000 SP3/SP4 through Windows 11, plus embedded Windows and major Linux distributions
  • Pro Edition gives air-gapped sites a scanned, AES-256-encrypted way to move files in

Endorsements come from hands-on testing by our OT cyber experts, with 30+ years in control systems design.

$2,425.00
$2,425.00
Add to Quote

Product Details

Most OT cyber tools assume you can install something. On a plant floor, you usually can't: the HMI is validated, the engineering workstation runs Windows XP, and the historian sits on an air-gapped segment nobody wants to reboot. Portable Inspector works around all of that. It's a USB device that runs its scanning engine from the stick, finds and removes malware, and leaves the host as it found it apart from a small working footprint.

Each scan also records what's on the machine: system details, patch status, and installed software. Over a site walk you build an asset inventory of systems no network tool can see, which helps with the "shadow OT" that shows up in every assessment.

The Pro Edition adds AES-256 hardware-encrypted secure storage, in 64 GB or 1 TB. Files are scanned as they're copied onto the drive, so only clean files get stored. That makes it a controlled way to carry patches, project files, and configuration backups into air-gapped environments.

For fleets, the Management Program centralizes scan configuration, pattern updates, logs, and asset exports, with SIEM/syslog forwarding. Enterprise teams can use TXOne's web-based ElementOne platform instead.

Who choose portable scanning technology from txOne?

  • No software install or reboot on the target system
  • Multiple scan modes: on-demand, scheduled, and boot scan
  • Deletes or quarantines malicious files, with embedded self-protection on the device
  • LED status indicators: blue (clean), yellow (threat found and cleaned), red (threat found, action required)
  • Several units can scan in parallel across multiple machines
  • Collects computer information, Windows Update status, and installed applications during each scan
  • Integrated scan logs tied to asset information
  • Supports case-sensitive file and folder names on Windows
  • Pro Edition: AES-256 hardware-encrypted secure storage, with files scanned on the way in so only clean files are stored
  • Management Program (SMB): manage multiple units, push scan configurations and pattern updates, export assets to CSV, and send logs to SIEM or syslog
  • ElementOne (enterprise): web-based central management with everything in the Management Program plus expanded reporting and audit tooling

Who should deploy this technology?

  • OT assessment teams who need to check for malware and inventory hosts on standalone and air-gapped systems during site visits
  • Systems integrators and commissioning engineers who need to verify their own laptops and media are clean before connecting to a customer's control network
  • Asset owners running legacy Windows (XP, 7, embedded, Server 2003/2008) on HMIs, engineering workstations, and historians that can't support modern endpoint agents
  • Sites with removable-media and transient-device requirements — for example, utilities scoping NERC CIP-010 R4 controls for transient cyber assets and removable media
  • Operators who move files into air-gapped networks and need a scanned, encrypted transfer path (Pro Edition)

Product Specifications

Key Specifications

  • Scanning tool space: 64 GB with AES-256 hardware encryption
  • Secure storage: 64 GB or 1 TB with AES-256 hardware encryption
  • Casing material: Aluminum
  • Interface: USB 3.0 Type A
  • Hardware warranty: 1 year included; extends with software license renewal, up to 5 years max
  • Operating temperature: 0°C to 70°C
  • Relative humidity: 20% to 90%
  • Certifications: CE, FCC, KCC, BSMI, VCCI, RoHS, REACH
  • CPU support: x86 and x64
  • Memory: Minimum required by the host OS
  • Free disk space required on host: 200 MB
  • Display resolution: 640 × 480 or higher
  • Languages: MUI (English, Japanese)

Supported operating systems

  • Windows: 2000 SP3/SP4 (virus scan and asset collection only), XP Professional SP1–SP3, Vista SP1/SP2, 7 SP1, 8, 8.1, 10, 11; Server 2000, 2003 R2, 2008 SP2, 2008 R2 SP1, 2012, 2012 R2, 2016, 2019, 2022, 2025; Storage Server 2008, 2012, 2016
  • Windows Embedded: XP Embedded SP1–SP3, Embedded Standard 2009 and 7, POSReady 7 and 2009, XP Professional / Vista / 7 / 8 / 8.1 for Embedded Systems, Windows 10 Enterprise and IoT Enterprise LTSB/LTSC, Windows 11 Enterprise and IoT Enterprise LTSC, Server 2003 / 2008 / 2012 for Embedded Systems
  • Linux: CentOS 5.11 (kernel 2.6.33+) and 6–10; Debian 10–13; AlmaLinux 8.10, 9.4, 9.7; Rocky Linux 8.6, 8.10, 9.4; Miracle Linux 8.6, 8.8, 9.0, 9.2; RHEL 6–9; Ubuntu 14.04–24.04

Limitations and exclusions

  • No real-time scanning; it scans on demand, on schedule, or at boot
  • Not supported: Windows XP with no service pack; Windows 8/8.1 on tablets; Windows RT 8/8.1
  • Boot scan (Rescue Disk) is not supported on systems that can't boot from USB, or that use EFI/UEFI, RAID, GPT-initialized drives, or SCSI-connected drives
  • A boot scan writes a log to the scanned machine's local disk
  • Cannot be used with Storage Area Networks (SANs)
  • The standard edition has no user storage area and cannot be used as a general flash drive
  • Customized componentized XP builds (XP Embedded, Embedded Standard 2009) may not be supported

FAQs

Do I need to install software on the machine I'm scanning?

No. The scanning software runs from the Portable Inspector itself, so nothing is installed on the target system. The host needs 200 MB of free disk space for the scan.

Does the target system have to be rebooted?

Not for an on-demand or scheduled scan. Portable Inspector also offers an optional boot scan (Rescue Disk), which starts the system from the USB device. It requires USB boot support and isn't available on EFI/UEFI, RAID, GPT, or SCSI-drive systems.

Which operating systems are supported?

Windows 2000 SP3/SP4 through Windows 11, Windows Server 2000 through 2025, a wide range of Windows Embedded and IoT LTSC editions, and major Linux distributions including RHEL 6–9, CentOS, Debian, Ubuntu 14.04–24.04, AlmaLinux, Rocky, and Miracle Linux. On Windows 2000, only virus scanning and asset collection are supported. See the full list in the specs above.

What's the difference between the standard and Pro Edition?

Both scan and remove malware and collect asset data. The Pro Edition adds AES-256 hardware-encrypted secure storage (64 GB or 1 TB) for carrying files into air-gapped environments, with every file scanned before it's stored. The Pro Edition also has an aluminum casing; the standard edition is plastic.

Does it provide real-time protection?

No. Portable Inspector scans on demand, on a schedule, or at boot. It does not monitor systems continuously.

Can I use it as a regular USB flash drive?

The standard edition has no user storage area. The Pro Edition includes encrypted secure storage, but only files that pass the malware scan can be saved to it.

What asset information does it collect?

During each scan it captures computer information, Windows Update status, and a list of installed applications. With the Management Program, you can export asset data to CSV.

Can scan logs go to our SIEM?

Yes. The Management Program supports log export to SIEM and syslog servers.

Does a scan leave anything on the host?

A boot scan writes a log to the scanned computer's local hard disk. Plan for this if your change-control process tracks writes to validated systems.

What's the warranty?

Each unit includes a 1-year hardware warranty. When you renew the software license, the hardware warranty extends for the same period, up to a maximum of 5 years.

Not sure this is the right fit?

Tell us about your network and an OT cyber expert will confirm the fit, adjust the configuration, or point you to a better option. No sales sequence, just an answer.

Talk to an OT cyber expert