• No software install or reboot on the target system
• Multiple scan modes: on-demand, scheduled, and boot scan
• Deletes or quarantines malicious files, with embedded self-protection on the device
• LED status indicators: blue (clean), yellow (threat found and cleaned), red (threat found, action required)
• Several units can scan in parallel across multiple machines
• Collects computer information, Windows Update status, and installed applications during each scan
• Integrated scan logs tied to asset information
• Supports case-sensitive file and folder names on Windows
• Pro Edition: AES-256 hardware-encrypted secure storage, with files scanned on the way in so only clean files are stored
• Management Program (SMB): manage multiple units, push scan configurations and pattern updates, export assets to CSV, and send logs to SIEM or syslog
• ElementOne (enterprise): web-based central management with everything in the Management Program plus expanded reporting and audit tooling

• OT assessment teams who need to check for malware and inventory hosts on standalone and air-gapped systems during site visits
• Systems integrators and commissioning engineers who need to verify their own laptops and media are clean before connecting to a customer's control network
• Asset owners running legacy Windows (XP, 7, embedded, Server 2003/2008) on HMIs, engineering workstations, and historians that can't support modern endpoint agents
• Sites with removable-media and transient-device requirements — for example, utilities scoping NERC CIP-010 R4 controls for transient cyber assets and removable media
• Operators who move files into air-gapped networks and need a scanned, encrypted transfer path (Pro Edition)

Key Specifications

• Scanning tool space: 64 GB with AES-256 hardware encryption
• Secure storage: 64 GB or 1 TB with AES-256 hardware encryption
• Casing material: Aluminum
• Interface: USB 3.0 Type A
• Hardware warranty: 1 year included; extends with software license renewal, up to 5 years max
• Operating temperature: 0°C to 70°C
• Relative humidity: 20% to 90%
• Certifications: CE, FCC, KCC, BSMI, VCCI, RoHS, REACH
• CPU support: x86 and x64
• Memory: Minimum required by the host OS
• Free disk space required on host: 200 MB
• Display resolution: 640 × 480 or higher
• Languages: MUI (English, Japanese)

Supported operating systems

• Windows: 2000 SP3/SP4 (virus scan and asset collection only), XP Professional SP1–SP3, Vista SP1/SP2, 7 SP1, 8, 8.1, 10, 11; Server 2000, 2003 R2, 2008 SP2, 2008 R2 SP1, 2012, 2012 R2, 2016, 2019, 2022, 2025; Storage Server 2008, 2012, 2016
• Windows Embedded: XP Embedded SP1–SP3, Embedded Standard 2009 and 7, POSReady 7 and 2009, XP Professional / Vista / 7 / 8 / 8.1 for Embedded Systems, Windows 10 Enterprise and IoT Enterprise LTSB/LTSC, Windows 11 Enterprise and IoT Enterprise LTSC, Server 2003 / 2008 / 2012 for Embedded Systems
• Linux: CentOS 5.11 (kernel 2.6.33+) and 6–10; Debian 10–13; AlmaLinux 8.10, 9.4, 9.7; Rocky Linux 8.6, 8.10, 9.4; Miracle Linux 8.6, 8.8, 9.0, 9.2; RHEL 6–9; Ubuntu 14.04–24.04

Limitations and exclusions

• No real-time scanning; it scans on demand, on schedule, or at boot
• Not supported: Windows XP with no service pack; Windows 8/8.1 on tablets; Windows RT 8/8.1
• Boot scan (Rescue Disk) is not supported on systems that can't boot from USB, or that use EFI/UEFI, RAID, GPT-initialized drives, or SCSI-connected drives
• A boot scan writes a log to the scanned machine's local disk
• Cannot be used with Storage Area Networks (SANs)
• The standard edition has no user storage area and cannot be used as a general flash drive
• Customized componentized XP builds (XP Embedded, Embedded Standard 2009) may not be supported

Do I need to install software on the machine I'm scanning? No. The scanning software runs from the Portable Inspector itself, so nothing is installed on the target system. The host needs 200 MB of free disk space for the scan.

Does the target system have to be rebooted? Not for an on-demand or scheduled scan. Portable Inspector also offers an optional boot scan (Rescue Disk), which starts the system from the USB device. It requires USB boot support and isn't available on EFI/UEFI, RAID, GPT, or SCSI-drive systems.

Which operating systems are supported? Windows 2000 SP3/SP4 through Windows 11, Windows Server 2000 through 2025, a wide range of Windows Embedded and IoT LTSC editions, and major Linux distributions including RHEL 6–9, CentOS, Debian, Ubuntu 14.04–24.04, AlmaLinux, Rocky, and Miracle Linux. On Windows 2000, only virus scanning and asset collection are supported. See the full list in the specs above.

What's the difference between the standard and Pro Edition? Both scan and remove malware and collect asset data. The Pro Edition adds AES-256 hardware-encrypted secure storage (64 GB or 1 TB) for carrying files into air-gapped environments, with every file scanned before it's stored. The Pro Edition also has an aluminum casing; the standard edition is plastic.

Does it provide real-time protection? No. Portable Inspector scans on demand, on a schedule, or at boot. It does not monitor systems continuously.

Can I use it as a regular USB flash drive? The standard edition has no user storage area. The Pro Edition includes encrypted secure storage, but only files that pass the malware scan can be saved to it.

What asset information does it collect? During each scan it captures computer information, Windows Update status, and a list of installed applications. With the Management Program, you can export asset data to CSV.

Can scan logs go to our SIEM? Yes. The Management Program supports log export to SIEM and syslog servers.

Does a scan leave anything on the host? A boot scan writes a log to the scanned computer's local hard disk. Plan for this if your change-control process tracks writes to validated systems.

What's the warranty? Each unit includes a 1-year hardware warranty. When you renew the software license, the hardware warranty extends for the same period, up to a maximum of 5 years.