Product Details

Most malware that reaches an air-gapped control network walks in on a USB drive: a contractor's project files, a vendor's firmware update, a technician's diagnostic tools. Plants know they should check that media, but a laptop with antivirus in the control room depends on someone with the right skills being there and remembering to use it.

Safe Port turns that check into a fixed station. It's a fanless computer with a 12.1" touchscreen on a stand, meant to sit wherever media enters the site. Someone plugs in a USB drive, taps the screen, and gets a clear result. Safe Port can log, clean, or lock based on what it finds, and it scans at up to 7,200 files per minute in TXOne's lab testing. Clean files can then be moved to secure OT transfer devices for the trip onto the plant floor.

Safe Port also acts as a hub for TXOne Portable Inspectors. It pushes pattern updates to them automatically and collects their scan and audit logs, which it passes to TXOne's ElementOne platform. Sites using Portable Inspectors to scan air-gapped hosts get one place to keep those devices current and their records together.

Who should deploy this technology?

  • Plants with regular contractor and vendor traffic that need every incoming USB drive checked before it touches the control network
  • Sites without a full-time security team, where operators or maintenance staff need to run media checks themselves
  • Teams already using TXOne Portable Inspectors that want automated pattern updates and centralized log collection
  • Asset owners with removable-media policies to enforce, for example utilities scoping NERC CIP-003 and CIP-010 controls for removable media and transient devices [PENDING Jim/Phil sign-off on this mapping]
  • Cleanroom and gowned environments (pharma, semiconductor, food), where the touchscreen works through cleanroom gloves

Why choose txOne Safe Port?

  • Cleans USB drives in under a minute (TXOne claim) before they reach OT systems
  • Touchscreen interface built for operators, not security analysts
  • All-in-one unit with no keyboard or mouse
  • Fanless design with no airflow filters to service
  • Secure transfer of malware-free files from external media to secure OT transfer devices
  • Collects and aggregates Portable Inspector audit data for reporting in ElementOne
  • Regular detection pattern and software updates

FAQs

What does Safe Port actually do? It scans removable USB media for malware and cleans it before the media is used in your OT environment. It also collects scan and audit logs from TXOne Portable Inspectors and sends them to ElementOne.

How fast is it? TXOne rates it at up to 7,200 files per minute, measured in their lab, and says it sanitizes a USB device in under a minute. Real results depend on the drive's contents and system configuration.

What happens when it finds malware? Safe Port supports three scan actions: Log, Clean, and Lock.

Which file systems can it scan? FAT16, FAT32, NTFS, and exFAT.

Does it need an internet connection for updates? No. It supports both online and offline pattern updates, so it can run at sites with no internet connection.

Does someone need security training to use it? No. It's designed for non-technical users, with a touchscreen interface and simple scan results.

Can operators use it with gloves on? Cleanroom gloves are supported. General work gloves may work, with reduced touch sensitivity.

Does it need a keyboard or mouse? No. Everything runs from the touchscreen.

How does it work with Portable Inspector? Safe Port pushes pattern updates to Portable Inspectors automatically and collects their scan and audit logs for aggregation in ElementOne.

Where can it be installed? Indoors, in an operating range of 0°C to 50°C and 0–90% non-condensing humidity. It's fanless, so the case can get hot; keep it out of direct sunlight.

What maintenance does it need? Very little. The fanless design means there are no airflow filters to clean or replace. Keep detection patterns up to date.

About txOne ElementOne Centralized Management Platform

ElementOne is TXOne's central management platform for Portable Inspector, built for enterprises running scans across many sites. It gathers the asset data each Portable Inspector collects during a scan and shows it on one dashboard: asset types, operating systems, critical vulnerabilities, and the top 10 missing patches. You can drill into any asset to see its vulnerabilities, OS updates, and installed applications. It also produces malware-free reports you can use for audits. ElementOne runs as a virtual appliance on VMware ESXi 6.0+ or Workstation 16.0 Pro+ and manages up to 1,000 Portable Inspectors on 4 CPU cores and 8 GB of memory.

  • Overview dashboard with asset statistics, vulnerable assets, and the top 10 missing patches
  • Asset risk assessment showing how severe each vulnerability is, with details and links to related knowledge-base articles
  • Malware-free reports covering scan summaries, system info, scanner configuration, installed applications, Windows Updates, vulnerability scans, and missing patches
  • Group-based management of Portable Inspector and Safe Port devices, with separate scan and access settings for each group
  • Role-based access control, so each user sees only the systems they're authorized for
  • Central scan log management and SIEM integration

Summary

Most malware that reaches an air-gapped control network walks in on a USB drive: a contractor's project files, a vendor's firmware update, a technician's diagnostic tools. Plants know they should check that media, but a laptop with antivirus in the control room depends on someone with the right skills being there and remembering to use it.

Safe Port turns that check into a fixed station. It's a fanless computer with a 12.1" touchscreen on a stand, meant to sit wherever media enters the site. Someone plugs in a USB drive, taps the screen, and gets a clear result. Safe Port can log, clean, or lock based on what it finds, and it scans at up to 7,200 files per minute in TXOne's lab testing. Clean files can then be moved to secure OT transfer devices for the trip onto the plant floor.

Safe Port also acts as a hub for TXOne Portable Inspectors. It pushes pattern updates to them automatically and collects their scan and audit logs, which it passes to TXOne's ElementOne platform. Sites using Portable Inspectors to scan air-gapped hosts get one place to keep those devices current and their records together.

txOne

SKU:TXPKZBE2X0001

txOne Safe Port Media Scanning Station for OT Systems

Included with this product:

  • ElementOne software license (required) - $275/unit
  • Safe Port software license (required) - $8500/unit
Regular price
$18,375.00
Sale price
$18,375.00
Regular price
Optional accessories

Why we endorse this product:
Why we endorse this product:
Gives non-security staff a simple, touch-driven USB check at the plant entrance
Scans up to 7,200 files per minute (TXOne lab figure) and supports Log, Clean, and Lock actions
Centralizes Portable Inspector logs for audit reporting in ElementOne

Product Specs

Key Specifications

Safe Port computer

  • CPU: Intel Core i5-1135G7
  • RAM: 32 GB
  • System storage: 256 GB
  • User storage: 512 GB
  • Interfaces: 2 × USB 3.2 Type A, 1 × USB Type-C (ALT mode), 1 × RJ-45 LAN, 1 × lockable DC-in jack
  • Power: +12 to 24 VDC; 19V/135W adapter
  • Weight: 2,285 g
  • Operating temperature: 0°C to 50°C
  • Non-operating temperature: −30°C to 85°C
  • Storage temperature: 0°C to 70°C
  • Operating humidity: 0–90% (non-condensing)
  • Non-operating humidity: 0–95% (non-condensing)
  • Certifications: CE, FCC, VCCI, CB, UL, KC, REACH, RoHS

Touch panel

  • Display: 12.1" TFT active-matrix touch panel
  • Resolution: 1280 × 800 (16:10)
  • Brightness: 600 nits (without touch panel protector)
  • Touch and signal interface: USB Type-C
  • Power: 20 VDC, 15 W over USB Type-C
  • Weight: 1,600 g
  • Operating temperature: 0°C to 50°C
  • Non-operating temperature: −30°C to 85°C
  • Operating humidity: 0–90% (non-condensing)
  • Non-operating humidity: 0–95% (non-condensing)
  • Certifications: CE, FCC, CB, KC, REACH, RoHS

Stand

  • Weight: 350 g

Dimensions (from datasheet drawing): 308 mm wide × 275 mm high × 177 mm deep, assembled

Scanning and security

  • Anti-malware scanning at up to 7,200 files per minute (measured in TXOne's lab; results vary with conditions and configuration)
  • Supported file systems: FAT16, FAT32, NTFS, exFAT
  • Scan actions: Log, Clean, Lock
  • Online and offline pattern updates
  • Automated pattern updates for TXOne Portable Inspectors
  • Portable Inspector scan and audit log aggregation to ElementOne
  • System hardening for anti-tampering protection
  • Kensington security slot

Limitations and exclusions

  • Operating range is 0°C to 50°C. Plan for a conditioned space rather than an unheated gatehouse or outdoor enclosure.
  • Fanless, passive cooling: the case surface can get significantly hot during operation. Don't place it in direct sunlight.
  • Gloved touch is supported with cleanroom gloves. General work gloves may work with reduced sensitivity.
  • Only FAT16, FAT32, NTFS, and exFAT are listed. Media formatted with other file systems isn't covered by the datasheet.

Don't see what you're looking for?

Give us a call at  (508) 289-1195

Resources for txOne Safe Port Media Scanning Station for OT Systems