OPSWAT MetaDefender Kiosk is a hardware and software appliance designed to secure air-gapped, critical infrastructure, and operational technology (OT) environments from threats originating from removable media. It functions as a secure checkpoint that scans and sanitizes files from portable storage like USB drives, SD cards, and optical media before they are introduced into a protected network. The system utilizes a combination of threat prevention technologies, including multiscanning with over 30 anti-malware engines, Deep Content Disarm and Reconstruction (Deep CDR), sandboxing, and file-based vulnerability assessment. It also incorporates Data Loss Prevention (DLP) to redact sensitive data and enforces security policies to control data transfers.
Available as a hardware appliance or as a software application for Windows and Linux, the system can operate in offline environments and receive updates without direct internet connectivity. MetaDefender Kiosk can function independently or integrate with other systems such as Managed File Transfer (MFT), Unidirectional Security Gateways, and MetaDefender Endpoint Validation to create secure file workflows. The system is managed through OPSWAT Central Management, which provides centralized policy administration, visualized reporting, device health monitoring, and user authentication via services like Active Directory.