What about installers and executables from vendors?

The Country of Origin module lets you allow or block signed executables and installers with your own rules.

Does it work on air‑gapped networks?

Yes. klearis runs on-premise and in air-gapped and isolated networks, with no cloud dependency.

Can users sanitize many files at once?

Yes. With the desktop client, multiple files can be sanitized together by drag and drop.

Removable Media Security

Every file from a USB drive rebuilt before it is used.

USB drives and vendor laptops still carry files into networks that email and web filters never see. klearis rebuilds them with Content Disarm and Reconstruction (CDR) before they are used, even offline.

A USB drive inside a glowing ring, with red particles leaving it

A real example

A USB drive from a trusted vendor.

A field engineer brings a configuration file on a USB drive for a system that is not connected to the internet.

01The drive was last used on a laptop outside your network.

02The file looks familiar and opens in the usual tool.

03It carries code that runs on the isolated system.

WHAT HAPPENS TO IT

ANTIVIRUSIsolated systems often run outdated signatures, so new threats go unseen.

SANDBOXThere is rarely a sandbox on an isolated network, so nothing analyzes the file.

KLEARISThe file is rebuilt on the desktop client before it is used. Only clean content reaches the system.

01 · MEDIAA drive is connectedFiles are selected from a USB drive or other media.

02 · KLEARISklearis rebuildsOnly verified elements make it into the rebuilt file.

IDENTIFYDISARMREBUILD

03 · NETWORKClean files in useOnly the sanitized versions are used.

DESKTOP CLIENTOn the desktopDrag files onto the client, or right-click one, and get rebuilt copies back.

COUNTRY OF ORIGINControl installersSigned installers are allowed or blocked by your own rules.

TRUE FILE TYPEIdentified by structureThe true format is confirmed from the binary structure, not the extension, so a disguised file is rejected.

CONTENT SANITIZEDActive content strippedMacros, scripts, embedded objects and other active content are removed, and a clean file is rebuilt.

An airlock with two doors, a file waiting inside before the inner door opens

What changes

Bring files in.Leave the risk at the door.

The drive comes in. The risk stays at the door. Removable media still carries work into places networks cannot reach. klearis rebuilds those files before they are used, without a cloud connection.

ENGINEERSDrag files in, or right-click to sanitize.

SECURITYFiles from vendors and contractors are treated like any other.

OPERATIONSWorks on isolated and air-gapped networks.

DESKTOP CLIENTOn the desktopClean a whole folder from the desktop in a few clicks.

COUNTRY OF ORIGINControl installersDecide which signed installers are allowed through.

ON-PREMISEYour servers, your rulesRuns on your own servers, including air-gapped networks. Nothing goes to the cloud.

POLICYRules per groupCustom policies per user group and integration, with allow and block rules.

At the door

Make the secure way the easy way.

Put the desktop client on a shared computer at reception, and visitors and contractors can clean their USB files before they enter. When cleaning a drive is faster than arguing about it, people use it.

VISITORSA clear step at the door.

SECURITYEvery file from outside is rebuilt.

SITESWorks on isolated networks.

Files flying into a desktop screen with a download arrow and leaving clean

#hs_cos_wrapper_dnd_area-module-23 .cp-faq__a { grid-template-rows: 1fr !important; } #hs_cos_wrapper_dnd_area-module-23 .cp-faq__a[hidden] { display: grid !important; } #hs_cos_wrapper_dnd_area-module-23 .cp-faq__a-inner { overflow: visible !important; }

FAQ

Questions about Removable Media Security

With the desktop client, users select or drag files, or right-click a file, to sanitize it before use.

Every file from a USB drive rebuilt before it is used.

Threats walk in on USB drives, vendor laptops and update packages.

A USB drive from a trusted vendor.

Clean before it enters.

For Removable Media Security

Bring files in.Leave the risk at the door.

At the desk, offline.

Make the secure way the easy way.

Questions about Removable Media Security

Let's run it on your files.

Every file from a USB drive rebuilt before it is used.

Threats walk in on USB drives, vendor laptops and update packages.

A USB drive from a trusted vendor.

Clean before it enters.

For Removable Media Security

Bring files in.Leave the risk at the door.

At the desk, offline.

Make the secure way the easy way.

Questions about Removable Media Security

How are files from a USB drive sanitized?

What about installers and executables from vendors?

Does it work on air‑gapped networks?

Can users sanitize many files at once?

Let's run it on your files.