USBTripwire

USBTripwire is a lightweight endpoint agent plus a web console that enforces strict control over USB and other removable media on Windows and macOS. It blocks unknown devices by default, allows admins to approve specific device IDs, and logs every insertion, file copy, and policy violation for audit and incident response. The app focuses on the boring but common reality: many breaches and data leaks still happen through unmanaged peripherals, contractors, and shared workstations. It includes offline-safe policies (so laptops remain protected without VPN), tamper resistance, and simple exception workflows so IT isn’t buried in tickets. This is not a full EDR replacement; it’s a narrow, high-signal control that reduces attack surface and data exfiltration risk with minimal endpoint performance impact.