Request a demo
Bifrost · Australian made

The trusted bridge for untrusted data

Offline, zero-persistence malware scanning and data inspection for removable media — purpose-built for air-gapped and sensitive environments.

7
Scan phases per inspection
5k+
YARA detection rules
72M
Known-good file hashes
0
Data retained after shutdown

What is Bifrost?

Bifrost is a purpose-built scanning kiosk for removable media — USB drives, SD cards, portable hard drives — entering or leaving air-gapped and classified environments. It's a physical device that sits at the boundary: plug in a drive, get a malware and content report, and know what's on the media before it crosses the gap. The device retains nothing. Every scan is wiped from RAM on shutdown.

What Bifrost does

Operates offline

Purpose-built for air-gapped networks. No network interfaces, no telemetry, no dependencies on external services.

Zero persistence

Runs entirely in RAM. Sanitised to ISM-0351/0352 on shutdown. Nothing survives a power cycle.

Multi-classification scanning

One system covers every classification level. Keyword sets and rule profiles adapt per session, from unclassified through to the highest caveats.

Managed updates

Signature engine and scanning rules delivered through a sealed image pipeline. Ongoing support built in.

  1. Boot

    Power on from the sealed, write-protected boot media. The system comes up in seconds, entirely in RAM.

  2. Insert target media

    Connect the removable media to the hardware write-blocker. Bifrost mounts it read-only and begins inspection.

  3. Read the report

    Review findings on screen or via printed report. Shut down — nothing persists, no trace left behind.

Deployment options

One image, multiple form factors

Bifrost runs the same sealed image on both configurations. Choose the form factor that fits your environment — the scanning capability is identical.

Desktop kiosk

Compact form factor for fixed installations. Sits on a desk or countertop at the checkpoint. Connects to an external display and write-blocker. Suited to entry points, guard stations, and classification control zones where the kiosk stays in one place.

  • Small-form-factor hardware
  • External display and peripherals
  • Permanent installation

Portable unit

All-in-one laptop configuration for field use, deployments, and environments where the kiosk needs to move. Built-in display and integrated write-blocker. Same sealed boot media, same scanning pipeline, same reports — just mobile.

  • Integrated display and write-blocker
  • Field-deployable
  • Same image as the desktop kiosk

Built to ISM-0351/0352 for RAM sanitisation. Air-gapped by design. Nothing leaves the device.

Designed and built in Australia

Get in touch →