GLIMPS Malware for Sheep Dip Systems
Boost detection in your sheep dip systems and USB kiosks with AI to sanitize every removable media before it enters sensitive environments.
Neutralize threats carried by USB media
AI detection to complement your sheep dip system
GLIMPS plugs into your existing USB scanning station to analyze every file with more than 25 detection engines, including around ten AI-based engines. It identifies zero-day threats, polymorphic variants, and APTs that traditional antivirus engines miss.
~3-second average analysis time
Analysis time fits the operational throughput of a USB checkpoint. Users insert the media, files are scanned by the sheep dip system and by GLIMPS, and only clean files are transferred.
End-to-end sovereignty
GLIMPS and its sheep dip partners (TYREX, HOGO) are French solutions. The full sanitization chain remains sovereign, with no dependency on non-European technologies.
How does GLIMPS enhance sheep dip detection?
Removable media (USB sticks, external drives, CD/DVD) is one of the most exploited attack vectors for reaching sensitive environments: USB drop, HID spoofing, distribution of infected drives. GLIMPS Malware for Sheep Dip Systems connects to your existing sheep dip systems and decontamination kiosks to enhance detection:
TYREX partnership – TYREX sheep dip stations embed GLIMPS Malware as an additional analysis engine. Every file detected on the USB media is submitted to the code conceptualization engine and the 25 GLIMPS detection engines. The combination of two French technologies delivers one of the most advanced detection levels on the market, including variants and unknown malware.
HOGO partnership – HOGO S3 sheep dip stations include Secure File Sharing (SFS), enabling a “no-USB” policy with a centralized checkpoint. GLIMPS Malware complements file analysis before transfer to the secure sharing server (S3SRV). The process is fully automated and authenticated, with individual, secure sharing sessions.
GLIMPS Malware API – Any sheep dip or decontamination kiosk vendor can integrate GLIMPS as an analysis engine via the REST API. Organizations that built their own sheep dip station can also connect GLIMPS to benefit from AI detection without changing solution. Open source libraries in Python and Go accelerate integration.
All results can be reviewed in GLIMPS Malware Expert (optional) for deep investigation, triage, and retrohunt. If GLIMPS is already deployed on other attack surfaces (email, EDR, network, business applications), Expert provides a unified view across entry vectors. The SOC gets full visibility into all detected threats, regardless of the entry point.
AI detection designed for sensitive environments
Detect unknown threats
Traditional antivirus engines embedded in sheep dip systems rely on known signatures. GLIMPS adds a Deep Learning detection layer that identifies variants, zero-day malware, and APTs specifically targeting industrial and classified environments.
Structured, actionable verdict
The verdict is returned as JSON with the detection score and identified malware families. The sheep dip system automatically applies the defined policy: allow transfer, block the file, or move it to quarantine.
Cache and performance
Built-in caching prevents resubmission of files already analyzed. Designed for regular USB throughput in operationally constrained environments.
GLIMPS Malware for Sheep Dip Systems: who is it for?
Context: Your organization handles USB media in sensitive environments (defense, energy, industry, critical infrastructure) and must ensure no malicious file enters the trusted network.
What GLIMPS delivers: A sovereign AI detection layer that connects to existing sheep dip systems to identify sophisticated threats before any introduction into secured environments. Aligned with GDPR and NIS2. GLIMPS is used by ANSSI to protect government agents through jecliqueoupas.cyber.gouv.fr.
Context: You develop or distribute sheep dip systems, decontamination kiosks, or secure transfer solutions and want to strengthen detection.
What GLIMPS delivers: A documented REST API and open source libraries to rapidly integrate GLIMPS AI detection into your solution. GLIMPS acts as a complementary file analysis engine, compatible with your existing architectures. A technology partnership to differentiate your offer.
Context: You operate USB checkpoints in industrial sites or air-gapped environments, using either an off-the-shelf sheep dip station or an in-house solution.
What GLIMPS delivers: Transparent ~3-second per-file analysis that does not slow operational throughput. GLIMPS connects to your station via API, regardless of vendor. If GLIMPS is already used elsewhere, the SOC benefits from a centralized view of all threat vectors.
How customers use GLIMPS Malware for Sheep Dip Systems
USB sanitization in defense and critical environments
An operator inserts a USB drive into a TYREX sheep dip station before accessing a classified network. Each file is analyzed by the station’s antivirus engines and then by GLIMPS AI engines. Unknown malware and variants are detected before any introduction into the secured environment.
“No-USB” policy with Secure File Sharing
An industrial organization enforces a “no-USB” policy using HOGO S3 stations. Removable media is controlled through a centralized checkpoint. GLIMPS analyzes each file before transfer to the secure sharing server (S3SRV). Sessions are authenticated and individual, ensuring full traceability.
Why choose GLIMPS Malware for Sheep Dip Systems?
Proprietary AI detection
GLIMPS’ code conceptualization technology, developed within the French Ministry of the Armed Forces by GLIMPS’ founders, identifies zero-day threats and variants that antivirus engines embedded in sheep dip stations do not detect . Detection rate above 99%.
Sovereign French ecosystem
GLIMPS, TYREX, and HOGO are French solutions. The entire sanitization chain remains sovereign, with no dependency on non-European technologies.
Used by the French Armed Forces
Used by the French Armed Forces and incubated by the French Ministry of the Armed Forces. French Tech 2030 award winner.
Frequently asked questions
GLIMPS is already natively integrated in TYREX and HOGO sheep dip stations. For other vendors or in-house developed stations, integration is done via the GLIMPS Malware REST API. Open source Python and Go libraries are available on GitHub to speed up development. Contact us to establish a technology partnership.
Analysis takes about ~3 seconds on average per file. A caching system prevents resubmission of files already analyzed. The process is designed not to slow down USB checkpoint throughput.
Yes, GLIMPS Malware for Sheep Dip Systems is available as SaaS (hosted in France), on-premise, and in SecNumCloud environments. On-premise is particularly well suited to air-gapped and classified environments.
Traditional antivirus engines rely on known signatures. GLIMPS adds a Deep Learning and Machine Learning detection layer that understands code structure and identifies unknown threats, polymorphic variants, and APTs. The approaches are complementary: antivirus covers known threats and GLIMPS detects what they miss.
Request a demo
Are you interested in our products? Contact our experts and discover the full power of our solution!
Request a demo
