OPSWAT flies air-gapped cyber kiosk toward space in prevention-first test

OPSWAT has released footage of its MetaDefender Kiosk Mini sanitising removable media through a near-space cybersecurity validation mission, a test the critical infrastructure protection company is using to press a broader argument about how security must function where connectivity, patching, and onsite support cannot be guaranteed. The device, which cleans USB sticks, external drives, and other removable media before they enter sensitive environments, processed thousands of malware samples throughout the flight, including during freefall after the carrier balloon burst.

The mission carried the kiosk to an altitude of 104,883 feet, or 31,968 metres, where it endured high radiation, temperatures as low as minus 45.6°F, and near-vacuum pressure of 9.5 hPa. After roughly 230 minutes aloft the balloon burst, and the device continued sanitising files as it fell, operating until it came down in a river. For a category of product usually validated in industrial plants and secure facilities, the exercise was designed as a deliberately theatrical stress test of a claim that matters well beyond orbit: that security has to hold in places where no one can intervene.

The test matters less for the altitude than for what it says about who fixes systems that fail

The significance of the demonstration lies in its treatment of autonomy rather than endurance. During the flight the MetaDefender Kiosk Mini ran as an independent system on local compute, without any reliance on cloud connectivity, using the company's Deep CDR technology to process malware samples drawn from removable media. That technology assumes any given file may be malicious, strips out risky active content, and regenerates a clean version, an approach positioned for defence and other settings where a network link may be delayed, degraded, denied, or simply absent.

The distinction OPSWAT is drawing separates prevention-first architecture from the detect-and-respond model that dominates enterprise security, where alerts flow to analysts and fixes arrive through connectivity that a spacecraft or a remote industrial site may never have. For sectors that operate at the edge of reliable infrastructure, the mission functions as a proof point that sanitisation can happen deterministically at the point of entry rather than depending on a chain of human response that extreme environments break.

The timing tracks a shift in how organisations account for orbital risk. In its Global Cybersecurity Outlook 2026 report, the World Economic Forum found that 15% of global organisations now factor dependence on space-based assets such as satellites, GPS, and satellite communications into their overall cyber risk mitigation strategy. Most publicly disclosed incidents still originate from terrestrial systems, yet the report signals a recognition that as access to orbit becomes cheaper and more routine, the assumption that attacks begin on Earth will not hold indefinitely.

That trajectory carries consequences for how governments and commercial operators alike think about defensive posture. As orbital access widens, spacecraft, satellites, and other assets can be moved closer to a target to support electronic warfare, interception, jamming, spoofing, or intelligence gathering, extending the threat surface into a domain where remediation is hardest and physical access is effectively impossible. The kiosk mission is OPSWAT's attempt to attach a concrete piece of hardware to an argument the sector has so far treated largely in the abstract.

Rugged certification ties the space claim back to the industrial ground the product already occupies

The near-space test extends a rationale that already underpins the product's terrestrial deployments. Companies install MetaDefender Kiosk in environments defined by flammable materials, toxic chemicals, humidity, dust, and swings in temperature, and the device holds Class 1, Division 2 certification issued by UL, a standard requirement for equipment used in oil and gas, chemical, and mining operations where flammable gases or vapours may be present. The flight demonstrated resilience to frequent movement, sharp temperature shifts, water exposure, high UV radiation, and near-vacuum pressure, all while running offline.

Benny Czarny, Founder and Chief Executive Officer of OPSWAT, set the mission against the operational reality of systems that sit beyond human reach. "Space systems should be treated as critical infrastructure, and the cyber infrastructure that supports them should be treated as mission-critical infrastructure," Czarny said. "Cybersecurity in space cannot be built around the idea that someone on Earth will always be available to fix the problem. It must be local, deterministic, segmented, and prevention-first."

The framing points to a design philosophy in which trust has to be established before deployment rather than maintained through intervention. "More than the altitude, technology, and cool video, the idea was that cybersecurity has to work in environments where humans cannot easily reach, repair, or reset," Czarny added. "In space, there is no simple onsite support, quick replacement, or easy second chance. The system must have full trust before it leaves the ground." For a market increasingly confronting assets it cannot physically service, that is the proposition OPSWAT is asking the sector to weigh.