SafeXs onboard, non-bypassable security processor encrypts all data copied to and from the device - it has UK Government & Public Sector CESG / CCTM Approval , FIPS 140-2 certification, and also features FIPS 197 certified AES 256bit CBC encryption technology.

SafeXs is also available in a FIPS 140-2 edition for those customers who absolutely must have this certification, however original SafeXs / SafeStick is already more secure than the 140-2 standard.

SafeStick (now replaced by the SafeXs) features total, automatic, hardware based encryption of all data on the SafeStick (now replaced by the SafeXs) - and has a major key difference - it can be fully controlled and managed via an optional Central Enterprise Management Console.

Encryption is totally transparent and requires no software installed anywhere.  Simply plug it in, enter your strong password and starting using it.

SafeStick (now replaced by the SafeXs) provides 100% FULL encryption.  All files, folders and sectors are encrypted automatically - nothing is left to chance or user error.

For managing ten to hundreds of thousands of SafeStick (now replaced by the SafeXs)s in a Corporate environment, a full management and reporting console called "SafeConsole" is also available which can hook directly into Active Directory.  More info below.

• SafeXs  (previously SafeStick)
• SafeXs FIPS (previously SafeStick FIPS)

SafeStick Supersonic has been discontinued.  There is no equivalent SafeXs drive.

SafeConsole is a feature rich web based application that you install in-house, which allows you to manage hundreds of thousands of SafeStick (now replaced by the SafeXs)s wherever they may be in the world.

With SafeConsole you can KILL lost sticks, backup data automatically and reset forgotten user passwords.

SafeConsole provides full Windows Active Directory integration (although AD is NOT required), management, assigning of different policies depending on OU group membership, changing of password policies, remote reset of passwords, auditing, data shadowing, reporting, disabling, wiping of sticks and much, much more.

With SafeConsole you can also Backup your users SafeStick (now replaced by the SafeXs) remotely, lock down your PC's to only accepting SafeStick (now replaced by the SafeXs) via "Lockout" Port Control, Easyshare (share individual files with a temporary PIN), File Publisher across the WAN and Autorun management.

Watch the demo

SafeConsole LITE features;

• Password Reset - if users forget their password they can be reset via challenge & response procedures
• Device State Management - remotely ‘kill’ rogue drives and erase all data. An administrator can set the device state to '‘killed’, ‘disabled’ and ‘lost’.
• Password Policy - configure multiple complex password policies within SafeConsole and assign them to different groups within the organisation.
• Auditing, Logging & Device Inventory. Find out who owns what drive, when they used it, where, and what files were accessed.

*Excl. NHS contract customers.

Current apps include anti-virus, password manager, VPN Client, Skype™, Web Browsers, IM Client, Word Processor, Spreadsheet, Office tools and more.

• Watch the demo of StickApps in action.

Unless your data is encrypted it is incredibly simple for anyone to view, remove and share ANY of the data that was stored on it. 

There have been many high profile, embarrassing instances recently where company employee details, patient details, bank details, customer databases, credit card details and other confidential information has been retrieved in this way and either distributed or used for criminal purposes.

If your company does not lock down removable drive access, and insist on data being stored on an encrypted devices they are running a huge security risk.

Official documentation can be found on the NIST website.

Unlike other solutions there are NO backdoor or secondary fixed passwords which allow access to SafeStick (now replaced by the SafeXs).  

Password recovery is certificate based and one-time-use passwords are generated as long as procedures are followed.    Password recovery can ONLY happen one time, on one stick that is was generated for.  Codes are NOT replayable / reusable.

This means that you can share individual files, without giving the person your password which would provide full access to the drive.

You must activate, manage and deploy EasyShare for select users via SafeConsole. 

You must activate, manage and deploy Write Protect via SafeConsole. 

SafeStick (now replaced by the SafeXs) is also available in a FIPS 140-2 Certified edition.   SafeStick (now replaced by the SafeXs) FIPS.

"This represents a welcome first for CCTM to list a certificated USB Flash Drive product", says Peter Hayes, Head of the CCTM Secretariat ISC. "We know there are many parts of the wider public sector where handling data classified below the RESTRICTED level brings uncertainties. It is vital that people are using approved products coupled with appropriate procurement decisions, risk management and strong procedural measures. With SafeStick (now replaced by the SafeXs) now carrying the CCTM certificate, part of that now becomes a lot easier", say Hayes.

SafeStick (now replaced by the SafeXs) also features FIPS 197 AES certification for the encryption technology. See #825 on the FIPS website.

Also several other "high profile" units have also been cracked.  for example the McAfee MXI stick has been cracked, as has the Secustick.

Many other vendors "secure" drives have been hacked - included Sandisk's Cruzer, Verbatims and other "most secure" FIPS offerings! Read more.

November 2010:  SanDisk terminated Cruzer Enterprise (the entire Cruzer Enterprise secure USB product family), and will no longer be offering any products. <<more>>

Softek's own testing has produced some interesting results.  SafeStick (now replaced by the SafeXs) has proven to withstand:

• Repeated rolling over by a 2500lb V8 Range Rover.
• A full washing machine cycle at 90%
• 30 seconds of acetylene blow torch
• Repeated hits with a 2lb lump hammer
• 30 seconds of red-hot angle grinder sparks
• A whack with a 10lb sledge hammer!

Videos are available from our website or Youtube.

• SafeStick (now replaced by the SafeXs) has also been independantly tested - read the latest review!

You can also configure this policy via SafeConsole.

With a MobileID factory installed on a SafeStick (now replaced by the SafeXs) (users cant change or delete it!) SafeStick (now replaced by the SafeXs) becomes a full authentication token which can be used to authenticate users against Windows Logon, Outlook Web Access, VPN, Websites, Citrix and more.

By providing your users with a SafeStick (now replaced by the SafeXs) MobileID token, you can require users to enter their username, password, PLUS a one-time password which can only be generated by their own MobileID token.

You can also secure Windows logon by requiring a user has their SafeStick (now replaced by the SafeXs) inserted, and the correct password entered before they can logon to Windows / your network!

A Deepnet Authentication Server installation (which manages the back-end tokens, secured applications and users) is required before you can deploy and use SafeStick (now replaced by the SafeXs) MobileID. Deepnet authentication is quick, easy to setup and very cost effective to deploy.  Information on Deepnet MobileID can be found here.

SafeConsole is required to deploy and manage MobileID.

Otherwise please watch the SafeStick (now replaced by the SafeXs) MobileID demo.

If the password is forgotten then there are two options. 

• The stick can be reset, which permanently wipes all the data
• Using the optional Enterprise Management Software (SafeConsole) a company IT Department can use challenge / response to remotely reset the password as required and as pocily dictates.

Please note that you cannot retrospectively recover lost user passwords with SafeConsole.  Therefore it is critical to decide if you wish to be able to recover lost user passwords.  If it is, then you must deploy SafeConsole.

• Small size
• Custom passwords of any complexity.
• FIPS 140-2 Edition and CESG Government approval
• Minimum password length / requires strong passwords.
• Zero footprint on the PC / Mac / Linux
• Secure PKI password recovery
• Ultra fast, non-bypassable hardware encryption
• Use as an Authentication token (Deepnet MobileID / Cryptocard)
• Brute force attack protection
• Tampersafe electronics
• Timer / Userlock
• Central management / auditing / deployment with many killer features - backup, publisher etc.
• Built in Malware / virus protection
• Auto-Lockdown and / or reminder if left in computer for a set period
• No Admin rights required
• Custom "Return to Owner" messages in software.
• Works with all Endpoint Security solutions such as DeviceLock and Vigilance Pro to prevent data leakage
• ...and many many more!