Insurgo PrivacyBeast X230
This is a modified highest-end Lenovo ThinkPad X230 with QubesOS preinstalled, deactivated Intel ME, and open source firmware.
Security Features
This laptop has a number of added security features:
- Intel ME has been completely deactivated.
- The proprietary boot firmware has been replaced with Heads, a "configuration for laptops and servers that tries to bring more security to commodity hardware" through the use of free software.
- The boot and firmware integrity is "sealed" with an included NitroKey Pro v2, allowing you to visually validate that nothing has been modified in transit or at boot.
Upon receiving the device and ensuring everything is configured securely, you will be asked to re-do the installation procedure yourself with keys that only you control.
Qubes Certified Hardware
The Insurgo PrivacyBeast X230 has passed Qubes 4.0 Hardware Certification. It not only met all the requirements defined by the Qubes team, but exceeded them thanks to its additional security functionality.