Choosing an air-gapped mini desktop is less about finding the smallest case and more about controlling every path data can take into or out of the machine. My leading picks are the HP Pro 400 G9 for its business-class security and strong processor, the GEEKOM A7 for Linux-friendly flexibility, and the Lenovo ThinkCentre Neo 55s for a workstation-style setup with Windows Pro and wired networking. None is air-gapped out of the box: each has connectivity that must be disabled, removed, or managed.
Get privacy and security gear delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
The tradeoff is between performance and isolation discipline. The HP and Lenovo SFF systems offer capable processors and familiar enterprise features, while the smaller GEEKOM models provide more flexible mounting and storage options. I rank these by how well their stated features support a controlled, maintainable offline workstation—not by treating security labels as proof of air-gap capability. Buyers should verify hardware configuration, firmware controls, and wireless-module options before relying on any system for sensitive work.
Key Takeaways
- None of these desktops is air-gapped as sold: Wi-Fi and Bluetooth must be disabled or physically removed, and Ethernet must remain disconnected for a strict air gap.
- HP Pro 400 G9 leads for CPU headroom and business security features, but its Wi-Fi 6E and Bluetooth radios need explicit handling.
- GEEKOM A7 is the most appealing compact Linux-oriented option, with Wi-Fi 6E, Bluetooth, and 2.5GbE still requiring isolation controls.
- Lenovo ThinkCentre Neo 55s combines Windows 11 Pro, dual 4K support, and a conventional SFF layout; check the open-box status and warranty terms.
- Lenovo Tiny is the basic office choice, but its 8GB RAM makes it less suitable for heavier local analysis than the 16GB systems.
| HP Pro 400 G9 SFF Mini PC Desktop Computer with 16GB DDR5 RAM and 512GB SSD |  | Best Overall for a Managed Offline Workstation | Processor: Intel Core i5-14500 | Memory: 16GB DDR5 | Storage: 512GB SSD | VIEW ON AMAZON | See Our Full Breakdown |
| Lenovo Tiny Mini Business Desktop Computer with Intel Quad-Core, 8GB DDR5 RAM, 512GB SSD, WiFi & Bluetooth, Dual Display Support, 4K UHD Output, Windows 11 Pro |  | Best Entry-Level Choice for Simple Offline Tasks | Processor: Intel N-series quad-core | Memory: 8GB DDR5; upgradeable to 32GB | Storage: 512GB SSD | VIEW ON AMAZON | See Our Full Breakdown |
| GEEKOM A5 2027-Ready Agentic AI Mini PC, Ryzen 7 7730U, 16GB RAM, 500GB SSD |  | Best for Expandable Local Compute | Processor: AMD Ryzen 7 7730U, 8 cores and 16 threads | Memory: 16GB DDR4; supports up to 64GB | Storage: 500GB NVMe SSD; stated maximum 10TB | VIEW ON AMAZON | See Our Full Breakdown |
| GEEKOM A7 Mini PC, AMD Ryzen 5 7535HS, 16GB DDR5, 1TB SSD (Expandable) |  | Best Compact Linux-Friendly Pick | Processor: AMD Ryzen 5 7535HS | Memory: 16GB DDR5; supports up to 64GB | Storage: 1TB PCIe Gen4 SSD; expandable to 4TB | VIEW ON AMAZON | See Our Full Breakdown |
| Lenovo ThinkCentre Neo 55s SFF Business AI Desktop, AMD Ryzen 7, 16GB DDR5, 512GB SSD, 2-Monitor 4K Support, Windows 11 Pro, External DVD Bundle |  | Best SFF Alternative for Windows Pro and Wired Workflows | Processor: AMD Ryzen 7 250, up to 5.10 GHz | Memory: 16GB DDR5 | Storage: 512GB SSD | VIEW ON AMAZON | See Our Full Breakdown |
| airgapped mini desktop | Processor | Memory | Storage | Wireless |
|---|---|---|---|---|
| HP Pro 400 G9 SFF Mini PC Desk | Intel Core i5-14500 | 16GB DDR5 | 512GB SSD | Wi-Fi 6E, Bluetooth 5.3 |
| Lenovo Tiny Mini Business Desk | Intel N-series quad-core | 8GB DDR5; upgradeable to 32GB | 512GB SSD | Wi-Fi 6, Bluetooth |
| GEEKOM A5 2027-Ready Agentic A | AMD Ryzen 7 7730U, 8 cores and 16 threads | 16GB DDR4; supports up to 64GB | 500GB NVMe SSD; stated maximum 10TB | Wi-Fi 6, Bluetooth 5.4 |
| GEEKOM A7 Mini PC | AMD Ryzen 5 7535HS | 16GB DDR5; supports up to 64GB | 1TB PCIe Gen4 SSD; expandable to 4TB | Wi-Fi 6E, Bluetooth |
| Lenovo ThinkCentre Neo 55s SFF | AMD Ryzen 7 250, up to 5.10 GHz | 16GB DDR5 | 512GB SSD | — |
More Details on Our Top Picks
HP Pro 400 G9 SFF Mini PC Desktop Computer with 16GB DDR5 RAM and 512GB SSD
The HP Pro 400 G9 takes my top position because it pairs the lineup’s strongest clearly specified Intel processor with 16GB DDR5, a 512GB SSD, TPM 2.0, and HP Wolf Security. That combination suits offline analysis, document handling, and multi-display work better than the Lenovo Tiny’s 8GB starting memory. Its Core i5-14500 also gives it more stated CPU headroom than the compact GEEKOM A7 and A5 configurations, although those AMD systems offer a smaller footprint and more flexible expansion.
For air-gapped use, the business security features are helpful but not a complete isolation plan. The HP includes Wi-Fi 6E and Bluetooth 5.3, so I would confirm whether the radios can be disabled in firmware or physically removed, then keep Ethernet unplugged. A TPM helps protect keys and platform integrity; it does not prevent a wireless connection by itself. Its SFF size is also larger and heavier than the mini PCs, but that can make access and maintenance less awkward than on a tiny chassis.
The main compromise is upgrade flexibility: the supplied details describe limited options, and integrated graphics are not aimed at demanding GPU work. I would choose it over the Lenovo Neo 55s when the Intel platform and HP security features matter more than Wi-Fi 7 or the included DVD drive. I would skip it if the requirement is a factory-configured, radio-free computer, since that is not established by the listing.
Pros:- Core i5-14500 and 16GB DDR5 provide strong general-purpose headroom.
- TPM 2.0 and HP Wolf Security support a managed business setup.
- Dual 4K display support suits document comparison and monitoring.
- 512GB SSD provides useful local working capacity.
Cons:- Wi-Fi 6E and Bluetooth must be addressed for strict physical isolation.
- SFF chassis is larger and heavier than the GEEKOM mini PCs.
- Integrated graphics and limited upgrade options constrain specialist workloads.
Best for: Buyers who want a capable offline office or analysis workstation with TPM and business security features, and who can manage its wireless radios.
Not ideal for: Anyone requiring confirmed radio removal, extensive internal expansion, or dedicated graphics for GPU-heavy workloads.
- Processor:Intel Core i5-14500
- Memory:16GB DDR5
- Storage:512GB SSD
- Graphics:Integrated; supports two 4K displays
- Wireless:Wi-Fi 6E, Bluetooth 5.3
- Security:TPM 2.0, HP Wolf Security
- Form factor:Small Form Factor; 9.26 lb
Our verdict“I rank the HP first for its balanced processing power and business safeguards, provided the buyer independently controls its wireless connections.”
Lenovo Tiny Mini Business Desktop Computer with Intel Quad-Core, 8GB DDR5 RAM, 512GB SSD, WiFi & Bluetooth, Dual Display Support, 4K UHD Output, Windows 11 Pro
The Lenovo Tiny is the straightforward pick for a basic isolated office station: it has a small footprint, a 512GB SSD, Windows 11 Pro, Gigabit Ethernet, and dual-display output. Its included wired keyboard and mouse also make it easier to assemble a simple desk setup than the GEEKOM A7, which expects separate peripherals. Compared with the HP Pro 400 G9, though, its 8GB of RAM and unspecified Intel N-series quad-core processor leave less room for demanding local workloads.
That simpler performance profile can be enough for offline records, reference documents, and light administrative work. The memory is stated to be upgradeable to 32GB, a useful path if the workload grows, but I would check the exact configuration and upgrade procedure before purchase. Its Windows 11 Pro installation is not a reason to assume it is secure by default; the listing specifies Wi-Fi 6 and Bluetooth, so a strict air gap still requires disabling or removing wireless hardware and leaving the RJ-45 port disconnected.
Compared with the larger HP and Lenovo Neo 55s, this system saves desk space and is less imposing. The cost of that convenience is lower starting memory and less processor detail. I would pick it for a managed, light-duty offline terminal, not for large datasets or sustained multitasking. Buyers who want a known higher-performance CPU and 16GB installed should move up to the HP or either GEEKOM instead.
Pros:- Compact design and included wired keyboard and mouse simplify setup.
- Windows 11 Pro and Gigabit Ethernet suit a managed office configuration.
- 512GB SSD and dual-display support are useful for everyday offline work.
- Memory is stated to be upgradeable to 32GB.
Cons:- 8GB RAM is the lowest starting capacity in this roundup.
- Wi-Fi 6 and Bluetooth need to be disabled or physically removed.
- The Intel N-series processor is not identified by exact model.
Best for: A buyer building a compact offline terminal for documents, basic administration, and light multitasking.
Not ideal for: People running large local datasets, memory-heavy applications, or workloads where processor capability needs to be clearly documented.
- Processor:Intel N-series quad-core
- Memory:8GB DDR5; upgradeable to 32GB
- Storage:512GB SSD
- Operating system:Windows 11 Pro
- Wireless:Wi-Fi 6, Bluetooth
- Wired network:Gigabit RJ-45
- Video output:HDMI, DisplayPort; dual-display support
Our verdict“I recommend the Lenovo Tiny for simple, space-conscious offline tasks, but the HP or GEEKOM systems are better choices for heavier work.”
GEEKOM A5 2027-Ready Agentic AI Mini PC, Ryzen 7 7730U, 16GB RAM, 500GB SSD
The GEEKOM A5 is the most compelling option here for buyers who want a compact machine that can grow with local workloads. Its Ryzen 7 7730U has 8 cores and 16 threads, and the stated support for up to 64GB RAM and up to 10TB storage gives it a stronger expansion story than the HP Pro 400 G9 or Lenovo Tiny. It also claims support for as many as four displays, which can help an offline workstation used for several reference windows or dashboards.
That flexibility comes with a larger set of details to verify. The listed Wi-Fi 6, Bluetooth 5.4, and 2.5GbE LAN create several possible connection paths; for a strict air gap, disable or remove the wireless radios and leave the network port disconnected. The listing calls the system suitable for AI workflows, but it does not provide enough GPU detail to judge accelerator performance. Its Radeon Vega 8 integrated graphics should not be treated as a dedicated AI accelerator without supporting specifications.
Compared with the GEEKOM A7, the A5 offers a higher stated memory ceiling and storage capacity, while the A7 supplies DDR5 memory and a 1TB SSD as listed. The A5 is a better fit for buyers who value expansion over a newer memory type or larger included drive. I would skip it if you need confirmed radio-free hardware or a clearly documented graphics accelerator before ordering.
Pros:- Ryzen 7 7730U offers 8 cores and 16 threads for multitasking.
- Stated support for up to 64GB RAM and 10TB storage.
- Multiple HDMI and USB-C video outputs support complex desk layouts.
- Metal chassis and reinforced frame are specified.
Cons:- Wi-Fi, Bluetooth, and 2.5GbE require deliberate isolation controls.
- GPU performance and dedicated AI acceleration are not clearly established.
- The compact chassis may make upgrades less convenient than an SFF desktop.
Best for: Technical buyers who want a compact offline system with substantial stated memory and storage expansion potential.
Not ideal for: Users who need confirmed wireless removal, a dedicated GPU, or a fully specified AI acceleration platform.
- Processor:AMD Ryzen 7 7730U, 8 cores and 16 threads
- Memory:16GB DDR4; supports up to 64GB
- Storage:500GB NVMe SSD; stated maximum 10TB
- Graphics:Radeon Vega 8 integrated graphics
- Wireless:Wi-Fi 6, Bluetooth 5.4
- Wired network:2.5GbE LAN
- Video outputs:Dual HDMI, dual USB-C; 8K support stated
Our verdict“I would choose the A5 when expansion headroom matters more than a larger included SSD or confirmed graphics capability.”
GEEKOM A7 Mini PC, AMD Ryzen 5 7535HS, 16GB DDR5, 1TB SSD (Expandable)
The GEEKOM A7 stands out for buyers who want a genuinely compact machine and plan to use Linux or Ubuntu. Its Ryzen 5 7535HS, 16GB DDR5, and 1TB PCIe Gen4 SSD give it a stronger ready-to-work baseline than the Lenovo Tiny, with more installed memory and twice the stated storage. The 54W power specification and small metal chassis position it as a capable compact desktop rather than a full-size SFF system like the HP or Lenovo Neo 55s.
For isolation, the A7’s connectivity is both useful and a point of caution. Wi-Fi 6E and Bluetooth need to be disabled or physically removed for a strict air gap; the 2.5G LAN port should remain unplugged. USB4 and HDMI add useful peripheral and display flexibility, but every connection used to move data deserves a place in the workstation’s security procedure. I would also confirm the exact wireless hardware and firmware controls rather than assuming that Linux support alone provides isolation.
Compared with the A5, the A7 includes DDR5 and a larger SSD, while the A5 lists a higher maximum RAM and storage ceiling. The A7 therefore makes more sense for a buyer who wants a well-equipped compact system now, while the A5 appeals more to an upgrader planning a larger capacity later. Its small format limits serviceability relative to the HP, and it needs external peripherals. Buyers who want a conventional office tower layout or an included keyboard and mouse should look at Lenovo instead.
Pros:- 16GB DDR5 and a 1TB PCIe Gen4 SSD provide a strong starting configuration.
- Linux and Ubuntu support suits users building a controlled software environment.
- USB4, HDMI, and 2.5G LAN offer flexible wired connectivity.
- RAM can be expanded up to 64GB and storage up to 4TB.
Cons:- Wi-Fi 6E and Bluetooth must be controlled for air-gapped operation.
- Compact enclosure limits upgrade access compared with larger SFF desktops.
- External monitor, keyboard, and mouse are needed for a complete setup.
Best for: Linux or Ubuntu users who want a small, capable offline workstation with substantial installed memory and storage.
Not ideal for: Buyers who require a verified radio-free configuration, easy SFF-style servicing, or a complete peripheral bundle.
- Processor:AMD Ryzen 5 7535HS
- Memory:16GB DDR5; supports up to 64GB
- Storage:1TB PCIe Gen4 SSD; expandable to 4TB
- Operating system support:Linux, Ubuntu
- Wireless:Wi-Fi 6E, Bluetooth
- Wired network:2.5G LAN
- Ports:USB4, USB 3.2, HDMI 2.0, SD card slot
Our verdict“I recommend the A7 for compact Linux-friendly offline work, while the A5 is the better fit when maximum stated expansion capacity is the priority.”
Lenovo ThinkCentre Neo 55s SFF Business AI Desktop, AMD Ryzen 7, 16GB DDR5, 512GB SSD, 2-Monitor 4K Support, Windows 11 Pro, External DVD Bundle
The Lenovo ThinkCentre Neo 55s is the second SFF-style business option in this group, but its AMD Ryzen 7 250, 16GB DDR5, and Windows 11 Pro make it a distinct alternative to the HP. Its dual 4K support and DisplayPort 1.4 plus HDMI 2.1 suit a stationary offline workstation with a two-screen desk. Wi-Fi 7 and Ethernet give it modern connectivity for ordinary office use, though those same network options mean the buyer must take deliberate steps to preserve an air gap.
Compared with the HP Pro 400 G9, the Lenovo specifies Wi-Fi 7 and an external DVD drive bundle, while the HP gives a more detailed Intel processor model and calls out TPM 2.0 and HP Wolf Security. The Neo 55s’s listing does not provide comparable detail about security controls or integrated graphics, so I would verify its firmware options and exact radio controls before choosing it for sensitive offline work. The DVD drive can be useful for controlled optical-media workflows, but it does not make file transfer safe on its own; media still needs scanning and handling rules.
The main caution is the stated open-box status for upgrade purposes, which may affect warranty coverage. That makes the unit less straightforward than the HP if predictable support matters. I would choose it for a Windows Pro SFF desk where dual 4K displays and the external optical drive have a clear role; I would skip it if the purchase requires an unambiguous warranty or a documented factory air-gap configuration.
Pros:- Ryzen 7 processor, 16GB DDR5, and 512GB SSD suit multitasking.
- Windows 11 Pro and dual 4K outputs fit a business workstation.
- Wi-Fi 7, Ethernet, USB-C, and USB-A provide broad connectivity when needed.
- External DVD drive may support controlled optical-media workflows.
Cons:- Wi-Fi 7 and Ethernet must be controlled or disconnected for an air gap.
- Open-box upgrade status may affect warranty coverage.
- Graphics and specific security features are not fully detailed.
Best for: Windows 11 Pro users who want an SFF business desktop, two 4K displays, and a practical optical-media option.
Not ideal for: Buyers who need clearly documented security controls, a confirmed new-unit warranty, or radio-free hardware.
- Processor:AMD Ryzen 7 250, up to 5.10 GHz
- Memory:16GB DDR5
- Storage:512GB SSD
- Operating system:Windows 11 Pro
- Video outputs:DisplayPort 1.4, HDMI 2.1; dual 4K support
- Wireless and network:Wi-Fi 7, Ethernet
- Included bundle:External DVD drive
Our verdict“I would pick the Neo 55s for a Windows Pro SFF setup with a real need for optical media, after confirming warranty and isolation controls.”
How We Picked
I ranked these machines around the practical demands of an air-gapped workstation, rather than assuming that mini size or enterprise branding makes a computer secure. A true air gap depends on physical and operational controls: wireless radios should be absent or disabled in a verifiable way, network cables should not be connected, and removable media should be handled under a defined transfer process. The supplied descriptions do not establish that any model ships with radios removed or with a validated air-gap configuration.
My order weighs compute and memory headroom, storage and upgrade options, operating-system flexibility, display and port utility, and how clearly the stated specification supports a controlled setup. I give credit to TPM 2.0 and security features as useful components of a secure deployment, but not as substitutes for isolation. I also account for tradeoffs: a larger SFF case may be less convenient to place but easier to service, while a tiny system saves space yet can limit maintenance and expansion.
Where product details are incomplete—especially wireless disable controls, BIOS settings, internal radio access, and graphics performance—I treat that as a verification task rather than filling the gap with assumptions. My ranking is aimed at buyers prepared to configure and maintain an offline machine; anyone needing ordinary internet access should compare these as business desktops instead.
| airgapped mini desktop | Processor | Wireless |
|---|---|---|
| HP Pro 400 G9 SFF Mini PC Desk | Intel Core i5-14500 | Wi-Fi 6E, Bluetooth 5.3 |
| Lenovo Tiny Mini Business Desk | Intel N-series quad-core | Wi-Fi 6, Bluetooth |
| GEEKOM A5 2027-Ready Agentic A | AMD Ryzen 7 7730U, 8 cores and 16 threads | Wi-Fi 6, Bluetooth 5.4 |
| GEEKOM A7 Mini PC | AMD Ryzen 5 7535HS | Wi-Fi 6E, Bluetooth |
| Lenovo ThinkCentre Neo 55s SFF | AMD Ryzen 7 250, up to 5.10 GHz | — |
Factors to Consider When Choosing Airgapped Mini Desktops
I treat an air-gapped desktop as a complete operating practice, not a product feature. These systems can serve as the computer at the center of an offline setup, but their listed network hardware means the buyer must establish and verify the isolation.Start by defining what “air-gapped” means for your use
A strict air gap means the computer has no active connection to an outside network. For these five models, that means more than leaving Wi-Fi unused: check whether Wi-Fi and Bluetooth can be disabled in firmware, whether the wireless module can be physically removed, and whether wired Ethernet stays disconnected. If policy requires proof, record the configuration and have another person verify it. TPM 2.0, Windows Pro, and business security software may support a broader security plan, but none independently creates an air gap.
Choose performance for the work, not the label
The HP Pro 400 G9 has the clearest high-performance Intel specification and 16GB DDR5, making it the strongest general-purpose option for heavier office work in this group. The Lenovo Tiny is better matched to light tasks because it starts with 8GB and an N-series processor whose exact model is not supplied. The GEEKOM A5 and A7 offer distinct AMD configurations: the A5 emphasizes a stated expansion ceiling, while the A7 arrives with DDR5 and a 1TB SSD. The Lenovo Neo 55s gives 16GB DDR5 and Ryzen 7 branding, but the listed details do not establish dedicated graphics capability.
Treat removable media as a controlled data bridge
An offline computer still needs a way to receive updates or approved files. USB drives, optical discs, and external storage can carry malware or data out of the protected environment. The Neo 55s includes an external DVD drive, but that is only a transfer option—not a security safeguard. I would define which media is approved, scan it on a separate controlled machine, limit who can connect it, and document transfers. Disable unused ports only if your workflow and security policy allow it.
Balance chassis size against service and expansion
The GEEKOM A5 and A7 save desk space and offer appealing expansion claims, but small enclosures can make internal service less convenient. The Lenovo Tiny is compact and includes basic wired peripherals; its starting memory is its main limitation. The HP and Lenovo Neo 55s take more room, yet their SFF format may be more practical for a fixed workstation. Before buying, check the exact memory and storage configuration, access method, warranty terms, and whether a repair or upgrade would break your security procedures.
Verify the hardware and firmware before deployment
Product listings do not confirm every detail needed for a sensitive offline setup. Ask the seller or manufacturer about wireless-module presence, BIOS controls, boot-device restrictions, firmware updates, and recovery options. Confirm that the system can be configured to boot only from approved storage, and establish how updates will be reviewed and transferred. Do not rely on a product name or security badge alone; your threat model, physical access controls, and maintenance process determine whether the chosen desktop fits the job.
Frequently Asked Questions
Are any of these mini desktops air-gapped out of the box?
No. The listed systems include wireless or wired networking features, and none is described as shipping with all network hardware removed or a verified offline configuration. I would treat each as a computer that can be configured for air-gapped use only after checking its radio hardware, disabling or removing wireless connections, and keeping Ethernet disconnected.
Is turning off Wi-Fi enough for a strict air gap?
Not necessarily. Wi-Fi is only one possible connection path; Bluetooth, Ethernet, cellular hardware if present, and removable media also matter. Firmware controls can be useful, but buyers with strict requirements should confirm how radios can be disabled and whether physical removal is required by their policy. A disconnected Ethernet cable is part of the setup, not a replacement for checking wireless hardware.
Which model is the strongest choice for demanding offline work?
The HP Pro 400 G9 is my leading general-purpose choice because it specifies a Core i5-14500, 16GB DDR5, and business security features. The GEEKOM A5 is worth a look when stated memory and storage expansion matter more, while the Lenovo Neo 55s provides a Ryzen 7 configuration with Windows 11 Pro. I would compare exact workload needs and verify the processor and graphics details before choosing for specialized compute tasks.
Can I safely move files onto an air-gapped desktop with a USB drive or DVD?
Removable media can act as a controlled transfer bridge, but it also carries risk. Use approved, dedicated media; scan files on a separate controlled system; restrict who can connect the media; and keep a log of transfers where the work requires it. The Neo 55s’s external DVD drive provides an optical-media option, but it does not make a disc safe without a review and handling process.
Should I choose Windows or Linux for an offline workstation?
The choice depends on the software, maintenance process, and skills available to the people responsible for the machine. The Lenovo models specify Windows 11 Pro, while the GEEKOM A7 lists Linux and Ubuntu support. Either operating system still needs a controlled update process, restricted boot and account settings, and careful handling of external media. I would choose the platform that can be maintained consistently under your organization’s offline procedures.
Conclusion
For most buyers building a managed offline workstation, I would start with the HP Pro 400 G9: it offers the clearest combination of CPU headroom, 16GB DDR5, dual 4K support, and named business security features. Choose the GEEKOM A7 if a compact Linux-friendly setup with a 1TB SSD is more important, or the GEEKOM A5 if its stated memory and storage expansion ceilings match a planned local workload. The Lenovo Tiny fits light office tasks and tight desk space, while the Lenovo Neo 55s suits Windows Pro users who have a specific use for its SFF layout and external DVD drive.
For any of them, I would make the purchase conditional on confirming radio controls, firmware settings, warranty status, and the exact hardware configuration. None should be treated as air-gapped just because it is compact or sold as a business desktop. The best choice is the system your organization can physically isolate, maintain, and audit with confidence.
