ThreatLocker

Allowlisting (Default Deny)

Deny-by-default allowlisting blocks unapproved software, scripts and ransomware; the ThreatLocker agent auto-catalogs apps into policy suggestions.

Cyber Hero® Approvals

Let the ThreatLocker Cyber Hero Team handle application approvals for you, freeing up your time to focus on other priorities.

Cyber Hero® MDR

The CHMDR is an add-on to ThreatLocker® Detect (formerly known as Ops) that allows organizations to opt for the ThreatLocker Cyber Heroes to monitor and respond to Indicators of Compromise (IoC). When ThreatLocker® Detect, detects suspicious activity in your environment, the Cyber Hero team will automatically review the alert to determine if there is a true IoC or a false positive. In the event an attacker is on your device, the Cyber Hero will follow the customer's runbook to either isolate or lock down the device and notify the customer.

Detect

EDR solution that monitors threats, alerts to anomalies, and takes automated action, with a Detect Dashboard for threats and impacted assets.

Elevation Control

Endpoint privilege management that lets administrators remove local admin rights and grant higher privileges to specific applications by policy.

Network Access Control

ThreatLocker's endpoint firewall centrally manages network access control with dynamic ACLs, IP rules and agent authentication.

Patch Management

ThreatLocker patch management detects and remediates outdated and portable applications traditional tools miss.

Ringfencing

Application containment that limits what trusted apps such as Microsoft Office, Zoom and PowerShell can access.

Storage Control

Storage control that blocks external storage devices and sets read or read/write access per interface and program.

Third Wall

ThreatLocker plugin for ConnectWise Automate with 58 lockdown policies, ransomware protection policies, logon reporting and USB device registration.

PSA

ThreatLocker Platform

Zero Trust platform that controls what applications run on endpoints and blocks ransomware and zero-days before they execute.

PSA

ThreatLocker® Protect

Zero Trust endpoint protection that uses allowlisting and Learning Mode to control which applications run and stop ransomware and zero-days before they execute.

PSA

Web Control

Web Control from ThreatLocker lets administrators permit or deny access to websites by content category using built-in policies.

Zero Trust Cloud Access

Routes cloud and SaaS access through a ThreatLocker broker so stolen passwords or tokens alone cannot be used to sign in.

Zero Trust Network Access

Brokered access to critical systems for verified users on explicitly authorized devices only.