Add Zero Trust Policy Driven Security to Your Endpoints
Application Whitelisting, Ringfencing and Data Storage Control from ThreatLocker protects your business from malicious and misused software.
ThreatLocker Application Whitelisting & Ringfencing
Even though antivirus software is a multi-billion dollar industry, cybercriminals continue to develop sophisticated attacks that can get around the most expensive defenses. Why? Antivirus software relies on definitions, heuristics and behavior analytics to determine if a file is malicious. Even artificial intelligence is still using patterns based on previous threats.
This makes it easy for the newest threats to penetrate your business and wreak havoc. Application Whitelisting does it the other way around, allowing only trusted software to run on endpoints and servers and blocking everything else.
Application Whitelisting has long been considered the gold standard in protecting businesses from viruses, ransomware, and other malicious software. Unlike antivirus, Application Whitelisting puts you in control over what software, scripts, executables and libraries that can run on your endpoints and servers. This approach not only stops malicious software, but it also stops any other unpermitted applications from running. ThreatLocker is a low management, fast to deploy Application Whitelisting solution that puts your business in control over what software is running on your endpoints and servers.
Controlling what software can run should be the first line of defense in protecting yourself from malicious software. Ringfencing then adds the second line of defense for applications that are permitted. First, by defining how applications can interact with each other and then controlling what resources applications can access, such as network, files and registry. Ringfencing is an invaluable tool in the fight against fileless malware and software exploits.
- Full granular audit of every executable, script, or library executed on your endpoints
- Default deny application whitelisting approach to deny anything not trusted by your business
- Thirty seconds single click approval
- Stop fileless malware and limit damage from application exploits
- Define how applications can integrate with other applications
- ThreatLocker automatically adds new hashes when application and system updates are released
Unified Audit
See granular details of every single application, script or library opened on your endpoints in real-time. Including desktop, servers and even laptops if they are in or out of the office.
Firewall Like Application Policies
A powerful firewall like policy engine that allows you to permit, deny or restrict application access at a granular level.
Ringfence Applications
Control application access to resources, including network, registry, and file. Backed up by a real-time audit of all network resources your applications are accessing.
Time-based Policies
Permit access to applications for a specified amount of time. Automatically block the application after the policy has expired.
ThreatLocker Storage Control
It’s your data. You should be able to control what, how, where, by whom and by which device data is accessed. With Storage Control from ThreatLocker, you can.
Most data protection programs on the market are butcher knife solutions to a problem that requires a scalpel. Blocking USB drives and encrypting data-storage servers can help secure your organization’s private data, but these tools don’t take into account that this data still needs to be utilized and quickly. Waiting for approval or trying to find a device that’s allowed to access needed files can drain productivity.
ThreatLocker Storage Control is an advanced storage control solution that protects information. ThreatLocker gives you the tools to control the flow and access of data. You can choose what data can be accessed or copied, and the applications, users and computers that can access it. By using ThreatLocker, you are in control of who and what devices can access your file servers, USB drives and data.
Controlling what software can run should be the first line of defense in protecting yourself from malicious software. Ringfencing then adds the second line of defense for applications that are permitted. First, by defining how applications can interact with each other and then controlling what resources applications can access, such as network, files and registry. Ringfencing is an invaluable tool in the fight against fileless malware and software exploits.
Key features include:
- A full audit of all file access on USB, Network and Local Hard Drives
- Restrict or deny access to external storage, including USB drives, network shares or other devices
- Single-click approval for specified devices or users
- Approve for a limited amount of time or permanently
- Restrict access to specific file types, for example only permit access to .jpg files from a camera
- Limit access to a device or file share based on the application
- Enforce or audit the encryption status of USB hard drives and other external storage
Enforce Encryption
Comply with HIPAA, Sarbanes Oxle, and other compliance requirements by enforcing encryption of portable storage devices and stop users from copying data to unencrypted external storage.
Configure Per Device Policies
Advanced and per device policies allow you to create an exception or define policies tied to specified device serial numbers.
Restrict Access to Specified Applications
Prevent Ransomware, Viruses and other malicious software from accessing your file servers, backup drives and other storage devices by configuring application level security policies that only permit specific applications to access your data.
Full and Granular Audit of File Access
Audit all file access including reads, writes, moves and deletes. A complete log of every user, computer and application that has access to your files. With extended plans, Threatlocker can store tamper-proof audits for up to 7 years.
ThreatLocker Elevation Control
Connect to ThreatLocker’s cloud-based Application Control Suite to add an extra layer of security by creating access policies for individuals on specific applications. The addition of PAM combined with ThreatLocker’s Application Whitelisting and Ringfencing solutions enables you to control what applications can run, who can access them and how they interact in an organization’s environment.
Complete Visibility of Admin Rights
Gives you the ability to approve or deny an individual’s access to specific applications within an organization even if the user is not a local administrator.
Streamlined Permission Requests
Users can request permission to elevate applications and attach files and notes to support their requests.
Varied Levels of Elevation
Enables you to set durations for how long users are allowed access to specific applications by granting either temporary or permanent access.
Secure Application Integration
In combination with ThreatLocker Ringfencing, ensures that once applications are elevated, users cannot jump to infiltrate connected applications within the network.
Download the Simplify Zero Trust Security from the Cloud eBook