Most controls ask what a program is. This one asks whether anybody said yes to it. ThreatLocker holds a list of the software your office genuinely uses and refuses everything outside it at the moment of execution, which closes the gap between a novel piece of malware appearing and somebody producing a signature for it.
Recognition is a footrace. Somebody must observe the thing, describe it, and deliver that description to your machines before it runs on one of them. Approval is no race at all: the list was settled beforehand, and whatever is missing from it gets refused regardless of whether anybody has ever laid eyes on it.
The cost is real and worth naming. A list has to be built, then kept. An observation stretch watches what the office genuinely runs before any refusal begins, and our desk carries the requests afterwards, so an approval never waits on somebody who is sitting with a client.
Approval is one thing. The run of the machine is quite another. A ringfence governs the reach of an approved program: processes it may launch, directories it may open, addresses it may contact. No spreadsheet needs to start a scripting host, and a rule may say precisely that.
For a practice opening attachments all day, this is where the value actually sits. The document opens the way it always did. What it attempts next is where the line gets drawn.
Billing hands over every figure below at page load. Present while you read; a quantity stands until you alter it.
Listed software opens client files. Everything else meets a refusal as it attempts to start, and nobody has to identify it first.
| Settles on | ThreatLocker agent, installed once per machine |
|---|---|
| Nets | A single endpoint, list and ringfence on one unit |
| Value date | Opens when the observation stretch is closed off |
| Cleared by | Elevation requests are carried by Fortify 24x7 engineers |
| Reconciled by | A dated trail of approvals, refusals, and edits to policy |
Execution approval is a strong control with visible edges. Here is where the entry stops.
Heads up: card statements show FORTIFY 24X7 - FinShield Tech is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.