Most products wait for software to misbehave and then argue about whether it did. Execution control skips the argument entirely. Each machine holds a list of what it may run, and anything outside the list is refused the instant it tries to start. Whatever came in through that message never gets as far as its first instruction.
Detection products have to work out whether something is hostile. That is a genuinely hard question and it gets answered wrong in both directions every day. This asks an easier one: did anybody approve this. Approved things start. Everything else does not, and refusing it costs nothing at all.
The list is not something we invent on your behalf. The agent sits and watches a machine for a while and learns what genuinely runs there: the edit suite, the accounting package, the peculiar little utility a producer has been carrying around for a decade. That becomes your baseline, and anything added later goes through an approval a person handles.
One question comes up every time, and it deserves answering: does this end up locking somebody out halfway through a middle of a job. Vendor updates are tracked, so an ordinary new version is not mistaken for an intruder on a Tuesday afternoon. Requests to run something unfamiliar go to the desk, and a person answers them rather than a form.
Ringfencing is the other half. Being approved does not mean a program may then reach for anything it likes. What it may launch, what it may read, and where it may connect are all pinned down, so a legitimate tool cannot be borrowed as a delivery van.
The rates underneath arrive from billing as this page opens. Anything you set is held in the running order meanwhile.
Refuse by default on the machines that hold anything worth taking. Software nobody approved gets no say in whether it runs, and software that was approved is kept on a short leash afterwards.
| Made by | ThreatLocker |
|---|---|
| Starting position | Refuse, unless it is already on the list |
| First fortnight | Learning, then enforcement once the list looks right |
| Approvals | Elevation and approval requests go to the Fortify 24x7 desk |
| Ringfencing | Holds an approved program inside what it actually needs |
| Counted | One per endpoint |
This is the bluntest instrument on the site, which is exactly why it works, and it is also narrow. Here are the edges of it.
Heads up: card statements show FORTIFY 24X7 - Celebrity Bytes is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.