A Fortify 24x7 brand. Controls that carry a written method, a stated scope, and a result you can check.Sign inMail the bench
H2 Tech Systems
Bench 02 / Execution control

Approved things run. The rest wait outside in the corridor.

Bench 01 asks what a program did. This bench asks whether it was ever cleared to start. On the machines carrying money, records or the work itself, the second question costs less to answer and is far harder to argue your way around.

ThreatLocker, on its ownLearning period firstElevation worked 24x7
1 line / refuse by default / learned from your real toolchain
Cells on this bench1
KitThreatLocker, on its own
UnitOne endpoint
DeskElevation requests, 24x7

A written list beats a fresh opinion

Ordinary security asks the machine to judge each new arrival, and judging correctly every single time is not a thing anybody manages indefinitely. Allowlisting removes the judgement entirely. Whatever the list carries will run, whatever it omits will not, and the list itself is written once from evidence then applied identically wherever the agent sits.

Observation before enforcement is what stops this becoming unbearable. The agent spends a period recording what your people genuinely use, so the resulting list reflects your business rather than a template office nobody works in. Afterwards, adding something is a request with a team behind it at any hour.

Written once from evidence, applied everywhere identically. That is what makes it a method rather than a mood.

Ringfencing is the part nobody reads about

Clearance and unlimited trust are different things. Ringfencing sets out which child processes may be launched, which files come within reach, and which addresses may be dialled. A document reader with no cause ever to open a shell is simply unable to, and nobody has to catch it trying.

Update tracking carries the other half of the load. Approved software changes constantly, and a list that greets every new build as an intruder is a list somebody will eventually switch off out of frustration. Updates are followed, which keeps an ordinary release from turning into a morning spent unlocking people.

Cells on this bench

Specifications and figures

Every figure below is taken from billing as this page loads. Whatever goes onto the tray remains there while you read on.

Fortify-ZeroTrustCell

Execution Control

Allowlisting, ringfencing and elevation, by ThreatLocker

Refuse everything, then approve deliberately. A learning period records what your team genuinely uses, that record becomes the list, and the list becomes the rule on every machine carrying the agent.

  • Observation comes before enforcement, so the list reflects your actual toolchain.
  • Application updates are followed, keeping a routine release from shutting the office out.
  • Ringfencing names every child process, file and destination an approved tool may reach.
Runs onWindows and macOS endpoints
Reacts toAnything trying to execute without prior approval
Shelved forMachines holding money, records or the work itself
Cleared byA 24x7 team works elevation requests and escalations
Assayed byCounted per endpoint, each month
Weighingper endpoint
charged monthly, in advanceQTY
Honest scope

Where this bench stops

A single line doing a single job, with a boundary far better stated now than at renewal.

  • A control, never a cure. Unapproved code is stopped. An approved tool misused by somebody who was entitled to open it is a different problem with a different answer.
  • Observation cannot be rushed. The list has to come from watching. Turning enforcement on before anybody has recorded what you run is precisely how allowlisting acquired its reputation for chaos.
  • The agent draws the boundary. Machines carrying it are governed. Machines without it run whatever anyone puts in front of them, and no invoice line changes that.
  • Files and mail are elsewhere. Execution is the whole subject here. Locating sensitive material is Bench 05; the mailbox is Bench 03.
  • Somebody still decides on elevation. Requests reach a staffed team at any hour, and a human makes the call. Quick is what is offered. Instantaneous and unattended is not on the menu.
Label 01

Heads up: card statements show FORTIFY 24X7 - H2 Tech Systems is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.

Bench 01Detection and responseBench 02Execution controlBench 03Email securityBench 04Device fleetBench 05Data protectionBench 06Backup and continuity
Rates in fullBench planThe portalGo to the catalog