Each of the other controls sold here asks a hard question: is this program behaving badly? Approved software asks a short one instead. Was this program on the list? Whatever is not on the list waits outside until somebody with authority says otherwise.
Detection is a judgment made in milliseconds by software that has to be right about something it has never seen. An approved list does not guess. The bookkeeping machine runs eleven programs, has run those eleven for two years, and has no business running a twelfth that arrived in a zip file this morning. Say so once and a whole category of trouble goes quiet.
The price of that is friction, and we would rather name it than bury it. Something legitimate will get stopped in the first month. That is what the learning stretch and the approval queue are for, and it is why we aim this at the machines holding money and records before we aim it anywhere else.
The agent watches first and refuses later. Through the learning stretch it records what genuinely runs on each machine and drafts the list from that, rather than from an inventory somebody typed up years ago. You review it, we tune it, and then the refusal switches on.
After that, updates are the real work. Vendors ship new binaries constantly, and a list that does not follow them locks your office out on a Tuesday morning. ThreatLocker tracks published vendor updates so approved software stays approved through its own versions, and anything genuinely new arrives in the approval queue where a person handles it.
Each rate below comes from billing the moment the page opens. Anything under this district drops into your roster while you read on.
Approved programs start. Everything else waits outside until somebody with authority says otherwise. Requests reach our crew, not a screen nobody has opened since it went in.
| Runs on | ThreatLocker |
|---|---|
| Stance | Nothing may start unless the list names it |
| Rollout | Learn, review the list, then switch refusal on |
| Approvals | Worked by the Fortify 24x7 crew rather than parked |
| Boundary | Holds child processes, files and destinations inside a line |
| Billed per | Endpoint, each month |
A refusal is a strong control with a narrow shape. Here is exactly what this post does not reach, said up front rather than discovered later.
Heads up: card statements show FORTIFY 24X7 - Red White and Blue Networks is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.