Posted and provisioned by Fortify 24x7. Protection standing over the ground American businesses built.Your stationReach the crew
Red White and Blue Networks
District 02 / Approved software

Most of what runs on your machines, nobody ever chose.

Each of the other controls sold here asks a hard question: is this program behaving badly? Approved software asks a short one instead. Was this program on the list? Whatever is not on the list waits outside until somebody with authority says otherwise.

ThreatLockerApproval queueRingfencing
1 post / default refusal / per endpoint
Posts on this guide1
Runs onThreatLocker
Billed perEndpoint
ApprovalsWorked by our crew

Why a standing refusal beats a better guess

Detection is a judgment made in milliseconds by software that has to be right about something it has never seen. An approved list does not guess. The bookkeeping machine runs eleven programs, has run those eleven for two years, and has no business running a twelfth that arrived in a zip file this morning. Say so once and a whole category of trouble goes quiet.

The price of that is friction, and we would rather name it than bury it. Something legitimate will get stopped in the first month. That is what the learning stretch and the approval queue are for, and it is why we aim this at the machines holding money and records before we aim it anywhere else.

An approved list never has to guess correctly. It only has to be a list.

How the list gets built

The agent watches first and refuses later. Through the learning stretch it records what genuinely runs on each machine and drafts the list from that, rather than from an inventory somebody typed up years ago. You review it, we tune it, and then the refusal switches on.

After that, updates are the real work. Vendors ship new binaries constantly, and a list that does not follow them locks your office out on a Tuesday morning. ThreatLocker tracks published vendor updates so approved software stays approved through its own versions, and anything genuinely new arrives in the approval queue where a person handles it.

Posts on this guide

Detail and rates

Each rate below comes from billing the moment the page opens. Anything under this district drops into your roster while you read on.

Fortify-ZeroTrustPost detail

Execution Control

ThreatLocker · learning stretch, approval queue, ringfencing

Approved programs start. Everything else waits outside until somebody with authority says otherwise. Requests reach our crew, not a screen nobody has opened since it went in.

  • A learning stretch drafts the approved list from what genuinely runs.
  • Published vendor updates get tracked, so approved tools stay approved.
  • Ringfencing draws a line around what an approved program may open, reach or hand off.
Runs onThreatLocker
StanceNothing may start unless the list names it
RolloutLearn, review the list, then switch refusal on
ApprovalsWorked by the Fortify 24x7 crew rather than parked
BoundaryHolds child processes, files and destinations inside a line
Billed perEndpoint, each month
Pullingper endpoint
charged before the month starts
QTY
Honest scope

Where this guide stops

A refusal is a strong control with a narrow shape. Here is exactly what this post does not reach, said up front rather than discovered later.

  • It cannot judge an approved program doing harm. A tool on the list, driven by somebody allowed to drive it, will do what it is told. Ringfencing narrows that. Detection is what watches it.
  • Somebody has to answer the approvals. We work the queue, but a request for software nobody at your company recognizes has to come back to you. That decision is yours and always will be.
  • The first month has friction in it. A shop that installs new software weekly will feel this more than one that does not. Better to plan around that than meet it cold.
  • It does not patch anything. Approved software stays approved even when it is badly out of date. Keeping versions current lives on the field devices guide.
  • Cover follows enrollment. A machine without the agent has no list and no refusal. It runs whatever it is handed, same as it did before.
MARKER

Heads up: card statements show FORTIFY 24X7 - Red White and Blue Networks is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.