Most protection is an argument about whether a file looks dangerous. Application control declines the argument entirely. A workstation runs what your firm approved and turns away everything else, regardless of whether anybody recognises it, regardless of how new it is, and regardless of who was talked into opening it.
Detection must be correct about something it has never encountered. Refusal only has to be correct about something your firm already wrote down. That imbalance is why application control is the strongest single safeguard available to a small practice, and equally why it is spoken about as awkward.
Awkward is what happens when it gets switched on carelessly. An observation period studies how your office genuinely operates first, so the tax package, the custodian utility, the reporting tool somebody wrote in 2011, and the printer driver are all recorded before anything starts being turned away.
Approving a program is only the first decision. The second is what an approved program may do once it is running. A spreadsheet has no reason to launch a scripting engine, and a document reader has no reason to open a connection to an address it has never visited before.
Ringfencing draws those boundaries, which is how a legitimate program stops being usable as the vehicle. A great deal of what arrives by mail in this industry works by borrowing software you already trust rather than installing anything at all.
For a fortnight you will be approving things. After that most practices report a handful of requests each month, usually a fresh version of something familiar, and approving one takes about a minute from a phone.
Setting that expectation plainly beats selling this as invisible, because invisible is not what it is. Occasionally a member of staff will notice it, and the moment they notice is precisely the moment it is doing its job.
Rates below are read live from the billing service. Anything you record sits on your order sheet while you carry on reading the rest of the register.
Refused by default on the workstation. Listed software executes, everything outside the list is turned away, and what the listed software may touch afterwards is drawn tight around what it genuinely needs.
| Supplied by | ThreatLocker |
|---|---|
| Machines it reaches | Windows and macOS workstations |
| Standing posture | Turn away by default, against a list your firm owns |
| Before enforcement | An observation period, so the list starts complete |
| Who answers requests | Fortify 24x7 engineers, individually |
| Charged against | Each workstation, every month |
Two columns, both of them written to be relied on. The right hand column is the one worth reading twice, because a firm that misreads it will believe an obligation is covered when it is still open.
Heads up: card statements show FORTIFY 24X7 - Equity IT Solutions is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.
Equity IT Solutions raises no separate charge of its own, so a second line will never turn up beside that one.