The gaps it closes
Even well-managed computers have a few gaps that antivirus alone can't close.
| The gap | How allowlisting closes it |
|---|---|
| New or unknown malware can run before antivirus recognizes it | Only approved software runs. Everything else is blocked by default |
| A trusted program can be misused to reach files or the internet | Each approved program can only reach what it needs. A PDF reader, for example, can't reach the internet |
| Sensitive data can leave the office on a USB drive | You decide who can use USB drives and file shares, and which programs can open what |
| No record of what software actually ran | Every allowed or blocked program is logged, the kind of documentation auditors and insurers ask for |
What it looks like day to day
Step 1
We learn first.
Before anything is blocked, we learn the software your team already uses and approve it, so normal work doesn't change.
Step 2
New software asks first.
If someone opens something that isn't approved yet, they see a simple "Request Access" button.
Step 3
We review and approve.
We confirm the software is safe and approve it, usually quickly. Planning to add something new? Tell us ahead of time and it's ready when you need it.
What's included
- Application allowlisting: only approved software runs
- Ringfencing: approved apps only reach what they need
- Storage control for USB drives and file shares
- Request Access and review for new software
- A log of every program allowed or blocked
- A learning period before anything is blocked
Frequently Asked Questions
Will this slow my team down?
Not day to day. We approve the software your team already uses before anything is blocked. The only change is that brand-new software asks for approval first.
What happens when someone needs new software?
They click "Request Access" and add a short note. We review it, confirm it's safe and approve it. For anything planned, let us know ahead of time.
We already have antivirus. Why do we need this?
Antivirus works by recognizing threats it has seen before. Allowlisting doesn't need to recognize anything: if software isn't approved, it doesn't run. The two work well together.
Does it watch what my staff do?
No. It records which programs ran and whether they were allowed. It doesn't read email, documents or browsing.
Can we get it without managed IT?
It runs on the computers we manage, so it's available as an add-on to our managed IT service.