ThreatLocker

The implementation process for ThreatLocker software is designed to be efficient and thorough, ensuring that organizations can quickly secure their environments. Here’s a detailed breakdown:

1. Initial Setup:

• Deployment: ThreatLocker is cloud-based but requires a local agent to be installed on each endpoint. The agent operates at the kernel level, providing robust protection against threats like malware and ransomware.

• Learning Mode: Upon deployment, ThreatLocker enters a Learning Mode, which typically lasts for one week. During this period, the software baselines the environment by identifying and categorizing all existing applications. This helps create an allowlist of trusted applications.

2. Configuration:

• Adjusting Allowlist: After the Learning Mode, a Solutions Engineer assists in refining the allowlist to fit the organization’s specific needs. This includes adding custom applications and adjusting security policies.

• Policy Enforcement: ThreatLocker begins enforcing policies to block unapproved software once the allowlist is finalized. This ensures that only trusted applications can run, enhancing security.

3. Approval Process:

• Request and Approval: If a user attempts to run an unapproved application, it is blocked, and a request is sent to the administrator. The administrator evaluates the request and can approve it within 60 seconds, allowing the application to run.

4. Ongoing Management:

• Monitoring and Updates: ThreatLocker continuously monitors the environment and updates its built-in application definitions to ensure ongoing protection against new threats.

• Support: The platform includes access to 24/7 support and regular updates to maintain security and performance.

Timeline:

• Initial Deployment and Learning Mode: Approximately one week.
• Full Configuration and Policy Enforcement: Following the Learning Mode, configuration and policy enforcement can be completed within a few days, depending on the complexity of the environment.

Overall, the typical implementation process for ThreatLocker can be completed within two weeks, providing a quick and effective way to secure an organization’s endpoints.

ThreatLocker can be customized to fit specific business needs. The software offers several features that can be tailored to meet the unique requirements of different organizations:

• Custom Application Control: ThreatLocker allows businesses to customize application control settings. This includes creating specific allowlists for trusted applications and blocking unauthorized software. Organizations can tailor these settings to their operational needs, ensuring that only approved applications run on their network.

• Ringfencing: This feature can be customized to control how applications interact with each other. Businesses can set specific rules to limit application interactions, reducing the risk of lateral movement in case of a breach.

• Storage Control: Organizations can customize storage control policies to manage access to USB drives, network shares, and other storage devices. This helps prevent data exfiltration and unauthorized access to sensitive information.

• Elevation Control: This feature allows businesses to manage application permissions, ensuring that only authorized users can make changes to critical applications. Custom policies can be set to fit the security requirements of the organization.

• Network Control: ThreatLocker provides customizable network control settings, allowing businesses to define and enforce network traffic rules. This helps protect against unauthorized access and potential network threats.

For enterprise clients with unique security requirements, ThreatLocker offers custom development services to tailor its solutions to their specific needs. These bespoke solutions come at a premium and contribute to the company's revenue.

ThreatLocker’s pricing structure includes several additional costs beyond the basic subscription fees:

• Setup Fees: There may be initial setup fees, especially for enterprise clients requiring custom configurations and integrations. These fees cover the deployment and initial configuration of the software.

• Maintenance and Updates: Ongoing maintenance and regular updates are included in the subscription cost. ThreatLocker continuously updates its software to address new threats and vulnerabilities.

• Support Charges: ThreatLocker provides 24/7 technical support as part of its subscription plans. Higher-tier plans may include additional support services, such as a dedicated account manager and priority support.

• License Fees: Additional licenses for specific features or modules within the endpoint application control suite may incur one-time fees. Customers can purchase these licenses to unlock advanced functionalities.

• Custom Development: For bespoke solutions tailored to specific business needs, ThreatLocker offers custom development services at an additional cost.

These additional costs ensure that businesses can scale their security solutions as needed while receiving comprehensive support and maintenance services.

ThreatLocker provides comprehensive training and support to ensure new users can effectively utilize their software. The support includes:

• Onboarding Assistance: New users receive onboarding support, which includes setting up the ThreatLocker dashboard, configuring security policies, and integrating with existing systems. This process is guided by ThreatLocker’s Solutions Engineers to ensure a smooth implementation.
• Training Sessions: ThreatLocker offers training sessions for employees to help them understand and use the platform effectively. These sessions can be customized based on the organization's needs and can cover various aspects of the software, from basic usage to advanced features.
• Help Center: A detailed online help center with extensive documentation covering everything from getting started to advanced features. This includes step-by-step guides, FAQs, and troubleshooting tips.
• 24/7 Technical Support: Users have access to 24/7 technical support via live chat, email, and phone. This ensures that any issues can be promptly addressed, minimizing downtime and maintaining security.
• Cyber Hero Team: ThreatLocker’s Cyber Hero team provides personalized support and guidance, helping users with specific queries and offering best practices for using the software.
• Webinars and Workshops: Regular webinars and workshops are conducted to keep users informed about new features, updates, and best practices in cybersecurity.

ThreatLocker employs a variety of robust security measures to protect data:

• Application Allowlisting: Ensures that only pre-approved applications can run on the network, blocking unauthorized software and reducing the risk of malware and ransomware attacks.
• Ringfencing: Limits how applications interact with each other, preventing unauthorized access and lateral movement within the network.
• AES-256 Encryption: Utilizes military-grade AES-256 encryption to secure data during transmission and storage, ensuring that sensitive information remains protected.
• Multi-Factor Authentication (MFA): Requires multiple forms of verification to enhance security and prevent unauthorized access to the system.
• Storage Control: Manages access to storage devices, including USB drives and network shares, to prevent data exfiltration and unauthorized access to sensitive information.
• Elevation Control: Manages application permissions to ensure that only authorized users can make changes to critical applications, reducing the risk of unauthorized modifications.
• Network Control: Provides a host-based firewall to control network traffic and protect against unauthorized access and potential network threats.
• Regular Security Audits: Conducts regular security audits and assessments to identify and mitigate potential vulnerabilities, ensuring that the system remains secure.

• Compliance with Standards: ThreatLocker adheres to industry standards and best practices for cybersecurity, ensuring that their solutions meet stringent security requirements.

These measures collectively ensure that ThreatLocker provides a secure environment for business data, protecting it from unauthorized access and potential breaches.

ThreatLocker releases updates regularly to enhance security, add new features, and improve overall performance. Updates are typically rolled out every few weeks, with minor updates and bug fixes occurring more frequently. For example, recent updates have included new features like Download Protection and improvements to the Elevation Control Module.

Each update is managed systematically across all supported platforms, including Windows, macOS, and Linux. Detailed release notes accompany each update, outlining the changes, new features, and any bug fixes. This ensures that users are well-informed about the improvements and can take full advantage of the new capabilities.

ThreatLocker places a strong emphasis on data ownership and portability, ensuring that businesses retain full control over their data. The policy includes several key aspects:

• Data Ownership: Businesses own their data and have full control over how it is managed and accessed. ThreatLocker does not claim ownership of any data processed through its services.

• Data Portability: ThreatLocker supports data portability, allowing businesses to export their data in a structured, commonly used, and machine-readable format. This ensures that businesses can easily transfer their data to other systems or services if needed.

• Compliance and Security: ThreatLocker adheres to stringent security standards, ensuring that data is managed securely and in compliance with global standards.

• Access Control: Businesses can set granular access permissions and policy enforcement to ensure that only authorized users can access sensitive data. This includes features like IP allowlisting and multi-factor authentication.

• Data Protection: ThreatLocker uses advanced encryption methods, such as AES-256, to protect data during transmission and storage. This ensures that data remains secure and confidential.

These policies ensure that businesses can trust ThreatLocker with their data, knowing that it is secure, accessible, and portable.

ThreatLocker offers flexible terms for scaling up or down to accommodate changing organizational needs. Here are the key points:

• Scalability: You can easily add or remove user accounts and server licenses as required. This flexibility ensures that you only pay for what you use.
• Prorated Charges: Charges for additional licenses are prorated based on your initial contract. This means you are billed only for the time you use the additional licenses.
• Control Panel Adjustments: To upscale, you can log into the ThreatLocker Control Panel and adjust the number of member or server licenses. This process is straightforward and can be done at any time.
• Support for Downsizing: If you need to reduce the number of licenses, you can contact your Account Manager or the 24/7 customer support team for assistance. They will help you adjust your subscription accordingly.

ThreatLocker’s terms for contract renewal and cancellation are designed to be straightforward and user-friendly:

• Auto-Renewal: Contracts are typically set to auto-renew at the end of the billing cycle unless you choose to disable this feature. This ensures continuous protection without interruption.
• Cancellation Process: To cancel your subscription, you can log into the ThreatLocker Control Panel and select the option to cancel your subscription. This will end your subscription on the current expiration date, and you will have access to the service until that date.
• Grace Period: After your subscription expires, there is a 7-day grace period during which you can resubscribe and regain access to your previous configurations. This provides a buffer period to reconsider your decision.
• Immediate Cancellation: If you need to cancel immediately, this will revoke access to your account and any configurations created in the Control Panel. Immediate cancellation can be requested through customer support.

ThreatLocker meets several key compliance standards to ensure the security and integrity of business data:

• ISO/IEC 27001:2022: This certification for information security management systems ensures that ThreatLocker adheres to globally recognized security practices.
• SOC 2 Type 2: Validated by this audit, ThreatLocker meets stringent standards for security, availability, and confidentiality.
• HIPAA: Complies with the objectives outlined in the HIPAA Security Rules, making it suitable for handling sensitive healthcare data.
• PCI-DSS v4: Ensures that ThreatLocker meets the Payment Card Industry Data Security Standard, which is crucial for businesses handling credit card information.
• GLBA: ThreatLocker helps organizations comply with the Gramm-Leach-Bliley Act, which mandates the protection of consumer financial information.
• CMMC 2.0: Assists organizations in meeting the Cybersecurity Maturity Model Certification requirements, which are essential for businesses working with the U.S. Department of Defense.

These compliance standards demonstrate ThreatLocker’s commitment to maintaining high levels of security and data protection.