ThreatLocker Zero Trust Platform Reviews

We use Application Control with ThreatLocker Zero Trust Endpoint Protection Platform, and we have started to use Network Control a little bit. Elevation Control is the main feature we have gotten use out of.

One of the things we have discussed with our solutions engineer at ThreatLocker is that we are trying to do nested groups. At the time, ThreatLocker does not have a great way to do that; you have to make separate groups. They said that is already in the works, so I do not know if that is helpful, but that is the main thing.

We have gotten a lot of use out of the feature of removing local admins from a lot of computers with ThreatLocker Zero Trust Endpoint Protection Platform. Our company is spread out, so we cannot usually get hands-on those computers. It is a lot easier to hit the button on ThreatLocker Zero Trust Endpoint Protection Platform and remove it and also just get an audit of whether there are any other local admins floating out there. That has been really helpful. The testing environment has been very helpful as well.

We did not have any testing environment previously to using ThreatLocker Zero Trust Endpoint Protection Platform, so it was us as IT admins doing our best to test software before deploying it out to the users. That helps a lot.

I assess its role in facilitating just-in-time administrative access for approved applications with ThreatLocker Zero Trust Endpoint Protection Platform as very helpful in allowing a user to install software, so we do not have to actually remote in and put our credentials. We can give them an hour to install the software, monitor their machine, make sure it is all safe, and they are good to go after that. It helps us save a lot of time.

I find the Storage Control feature in ThreatLocker Zero Trust Endpoint Protection Platform to be very helpful when it comes to enforcing policy-driven access over various storage devices. We are trying to get into CMMC, which is a compliance certification; one of the requirements is to inventory any USB devices that we have floating around the company. With ThreatLocker Zero Trust Endpoint Protection Platform, we are able to name those devices, record their serial number and everything, and who they are assigned to. We have visibility into that, and it is very helpful.

The allow-listing feature in ThreatLocker Zero Trust Endpoint Protection Platform is very helpful for managing which software, scripts, and libraries run on my device. It is obviously a lot better than trying to blocklist specific things. We can only allow the things that we want in the environment.

I have used the Ringfencing feature in ThreatLocker Zero Trust Endpoint Protection Platform.

I assess its impact on controlling the behavior of approved applications with ThreatLocker Zero Trust Endpoint Protection Platform as working well to me. I am not super deep into it as far as how we are designing the Ringfencing, what we are blocking, and what we are allowing, but from what I can tell, it is helpful.

We have gotten a lot of use out of Elevation Control feature in ThreatLocker Zero Trust Endpoint Protection Platform.

I do not believe we have started eliminating anything with ThreatLocker Zero Trust Endpoint Protection Platform; it is just an add-on for us right now.

We have not gotten too deep into blocking things on the network with ThreatLocker Zero Trust Endpoint Protection Platform. We do have RDP blocked on user endpoints now, so that is helpful for sure.

I have not yet used the DAC dashboard.

I do not know if we are actually using the real-time threat intelligence category controls employed by web control in blocking malicious and non-compliant sites.

We got ThreatLocker Zero Trust Endpoint Protection Platform about a year ago.

ThreatLocker Zero Trust Endpoint Protection Platform has been pretty solid in terms of stability and reliability. There is one slight issue we have run into where the testing environment sometimes is not available, but they do provide updates and emails. Nothing is going to have perfect 99.999% uptime, so that is understandable. But that is really the only hiccup we have had.

As far as I know, ThreatLocker Zero Trust Endpoint Protection Platform has scaled pretty smoothly with the growing needs of my company; we have not had any issues with that as far as I am aware.

I evaluate the customer service and technical support of ThreatLocker as awesome. The Cyber Hero team is great. They are very helpful and very responsive. They actually will help us get to a solution and not just repeat a script. A lot of companies repeat a script, but the people I have talked to at ThreatLocker seem genuinely interested to help, so they are great.

We were building up from the ground up and were not using another solution before choosing ThreatLocker Zero Trust Endpoint Protection Platform.

I would probably say ThreatLocker Zero Trust Endpoint Protection Platform is a 10 overall. I do not have a great experience with a ton of different security vendor companies, but they have been pretty great so far. I would recommend them to any company that has to keep track of who is installing what, what is being run in the environment, controlling local admin, storage control, and all that. If you need that, then ThreatLocker Zero Trust Endpoint Protection Platform would be helpful for sure.

My main use cases for ThreatLocker Zero Trust Endpoint Protection Platform are to manage shadow IT and to prevent the issue of not being able to restrict downloads.

The feature I prefer most about ThreatLocker Zero Trust Endpoint Protection Platform is the Ring Fencing.

Ring Fencing is important because most of the clients I deal with don't have any control over what their employees are doing, and they're downloading and exposing themselves. Shadow IT exists extensively, and this feature helps prevent that.

I have found the allow listing feature of ThreatLocker Zero Trust Endpoint Protection Platform to be quite good. I appreciate that it takes the time to learn the client prior to putting it into secure mode, which helps eliminate the back and forth at the beginning of the relationship with the client.

I have used the Ring Fencing feature, and thankfully, I haven't had any issues with it. It has been straightforward and works well.

I find the health score to be one of the new features I was examining, and I appreciate that it can show people the different scores that they have as a company once everything is installed. This allows them to see many things they didn't even know they had on their computers.

Using the DAC dashboard to identify which security and configuration settings need fixing has been excellent and very insightful.

I believe ThreatLocker Zero Trust Endpoint Protection Platform could be improved with a mobile version, as many clients work off their phones, downloading all kinds of things on their mobile devices. We currently can only protect the workstation versus the actual mobile device.

I have been using ThreatLocker Zero Trust Endpoint Protection Platform for about a year and a half.

I haven't experienced any downtime, crashes, or performance issues with ThreatLocker Zero Trust Endpoint Protection Platform. Everything has been excellent.

ThreatLocker Zero Trust Endpoint Protection Platform scales very smoothly with our growing needs, and my account representative has been very helpful with no complaints at all.

I evaluate the customer service and technical support as great. We have cadence calls, and anytime I have any questions, they help me out very quickly. I would rate the customer service a ten out of ten.

Positive

I was not using or working with another product before using ThreatLocker Zero Trust Endpoint Protection Platform. Nothing did what ThreatLocker does.

ThreatLocker Zero Trust Endpoint Protection Platform has helped my company and my clients' companies save on operational costs and expenses. I would estimate we have saved at least thirty to forty percent.

The pricing, setup costs, and licensing of the solution seem quite good. The pricing is not prohibitive, and for the value we're getting, I think it's good.

By using ThreatLocker Zero Trust Endpoint Protection Platform, I haven't consolidated any other tools.

The efficiency of the real-time threat intelligence and category controls employed by Web Control in blocking malicious and non-compliant sites is excellent and fast. The cyber heroes are very quick to answer when I need any help.

My experience with ThreatLocker Zero Trust Endpoint Protection Platform has been very positive overall. I would give this solution a rating of ten out of ten.

As the administrator for ThreatLocker Zero Trust Endpoint Protection Platform, I manage it, deploy it for new clients, and if someone installs an application that ThreatLocker stops, I have to allow that. So we can say I am the admin of ThreatLocker in my day-to-day life.

Once, one of our big clients in the US installed a new application, but it was stopped by ThreatLocker. They emailed me that their application was not working, and then I reviewed it. I took approval from their senior managers before allowing that application in their environment, and afterward, I approved it.

I just do daily tasks where I create policies for the applications they use. There are some generic applications which they use, so I create policies for them to ensure new users will not encounter issues. Sometimes, I have to approve applications, but I need to get approval from their manager or some senior engineer before real-time approval.

Ring-Fencing technology helps me day-to-day by monitoring application behavior. If it thinks the application is malicious or has code that shouldn't run in the environment, it stops that. For example, if an SQL application throws some codes, and if the application stops working, we need to check why it stopped, and then we can approve it if it's justified.

The best features of ThreatLocker Zero Trust Endpoint Protection Platform include a deny-by-default approach, ensuring only approved applications and processes can run, which significantly reduces attack surfaces. It provides granular application control that prevents ransomware, unauthorized scripts, and unknown executables from executing. It stops ransomware before executing, which greatly improves endpoint security, along with its unique Ring-Fencing technology that restricts application behavior and prevents trusted applications from being exploited maliciously. Additionally, it provides precise control over USB devices, external storage, and network shares to help prevent data exfiltration.

The easy policy management with a centralized dashboard makes it effortless for IT teams and engineers to manage policies, approval workflows, and endpoint visibility. The real-time approval system allows administrators to approve or deny applications instantly without disrupting endpoint user productivity. Strong visibility of audit logs offers detailed logs and reporting that help with compliance, forensic analysis, and security investigations. The lightweight endpoint performance impact means it operates effectively without noticeable system downtime compared to traditional antivirus solutions, making it a highly scalable platform ideal for MSPs and organizations managing multiple clients or distributed environments.

Overall, ThreatLocker Zero Trust Endpoint Protection Platform has significantly strengthened our endpoint security by enforcing zero trust principles while maintaining operational flexibility and user productivity.

ThreatLocker Zero Trust Endpoint Protection Platform has positively impacted my organization by preventing unknown applications from running in my environment. Many clients cannot run applications without our permissions, and I also have great control over the endpoints, enhancing both productivity and security.

After implementing ThreatLocker Zero Trust Endpoint Protection Platform, we have seen a productive impact, including significantly reduced security incidents. The deny-by-default approach drastically minimizes malware and unauthorized application incidents, which reduces emergency remediation efforts and results in less endpoint downtime. Systems experience fewer disruptions caused by ransomware, malicious scripts, or unwanted software installations, leading to improved uptime for the end user.

Faster troubleshooting and detailed logging allow us to quickly identify blocked processes or unauthorized behavior, significantly reducing troubleshooting time. The real-time approval feature enables our IT team to instantly approve legitimate applications, avoiding long user wait times while maintaining security. Our IT team spends less time handling infections or cleanup tasks and more time on proactive infrastructure improvements. Once policies are properly tuned, users can work without interruption while security remains tight, enforced in the background.

Overall, ThreatLocker Zero Trust Endpoint Protection Platform has shifted our environment from reactive incident handling to proactive security management, leading to a measurable reduction in downtime and support overload.

ThreatLocker Zero Trust Endpoint Protection Platform is already an optimized platform. I have a great experience with this, so I don't think anything needs to be improved.

There might be a small thing, but I would need to assess that further.

I took off one point because sometimes it can be a bit complicated for new engineers, such as my teammates, especially for those who don't have hands-on experience. They occasionally find it difficult to check application approvals. Overall, for me, it's good.

I have been using ThreatLocker Zero Trust Endpoint Protection Platform for about three years and I am continuously using it.

In my experience, ThreatLocker Zero Trust Endpoint Protection Platform is stable because we have not encountered any major crashes or reliability issues. The agent runs consistently in the background without causing system instability or performance degradation. Any operational challenges we experienced were mostly related to initial policy tuning or application allowing, which is expected when implementing a zero-trust model. Once policies were properly configured, the environment became very stable. Overall, I have not observed any unexpected agent crashes, minimal impact on endpoint performance, and consistent policy enforcement across devices. ThreatLocker Zero Trust Endpoint Protection Platform has proven to be a dependable and stable security solution for both daily operations and long-term endpoint protection.

Regarding scalability, we have added new endpoints easily, as the policies were already made, and we just copied them to the new organization. So it's not a big deal.

The customer support of ThreatLocker Zero Trust Endpoint Protection Platform is really quick, and they respond very promptly. I've had a good experience with them.

Positive

We have eliminated CrowdStrike because we were using it for security purposes before we started using ThreatLocker Zero Trust Endpoint Protection Platform, which has proven to work for us.

We used CrowdStrike before ThreatLocker Zero Trust Endpoint Protection Platform and switched because CrowdStrike was complicated. There was also a significant security concern last year that led us to make the switch.

My advice for organizations looking into using ThreatLocker Zero Trust Endpoint Protection Platform would be to plan the initial deployment and policy configuration carefully, especially during the early learning phase of adopting a zero-trust model. Since ThreatLocker Zero Trust Endpoint Protection Platform works on a deny-by-default approach, which is extremely powerful for security, organizations should start with learning mode and a staged deployment to understand application behavior.

It's essential to ensure the IT team receives proper training, as policy management and application approvals may feel complex for engineers new to zero trust. Define approval workflows in advance to avoid user disruption by gradually enforcing policies instead of applying strict controls immediately. Once properly configured, ThreatLocker Zero Trust Endpoint Protection Platform becomes a highly effective and low-maintenance security solution that significantly strengthens endpoint protection while maintaining productivity.

I haven't observed specific metrics regarding return on investment, but I am aware of the general impacts.

I haven't noticed any specific benefits in terms of saving time, reducing the need for extra staff, or seeing fewer security incidents since using ThreatLocker Zero Trust Endpoint Protection Platform, so I can't provide numbers.

Before choosing ThreatLocker Zero Trust Endpoint Protection Platform, we did not evaluate any other options.

The allowlisting feature in ThreatLocker Zero Trust Endpoint Protection Platform effectively manages which software, scripts, and libraries run on our devices, as it provides excellent control while enforcing security measures.

I find the allowlisting feature easy to use, and it gives me enough control over which software, scripts, and libraries can run.

I can say it is easy to identify which security and configuration settings need fixing using the DAC dashboard; I would rate it a 10 out of 10 for me.

The efficiency of the real-time threat intelligence and category controls employed by web control is a big plus, as it helps ensure that we are dynamically protected even as new threats emerge.

I would rate this review nine out of ten overall.

Hybrid Cloud

Other

My main use case for ThreatLocker Zero Trust Platform is that our organization is an MSP provider. We provide solutions and scripts to automate processes. Whenever ThreatLocker blocks anything, we become involved and have to whitelist and allow those scripts and URLs through ThreatLocker so nothing gets blocked on the machine.

A specific example of when ThreatLocker blocked something is when I was working on an onboarding script for a client in which six software applications needed to be installed on the machine. ThreatLocker was blocking some of them, so I whitelisted our Proval certificate into ThreatLocker and added the certificate in PowerShell as well in those scripts. After the next run, all scripts ran fine. We can also add the file hashes of PowerShell in ThreatLocker to whitelist it. If we want to allow something for one time only, there is an option in ThreatLocker where all blockings are available for a single machine. We type the name of the machine and can see what has been blocked or permitted, and we just have to approve that.

This is currently how we use ThreatLocker Zero Trust Platform. Moving forward, our organization is opting for this EDR for managing partners, and soon we will be handling EDRs from A to Z.

ThreatLocker Zero Trust Platform has impacted my organization positively. Let me provide an example: there are two environments, one without ThreatLocker and one with ThreatLocker. The environment without it was facing encryption issues where someone encrypted their entire data. In the ThreatLocker environment, it always blocked suspicious activity and anything that was not added to the whitelist, proving to be a very secure tool.

I have seen measurable outcomes. When we want a particular URL or particular script allowed through ThreatLocker, we sign that script with our certificate and add that certificate to ThreatLocker. We no longer deal in traditional whitelisting anymore. We just add the certificate in PowerShell and everything works well.

Our organization has not been able to eliminate or consolidate any security tools or solutions by using ThreatLocker Zero Trust Platform. ThreatLocker is our primary tool and we continue to use it. We have not added any other EDR in place of ThreatLocker at this time.

The best features ThreatLocker Zero Trust Platform offers include that it is a very secure EDR. If we have a good understanding of ThreatLocker, we will be managing everything that goes in and goes out, including any applications and URLs. We have control over them, and that is a very valuable aspect. Whenever we want to allow something, we just go to ThreatLocker and allow that particular domain or URL.

The level of control has helped my team and my clients in a specific situation where our script was getting blocked. We initiated a step where we added the Proval certificate into ThreatLocker portal and then added that certificate into our scripts. We signed our PowerShell scripts with that certificate, and once that was done, everything ran on those machines without any issues.

I am currently working with these features of ThreatLocker Zero Trust Platform. Moving forward, I will learn more about it and need to pursue a certification that has been assigned to me within the coming three months.

Regarding ThreatLocker Zero Trust Platform's AI capabilities, I believe it is excellent. As I have already explained, it blocks anything that comes on the machine, whether a URL or application. This makes it a very secure platform and secure EDR, and I genuinely recommend this tool.

I can positively say that ThreatLocker Zero Trust Platform's AI capabilities seem good at this time. As I learn more and work more with ThreatLocker, I will gain a better understanding. However, right now it is functioning well.

My impression of the solution's allowlisting feature in terms of managing which software, scripts, and libraries run on my devices is that I rate it a ten. Once I have allowed something, it will not be blocked on the machine if I have done it correctly.

It is not very difficult to identify which security and configuration settings need fixing using the DAC dashboard. There is not much work involved. We just need to go to allowlisting and check the timeframe when the script ran and what was getting blocked. We can then do the whitelisting based on that by just allowing the option which was denied.

The Zero Trust Endpoint Firewall Network Control feature impacts my ability to manage network traffic across my endpoints and servers positively. I rate it a ten. I was using Bitdefender personally, but ThreatLocker contains many more features than any other tool.

ThreatLocker Zero Trust Platform can be improved in one area that needs adjustment: the documentation. ThreatLocker EDR has a very good GUI, but when I look at other tools, there are videos that reference how to use them. In ThreatLocker, there is mostly theoretical knowledge. I would like that theoretical knowledge converted to video format so that someone can see and understand how it works.

Everything else is functioning well regarding needed improvements. Since I have been using this EDR for the past six months, if I notice anything further, I will certainly inform you. But at this time, there is nothing else I can identify for improvements.

I have been using ThreatLocker Zero Trust Platform for approximately six months.

ThreatLocker Zero Trust Platform is stable.

The scalability of ThreatLocker Zero Trust Platform is something I rate as a ten. When the organization invests in this, they will see a big difference in managing all servers, workstations, and the allowlisting and everything else, which will be very beneficial.

The customer support for ThreatLocker Zero Trust Platform is good. I have not raised a case myself, but one of my colleagues has done so and that case was resolved within a day.

I did not previously use a different solution.

ThreatLocker Zero Trust Platform is deployed in my organization on-premises. We created an automation with a PowerShell script and deployed that, after which ThreatLocker was installed on the devices.

I have not seen a return on investment. As I have mentioned, I am an engineer in my organization and I did not purchase the tool. My organization purchased the license and tool and gave me access to it. I can only tell you about the experience I have faced with ThreatLocker.

My experience with pricing, setup cost, and licensing with ThreatLocker Zero Trust Platform is that it is owned by my organization, so I am not certain about the pricing and licensing details. However, I am the engineer who works in the organization and on the GUI level I rate it a nine or a ten. Overall, I will rate it a nine.

Before choosing ThreatLocker Zero Trust Platform, I did not formally evaluate other options. However, I have used SentinelOne, CrowdStrike, Cylance, and ThreatLocker, and among them, ThreatLocker is very nice. The whitelisting and everything else are very easy in this platform.

On a scale of one to ten, I would rate ThreatLocker Zero Trust Platform overall as nine. I chose nine out of ten for ThreatLocker Zero Trust Platform because nothing is perfect in this world and there will always be some adjustments needed. There are always some things in tools and in people that need to be fixed or corrected, which is why I rated it nine. I will always provide a positive review about ThreatLocker Zero Trust Platform and will suggest this tool to everyone I know because this is the one place where everything comes together related to antivirus and blocking and managing everything.

My main use cases for ThreatLocker Zero Trust Endpoint Protection Platform include Elevation Control, application whitelisting, and Storage Control.

The feature I like the most in ThreatLocker Zero Trust Endpoint Protection Platform is the application control, as we have many users that have their own opinions on what they should run, and it is good to be able to deny by default.

By using ThreatLocker Zero Trust Endpoint Protection Platform, our company has been able to eliminate or consolidate security tools, such as BeyondTrust PAM, and we removed USB-Lock software by adopting ThreatLocker.

ThreatLocker Zero Trust Endpoint Protection Platform scales well with the growing needs of our company, and when we expand it to all 500-odd practices, the learning mode will make it scale and work really well. It has been smooth so far, and our solutions engineer is always on hand and is really good.

I would like them to focus on integrating with our SIEM tools.

I have been using ThreatLocker Zero Trust Endpoint Protection Platform for about nine months.

I have not experienced any issues, crashes, or downtimes with the stability and reliability of the platform. The speed of deploying policies and the user receiving the notification that the application request has been approved is really quick.

My experience with customer service and technical support is positive as they are always responsive. We have taken products in the past where it has been an extra thing that you pay for, whereas our solutions engineer or whoever it is, is always there, ready to speak to us and will jump on a call in an instant, which has been really good. I would rate the customer service and technical support a 10.

Positive

Prior to adopting ThreatLocker, I was using BeyondTrust PAM and USB-Lock software.

I believe ThreatLocker Zero Trust Endpoint Protection Platform will save our company on operational costs and expenses in the long run with time and manpower, and it will be invaluable if it does stop that one breach that could happen.

My experience with the pricing, setup cost, and licensing of ThreatLocker Zero Trust Endpoint Protection Platform is that it replaced some tools, making it seem more competitive value-wise, but it is the flagship tool doing what it does, which means it is quite expensive.

We looked at a couple of other solutions in the evaluation process, but I cannot think of anything that did everything that ThreatLocker does, so there was not really a comparison.

I assess the Elevation feature's role in facilitating just-in-time administrative access for approved applications as really good because a lot of dental software is legacy and written before people cared about security in IT, so it requires being run as admin or it will not work unless the user is admin on the machine. Therefore, it is really good to elevate just the application rather than having everybody at the practice be an admin.

My thoughts on the Storage Control feature in ThreatLocker Zero Trust Endpoint Protection Platform when it comes to enforcing policy-driven access over various storage devices are that we get patient scans, x-rays, and dental notes from other practices or from NHS emergency appointments on USBs and CDs. I would personally love to block and ban all of them, but we cannot, so being able to whitelist by file type or by user group is good.

My impression of the allowlisting feature in ThreatLocker Zero Trust Endpoint Protection Platform in managing which software, scripts, and libraries run on our devices is that there is an initial learning curve, but once you get your head around how it works, it is fairly simple. At the beginning, the learning mode does most of the heavy lifting for you, but when you get to a monthly update that is outside of the learning mode and you have to go back in and do it yourself, I found it difficult to begin with, but now that I have done it a few times, it is really simple.

In regards to the ringfencing feature in ThreatLocker Zero Trust Endpoint Protection Platform, I do not feel like we have used much of that. If it is happening in the background, it is great. I think there was something to do with a user running PowerShell to connect to Azure, which we knew was happening, but it was good to get sight of who did it.

We have not gotten to the Network Control feature stage yet. I have only been using the product for nine months, so we have not gotten around to the DAC Dashboard yet. There are some reds on there. Web Control is not something that we took.

For ThreatLocker Zero Trust Endpoint Protection Platform, I cannot think of any feature improvements that I would like them to add in their next release because for what we use it for at the moment, it is great. I would rate this review a 10.

Currently, we are utilizing application control with ThreatLocker Zero Trust Endpoint Protection Platform to control what our employees are able to access, but we do plan on moving further into the storage control piece.

We are already seeing some curtailing of shadow IT applications and optimizing the approval process for new applications with ThreatLocker Zero Trust Endpoint Protection Platform.

The biggest thing that we have seen with ThreatLocker Zero Trust Endpoint Protection Platform is the ability to identify applications that employees have not brought before IT or information security to ensure it is an approved application.

We have not really utilized the network control aspect of ThreatLocker Zero Trust Endpoint Protection Platform at this time.

We do not really utilize the real-time threat intelligence and category controls employed by web control in ThreatLocker Zero Trust Endpoint Protection Platform at this time.

ThreatLocker Zero Trust Endpoint Protection Platform allows a lot more control to prevent malware attacks that are trying to identify themselves as different things utilizing the ring fencing capabilities, as well as catching any non-IT approved applications that come through.

The greatest feature that I appreciate about ThreatLocker Zero Trust Endpoint Protection Platform is the unified audit; there is just one screen that I go to where I am able to see everything I need, apply the filters that I require, and see it all.

ThreatLocker Zero Trust Endpoint Protection Platform allows me to go in and see what has been blocked recently, make sure that there is not anything malicious in the field, or that nothing is impacting the day-to-day needs of our employees.

We have used the ring fencing feature with ThreatLocker Zero Trust Endpoint Protection Platform; it has been very handy in basically locking down the access range that our authorized applications have and keeping things where they need to be.

It is very easy to manage the allow-listing feature of ThreatLocker Zero Trust Endpoint Protection Platform; it makes it much easier to look at everything and confirm that I know what that program is and what that application is so I can let it run, versus having to go through a giant list and try to remember what something is called based on file names. This is definitely very user-friendly.

At this point, I have not found anything about ThreatLocker Zero Trust Endpoint Protection Platform that really needs improvement.

Maybe the documentation for ThreatLocker Zero Trust Endpoint Protection Platform could be enhanced, but it would be a minor improvement.

We have been using ThreatLocker Zero Trust Endpoint Protection Platform for about three months.

ThreatLocker Zero Trust Endpoint Protection Platform is stable; we have had zero issues in terms of getting into it, operating it, or making or saving any changes that we have ever needed to make. It is also very quick.

So far, we have had no issues with the scalability of ThreatLocker Zero Trust Endpoint Protection Platform; it has been able to expand and the group and customization we get out of it is quite impressive.

We have not really needed to utilize customer support at this time for ThreatLocker Zero Trust Endpoint Protection Platform; the implementation team and support from that avenue has been more than sufficient for us to keep things up and running and functional.

We did not previously use a different solution with ThreatLocker Zero Trust Endpoint Protection Platform. We did not really evaluate any other options before choosing ThreatLocker Zero Trust Endpoint Protection Platform; we were able to witness a demo and see it in action at a conference at one point and it really intrigued us. We arranged for more of a live demo on our side along with some implementation and review, and it just fit all the needs that we had.

Keep the cadence of the implementation meetings when looking into using ThreatLocker Zero Trust Endpoint Protection Platform; they are your greatest resource in getting things onboarded and everything set up. That is really the key piece. Without our implementation team, it would not be going nearly as smoothly as it does. Give yourself time as well. It is not something that can happen quickly, especially if you have a complex array of systems that touch a lot of different things. Make sure that you do not go too secure too quickly.

With the capabilities and the power that were behind ThreatLocker Zero Trust Endpoint Protection Platform, it came in at a much lower number than what we expected, and the team that helped us get it all lined out was quick, efficient, and very informative.

We are not expecting immediate returns at this time, but we are expecting to see some good returns in terms of risk being brought down due to the fact that malicious software will not be able to be run and shadow IT applications will not be done as well.

At this time, we have not consolidated anything with ThreatLocker Zero Trust Endpoint Protection Platform, but the plan is to consolidate our USB tool management to prevent unauthorized USB devices on the network.

We have not run into too many situations that required workarounds; we have mostly been reviewing the blocked items and selecting the ones that we need to get enabled. This is because we are still in the early implementation phase.

I would rate ThreatLocker Zero Trust Endpoint Protection Platform a 10 overall.

Essentially, ThreatLocker Zero Trust Endpoint Protection Platform is super easy to use, very informative, and it does everything quickly and easily.

Public Cloud

Amazon Web Services (AWS)

My main use case for ThreatLocker Zero Trust Endpoint Protection Platform is to secure the server.

A specific example of how I use ThreatLocker Zero Trust Endpoint Protection Platform to secure my server is that nobody can install any application without my permission, which is helpful.

I use ThreatLocker Zero Trust Endpoint Protection Platform by installing it on every server to monitor it from the portal, where I can grant access if an application needs to be installed or deny it if it does not. This approach is helpful for us.

In my opinion, the best features that ThreatLocker Zero Trust Endpoint Protection Platform offers are that it is a zero trust solution that will not trust any application until I give access and will not install a single application without my permission. This is valuable because if any viruses attack my server, it stops them, making it very helpful to prevent ransomware attacks.

ThreatLocker Zero Trust Endpoint Protection Platform has positively impacted my organization by ensuring that as soon as we implement it on the server, new employees or new colleagues cannot install anything without our permission.

It has reduced the number of unauthorized software installations.

ThreatLocker Zero Trust Endpoint Protection Platform can be improved by providing admin rights that allow us to manage it from the server by providing some token IDs or any kind of OTP if someone has rights and is on leave. This would be helpful so we do not need to wait for someone or for admin rights; they can easily generate the OTP, and then we can use it.

I have been using ThreatLocker Zero Trust Endpoint Protection Platform for about four years.

I do not have any issues with the stability of ThreatLocker Zero Trust Endpoint Protection Platform.

ThreatLocker Zero Trust Endpoint Protection Platform is definitely scalable and can grow with my organization easily.

Customer support has been awesome; I can reach them by email, and they give me a response very quickly.

We were using McAfee as well, and we replaced it with ThreatLocker Zero Trust Endpoint Protection Platform.

We decided to consolidate those tools because ThreatLocker Zero Trust Endpoint Protection Platform provides EDR, which aligns with the zero trust model.

ThreatLocker Zero Trust Endpoint Protection Platform is deployed in my organization using multiple methods, such as on-premises and hybrid cloud.

The cloud provider I use for my deployment is Microsoft Azure.

My experience with pricing, setup cost, and licensing for ThreatLocker Zero Trust Endpoint Protection Platform is good because it has a nominal price.

I would say ThreatLocker Zero Trust Endpoint Protection Platform offers good value for money because if you are pursuing security, you should consider ThreatLocker Zero Trust Endpoint Protection Platform. Money is saved because it is not costly, and I would suggest it for other companies. I would definitely recommend it to new companies if I had the opportunity.

As soon as someone tries to install an application, ThreatLocker Zero Trust Endpoint Protection Platform quarantines and denies it, blocking it effectively, which is helpful.

It is helpful for us to find out which application is being blocked or which user is trying to install something using the DAC dashboard, as it is clear and helpful.

We have not used the storage control feature for enforcing policy-driven access over various storage devices because we are using Wasabi storage.

I would advise someone that if they need a zero trust platform, they can switch to ThreatLocker Zero Trust Endpoint Protection Platform.

My impression of the allow-listing feature in ThreatLocker Zero Trust Endpoint Protection Platform is that we can add the application .exe file or the path so it will not block useful applications, such as the call recording application, track applications, and sometimes the Wasabi cloud platform.

I already explained why we are switching to ThreatLocker Zero Trust Endpoint Protection Platform; it gives quick resolution and quick action. I would rate this review a 10.

Hybrid Cloud

Microsoft Azure

My main use case for ThreatLocker Zero Trust Platform is endpoint and network security.

A specific example of how I use ThreatLocker Zero Trust Platform for endpoint and network security is that it excels because once properly implemented, nothing executes or runs without an explicit policy allowing it to do so. It goes further by controlling exactly what it can communicate with over the network.

ThreatLocker Zero Trust Platform has positively impacted my organization as a solution we have implemented and find great confidence in the end result. We have every expectation that should a nefarious actor gain some level of access, they will not get far or do much before ThreatLocker Zero Trust Platform's policies immediately stop them.

Since implementing ThreatLocker Zero Trust Platform, I have noticed less time spent managing other security solutions, which is a positive metric.

By using ThreatLocker Zero Trust Platform, my organization has not been able to consolidate or eliminate any security tools or solutions, as this has filled a gap in our existing toolset.

The best features ThreatLocker Zero Trust Platform offers include incredibly granular control.

The granular control I experience with ThreatLocker Zero Trust Platform is both the application allow and network controls and the level of granularity. It is not as simple as giving an application permission to run, as we can dive into incredibly finite details to control what runs and what does not.

Regarding ThreatLocker Zero Trust Platform's AI capabilities, I consider its governance and security to be appropriate for its level of maturity.

Regarding the accuracy and reliability of output from ThreatLocker Zero Trust Platform's AI capabilities, it is performing well.

My impression of the solution's allowlisting feature in terms of managing which software, scripts, and libraries run on my devices is that it is excellent.

I have used the Ringfencing feature with ThreatLocker Zero Trust Platform, and I assess its impact on controlling the behavior of approved applications as excellent, as it provides great visibility with reasonable control.

ThreatLocker Zero Trust Platform's Zero Trust Endpoint Firewall network control feature complements our existing strict network policies with deeper granularity, impacting my ability to manage network traffic across my endpoints and servers.

I use the Privileged Access Management, or elevation control, feature in ThreatLocker Zero Trust Platform.

I assess the efficiency of the real-time threat intelligence and category controls used by web content control in blocking malicious and non-compliant sites as excellent.

ThreatLocker Zero Trust Platform can be improved with more automation around visibility and reporting for a more automated method to dial in policies to the most secure solution possible.

I have been using ThreatLocker Zero Trust Platform for roughly two and a half years.

ThreatLocker Zero Trust Platform has helped my organization save on operational costs or expenses, but the amount is unknown and not measured.

I have seen a return on investment, with a general sense that this is our trusted solution for granular control of applications and network activity.

My experience with pricing, setup cost, and licensing for ThreatLocker Zero Trust Platform has been excellent.

Before choosing ThreatLocker Zero Trust Platform, I did not evaluate any other options; there were no other options.

I rate ThreatLocker Zero Trust Platform a nine on a scale of one to ten.

I chose a nine for ThreatLocker Zero Trust Platform because, while no platform is without opportunity to improve, I think the current platform is nothing short of excellent.

ThreatLocker Zero Trust Platform is deployed in my organization in a hybrid cloud setup. ThreatLocker Zero Trust Platform is deployed in my environment as a private cloud. For my private cloud, I use a self-hosted solution.

Private Cloud

Other

My main use case for ThreatLocker Zero Trust Platform is endpoint protection, a zero trust platform for applications, We use ThreatLocker Zero Trust Platform for application whitelisting and blacklisting for certain purposes on different machines and computers as a specific example of how we use it for one of those purposes.

Made it overall safer and more organized

The best features ThreatLocker Zero Trust Platform offers include application control, network control, web control, and storage control. All these features are great and are used effectively by us.

I find myself relying the most on Application Control mainly because we use it for application whitelisting, making it very beneficial for us and it keeps a good stack for our applications that we should use.

ThreatLocker Zero Trust Platform has impacted our organization positively by providing protection and it has been a great tool for us from a security perspective.

My impression of the solution's allow-listing feature in terms of managing which software, scripts, and libraries run on my devices is that it is very solid because we can easily review what scripts and things are coming in ahead of time and only approve which ones we want.

I have used the ringfencing feature with ThreatLocker Zero Trust Platform, and I assess its impact on controlling the behavior of approved applications as really good because certain applications should not have to interact with other applications, so it has been really beneficial.

Identifying which security and configuration settings need fixing using the DAC dashboard is pretty easy because they offer the solutions for it as well.

Improvements for ThreatLocker Zero Trust Platform could include some additional guidance in the beginning of setup. We were fortunate enough to work with an engineer for a lot of our setup and it was very beneficial, but we also had some questions there, and they have a great support team that helps us. However, some more guidance in the beginning would be very beneficial for those just starting out.

I have been using ThreatLocker Zero Trust Platform for about two years now.

ThreatLocker Zero Trust Platform is stable.

The scalability of ThreatLocker Zero Trust Platform is fairly easy and quite good.

The customer support is fantastic.

N/A

The impact of application whitelisting or blacklisting with ThreatLocker Zero Trust Platform on my day-to-day work has been that efficiency-wise, it was a bit harder in the beginning because we were new to the product and it was a lot of overhead to manage it. However, once we got through all the challenges with it, it became very easy, and we were able to develop a good workflow for ourselves and for all of our clients.

My advice to others looking into using ThreatLocker Zero Trust Platform is that it is going to be difficult in the beginning, but it will be much easier after going through the setup for your first client and then branching out from there; it becomes much easier. I give this product a rating of 10 out of 10.

It's for Application Control and Elevation requests, so just locking down computers.

The application allowlisting feature of ThreatLocker Zero Trust Endpoint Protection Platform has been the most valuable to us, so Application Control.

The application allowlisting feature prevents random software from running. If a user clicks a link or downloads something malicious or potentially an unwanted program that could give away sensitive information or is inappropriate for them to have on their computer, it just prevents it from even running in the first place.

The Ringfencing feature of ThreatLocker Zero Trust Endpoint Protection Platform stops applications from being able to open up other applications and do things beyond what they were controlled to do. A great example is with PowerShell scripts or web browsers opening up a command prompt or something. It stops all of that.

We do use the Elevation Control feature of ThreatLocker Zero Trust Endpoint Protection Platform. That allows us to create a policy. If we know that a user needs to be able to install a program themselves or update a program themselves, we can give them the rights to do that without having to get a hold of IT. The Elevation Control, even for a brand new user on a brand new computer, if they have the policy, they can install it without having to contact IT as well. Then we can get rid of local admin, even on the IT side, so we are not running around as local admins ourselves.

The Just-in-Time administrative access feature of ThreatLocker Zero Trust Endpoint Protection Platform is a great way to have it work. It only works for running the application it has been approved for, and it just gives them the permission to run it with those elevated permissions. Then there's a built-in expiration, so either the user has to request it again or rerun the program. They don't just keep the admin rights.

Now that we've been learning a lot more about what all the other modules of ThreatLocker Zero Trust Endpoint Protection Platform can do, the modules we don't have right now could be eliminated and help us consolidate costs and tooling. So we are considering it, but we're in the middle of contracts, we just got it, and we're just getting used to it. So we're not at that stage yet.

The allowlisting feature of ThreatLocker Zero Trust Endpoint Protection Platform is really good. It's very, very strict. So in some ways, it can be frustrating because you have to explicitly allow each individual thing. Some applications are actually five applications in one, so each little component you have to allow. There has been some friction with the end-users and ourselves just trying to use our computers. But that level of control and granularity really increases my confidence that this is keeping us safe.

I've been using ThreatLocker Zero Trust Endpoint Protection Platform for about six months.

ThreatLocker Zero Trust Endpoint Protection Platform has been really stable. I haven't noticed any issues.

ThreatLocker Zero Trust Endpoint Protection Platform scales pretty well with the growing needs of my company. We rolled it out division by division, group by group, so it was pretty smooth on that end.

ThreatLocker Zero Trust Endpoint Protection Platform's customer service and technical support has been pretty solid.

Positive

It is the first solution of this kind that I'm using.

I'm not in purchasing or managing contracts. From the setup side, ThreatLocker Zero Trust Endpoint Protection Platform rolled out pretty smooth, as smooth as blocking people from running a bunch of applications can go. You get a lot of users complaining that things aren't working, but it turns out they were just using some weird browsers or apps they maybe shouldn't have been. So I don't have too much sympathy for those complaints, but there was a flood of tickets for support, and it was hands-on. But I would say ThreatLocker themselves, onboarding us, were very hands-on.

There have been tons of meetings, and they still meet with us regularly.

We do not use the Network Control feature of ThreatLocker Zero Trust Endpoint Protection Platform. We don't have that.

We have not used the Storage Control feature of ThreatLocker Zero Trust Endpoint Protection Platform. It's not a module we have.

We have peeked into the DAC dashboard. We have the Configuration Manager, but we have not fully deployed all of that. I get a monthly and weekly report on configurations, but we haven't deep-dived into it and started cleaning up some of that.

The only thing we do with Web Control is the browser add-ons. We are not using ThreatLocker Zero Trust Endpoint Protection Platform to filter web traffic.

I would like a feature in the next release of ThreatLocker Zero Trust Endpoint Protection Platform, but I don't know because of a lot of the modules we don't have. So maybe what I'm asking for is a module we would just need to add.

If we were going to consolidate tools, we would want to get ThreatLocker Detect, and then we would need the Network Control so you could lock down the network. If you detect a virus or something malicious actually happening on the computer, you can lock it down just using ThreatLocker. But we don't have that. We're not set up to do that yet. We have other things that do that at this time. So we're not necessarily missing that feature, but if I was going to consolidate, I would want to make sure ThreatLocker Zero Trust Endpoint Protection Platform could do that.

I would give ThreatLocker Zero Trust Endpoint Protection Platform a rating of nine out of ten. I would consider, from the start, figuring out how much you want ThreatLocker Zero Trust Endpoint Protection Platform to do for you because I think it could really take over a lot of security functionality in our company. But between renewals and contract length terms when we picked up ThreatLocker Zero Trust Endpoint Protection Platform, it kind of fell in between all of that, and we could have maybe really optimized our costs and deployment. But also, there is something to be said because of how complicated it is, how much it can do, and how much there is to master about it. Doing a more limited Application Control, Ringfencing, Elevation Control, and then slowly expanding as you learn and become more comfortable with it, there is some value to be said there.