Boltwork is the ironmongery doing the actual holding once a vault door swings shut. Its computing counterpart is a roll of permitted programs, and a blunt refusal for anything missing from that roll. Deeply unfashionable, and it removes an entire species of incident instead of chasing one around the building.
There is one honest objection to this, and it is that somebody must look after the roll or work stops. Which is why nothing starts from an empty page. It starts by watching, long enough to record the software your people genuinely open, and that recording becomes the opening roll.
Afterwards, requests reach engineers who answer them. Publishers ship updates constantly and those are followed in one place, so a release from a firm you depend on does not become a Tuesday morning outage. Where somebody truly needs a new tool, the wait runs in minutes and never in change boards.
Permitting a program is not the same as handing it the machine. A ringfence states which files an approved program may open, which processes it may launch, and where it may connect. That is the mechanism keeping a perfectly legitimate utility from doubling as somebody else's transport.
Elevation is the third component. Staff who occasionally require administrator rights get them for one job and give them back afterwards. The permanent local administrator account, on which a startling amount of trouble quietly depends, is simply retired.
Figures on this page come from billing at the moment it opens. Anything you add rests on your manifest, and stays put while you read.
Bolts thrown across execution itself. Anything missing from the list is declined at the moment of launch, which deletes an entire family of incidents instead of racing them down the corridor.
| Bolted to | ThreatLocker |
|---|---|
| Seals | Enrolled Windows and macOS endpoints |
| Stored for | Every permission and every refusal, kept as a reviewable record |
| Opens with | A request landing with an engineer, usually answered inside minutes |
| Audited by | Fortify 24x7 engineers on the request queue, logging each decision |
This room is strong because it is narrow. The narrowness belongs here, and not in a discovery you make during month four.
Heads up: card statements show FORTIFY 24X7 - Client Data Armor is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.