From USB blocking and DLP to antivirus, web filtering, application control, and remote fleet management — every feature ships in a single lightweight agent, licensed per PC.
The enforcement engine. Storage is locked, peripherals stay working, and detection happens before the operating system can act.
Blocks unauthorised USB mass storage — flash drives, external drives, SSDs, memory cards and phones in MTP mode — while leaving the machine usable. Controlled per machine from the admin dashboard.
Keyboards, mice, webcams and headsets are recognised as human-interface devices and allowed through automatically. Only storage classes are ever blocked, so nobody is left unable to work.
Windows Management Instrumentation events drive detection instead of polling, so a device is identified and classified the moment it is connected — typically in under 100 ms, and before a volume is ever mounted.
Seven enforcement layers covering what leaves the machine, what runs on it, and where it goes.
Every file movement — to removable media, cloud folders, printers and network shares — is recorded with the file, the destination and the user who initiated it.
Policy rules match on file type, extension, size and content before a transfer is allowed to proceed. Anything matching a rule is blocked and escalated to the administrator.
On-access scanning through Microsoft Defender, with detection handled on the machine so a threat is contained even when the endpoint is temporarily offline.
Decide which programs may run at all, and which may only run under certain conditions. Prevents unmanaged tooling being used to move data off a protected machine.
Category-based web filtering blocks risky destinations at the network layer, so a browser cannot be used as an unmanaged upload channel.
Stop installers, archives and executables being saved to local disk in the first place, rather than cleaning them up after the fact.
Credential-harvesting and known-malicious destinations are blocked before the page loads, and the attempt is logged so repeated targeting is visible.
Licensing, policy and updates for an entire estate, from one dashboard.
Each licence is bound to specific hardware. A key copied to another machine does not activate, so a licence cannot be shared or resold.
Policy, permissions and device state are held centrally and pushed to endpoints. Change a rule once and every managed machine converges on it.
Every blocked device, refused transfer, policy change and administrative action is recorded and retained, so any incident can be reconstructed afterwards.
See every machine, its licence state, its policy and its current health in one place. Push configuration and revoke access without visiting the endpoint.
Every security event generates an alert in the cloud dashboard and can optionally trigger an email or in-agent notification so nothing goes unnoticed.
Agent and application updates download and install in the background. Your licence includes every future feature release at no extra charge, ever.
Every feature included in every plan. No tier restrictions, no hidden add-ons.
Trial includes every feature for 7 days on 1 PC. No credit card required. Compare paid plans →
FREE 7-DAY TRIAL · NO CREDIT CARD
Download the Windows agent and have all 13 security modules active on your first machine in under five minutes.