Cybereason

Cybereason

5.0 out of 5 stars
ThreatLocker

ThreatLocker

4.8 out of 5 stars
+
+
Visit Website for ThreatLocker

About

Together we can end cyber attacks at the endpoint, across the enterprise, to everywhere the battle moves. Cybereason delivers over-the-horizon visibility and high fidelity convictions of both known and unknown threats so defenders can leverage the power of true prevention. Cybereason provides the deep context and correlations from across the whole of the network to uncover stealthy operations and enable defenders to be expert threat hunters. Cybereason significantly reduces the time required for defenders to investigate and resolve attacks through both automated and guided remediation with just a click of the mouse. Cybereason analyzes 80 million events per second - that’s 100x the volume of other solutions on the market. Reduce investigation time by as much as 93% to eliminate emerging threats in a matter of minutes rather than days.

About

ThreatLocker is a Zero Trust Platform that prevents cyber threats by blocking unknown applications, enforcing least privilege, and controlling what can run across your environment. Using Allowlisting, Ringfencing, Network Control, and more, ThreatLocker stops ransomware, zero-day attacks, and unauthorized activity before execution, rather than relying on detection after the fact. Built for modern IT and cybersecurity teams, the platform delivers centralized visibility and policy management across endpoints, users, and applications. ThreatLocker reduces attack surface, limits lateral movement, and supports compliance with detailed audit logs. With fast deployment, a large built-in application library, and streamlined approvals, organizations can strengthen security while minimizing operational overhead and maintaining business continuity.

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Supported
On-Premises Not Supported
iPhone Supported
iPad Supported
Android Supported
Chromebook Not Supported

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

IT security teams

Audience

IT pros looking for a Zero Trust Platform

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Not Supported

Support

Phone Support Supported
24/7 Live Support Supported
Online Supported

API

Offers API Not Supported

API

Offers API Supported

Screenshots and Videos

Screenshots and Videos

Pricing

No information available.
Free Version Supported
Free Trial Supported

Pricing

Pricing by endpoint
Free Version Not Supported
Free Trial Supported

Reviews/Ratings

Overall 5.0 / 5
ease 5.0 / 5
features 4.5 / 5
design 5.0 / 5
support 4.5 / 5

Reviews/Ratings

Overall 4.9 / 5
ease 4.4 / 5
features 5.0 / 5
design 4.6 / 5
support 5.0 / 5

Pros & Cons from Real Users

Pros

  • Cybereason EDR includes customizable automated response playbooks that allow teams to respond to threats in real-time. These playbooks can automatically quarantine infected endpoints, isolate processes, or alert security teams, reducing response times and minimizing manual intervention. Cybereason visual representation of attack timelines and paths helps security teams quickly understand the scope and impact of threats. The platform supports advanced threat hunting capabilities with a focus on proactive identification of threats.
  • Cybereason continuously integrates threat intelligence from multiple global sources. This keeps the platform up-to-date with the latest threat landscapes and attacker tactics, techniques, and procedures, improving its ability to detect novel threats faster than traditional EDR tools. Cybereason provides in-depth investigation and forensic capabilities, enabling security analysts to dive deep into the details of an attack. Cybereason detailed logging and data retention options support comprehensive post-incident analysis, helping teams improve defenses and learn from past incidents.

Cons

  • Due to the behavior-based detection system, Cybereason can sometimes produce a higher volume of false positives, particularly when analyzing complex environments. Cybereason is effective for large organizations, the cost can be high when deploying across thousands of endpoints.
  • Cybereason EDR offers advanced features and customization options, which can lead to a steep learning curve for new users. Initial setup and configuration can be complex, especially for organizations without experienced cybersecurity professionals, which may delay deployment and full operationalization.

Pros from Real Users

Pros

  • Great for the protection it offers and provides great visibility and insight into what is permitted in our environment. Highly recommend for protecting your environment with multiple tools at your disposal.
  • - Ease of use - Great support. Never waiting more than a few minutes for live support - Great feature - Active development. Regular feature updates - Much better alternative to App Locker
  • ThreatLocker takes an effective zero trust approach to application and network access. Onboarding customers is very straight-forward thanks to learning mode, and approving items that were incorrectly denied access is very straight-forward. The Cyber Hero support team are very attentive in getting any issues resolved quickly.
  • Vendor Support is the best in the business! Features that it provides are incredibly easy to use and effective. Application Control is something all Cyber Security teams need to have in their Security Stacks and Provides so much control over what applications are allow into your environment Their EDR is incredibly Lightweight in comparison to some of its competitors.
  • We love the support team at ThreatLocker. They are concise and geared with answers to every question imaginable.
  • ThreatLocker is a very reliable product that our company has been using for quite some time. It has successfully caught numerous threats and prevented us from falling victim to various cyber attacks.
  • ThreatLocker impresses with its intuitive interface, catering well to both agents and end users alike. Deploying the solution across our environment was straightforward, ensuring security for our endpoints and servers. The product excels in providing robust security features and comprehensive control, making it a standout choice for implementing a zero-trust model. Support and account management are exemplary, consistently exceeding industry standards.
  • ThreatLocker is a beautiful product, the greatest ever seen. I am in awe of what they have managed to do with their product.
  • Does an extremely good job of preventing problematic applications from either taking over or accessing information they shouldn't. Ringfencing prevents applications that have no need for lateral movement from doing so. Adopting a zero-trust methodology fixes a major security flaw in that it prevents problems before they start, for the minor inconvenience of getting unknown things approved first. Automated privilege escalation is one of the best features; if a user is installing an app that requires admin privileges, you can approve automatic escalation for a period of time for that installer and no credentials are needed to be passed to the user.
  • The ease of use on implementation, and troubleshooting. Have more control over the environment without requiring a Team dedicated to reviewing logs and taking action.

Training

Documentation Not Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Supported
Live Online Supported
In Person Supported

Company Information

Cybereason
Founded: 2012
United States
www.cybereason.com

Company Information

ThreatLocker
Founded: 2017
United States
www.threatlocker.com

Alternatives

Alternatives

Airlock Digital

Airlock Digital

4.6 out of 5 stars
IBM QRadar EDR

IBM QRadar EDR

IBM
5.0 out of 5 stars
Curtain LogTrace File Activity Monitoring

Curtain LogTrace File Activity Monitoring

Coworkshop Solutions
4.0 out of 5 stars
Fortinet

Fortinet

5.0 out of 5 stars
CrowdStrike Falcon

CrowdStrike Falcon

CrowdStrike
4.6 out of 5 stars
Fortinet

Fortinet

5.0 out of 5 stars

Categories

Categories

IT Security Features

Anti Spam Not Supported
Anti Virus Supported
Email Attachment Protection Not Supported
Event Tracking Not Supported
Internet Usage Monitoring Not Supported
Intrusion Detection System Not Supported
IP Protection Not Supported
Spyware Removal Not Supported
Two-Factor Authentication Not Supported
Vulnerability Scanning Not Supported
Web Threat Management Not Supported
Web Traffic Reporting Not Supported

Cybersecurity Features

AI / Machine Learning Supported
Behavioral Analytics Not Supported
Endpoint Management Supported
Incident Management Not Supported
IOC Verification Not Supported
Tokenization Not Supported
Vulnerability Scanning Supported
Whitelisting / Blacklisting Supported

Endpoint Protection Features

Activity Log Supported
Antivirus Not Supported
Application Security Supported
Behavioral Analytics Supported
Device Management Supported
Encryption Not Supported
Signature Matching Supported
Web Threat Management Supported
Whitelisting / Blacklisting Supported

IT Security Features

Anti Spam Supported
Anti Virus Not Supported
Email Attachment Protection Supported
Event Tracking Not Supported
Internet Usage Monitoring Not Supported
Intrusion Detection System Supported
IP Protection Not Supported
Spyware Removal Not Supported
Two-Factor Authentication Supported
Vulnerability Scanning Not Supported
Web Threat Management Supported
Web Traffic Reporting Not Supported

Data Loss Prevention Features

Compliance Reporting Supported
Incident Management Not Supported
Policy Management Supported
Sensitive Data Identification Not Supported
Web Threat Management Supported
Whitelisting / Blacklisting Supported

Firewall Features

Alerts / Notifications Supported
Application Visibility / Control Supported
Automated Testing Supported
Intrusion Prevention Supported
LDAP Integration Not Supported
Physical / Virtual Environment Supported
Sandbox / Threat Simulation Supported
Threat Identification Supported

Network Access Control (NAC) Features

Authentication Not Supported
Authorization Not Supported
Automated Hotfix / Updates Not Supported
Centralized Policy Management Supported
Dashboard Supported
Device Auto-Provisioning Not Supported
Device Self-Registration Not Supported
Posture Assessment Not Supported
Quarantine / Remediation Not Supported
Secure Guest Access Not Supported

Privileged Access Management Features

Application Access Control Supported
Behavioral Analytics Not Supported
Credential Management Not Supported
Endpoint Management Supported
For MSPs Supported
Granular Access Controls Supported
Least Privilege Supported
Multifactor Authentication Not Supported
Password Management Not Supported
Policy Management Supported
Remote Access Management Not Supported
Threat Intelligence Not Supported
User Activity Monitoring Supported

Integrations

Armis Centrix Supported
Auth0 Not Supported
Axonius Supported
Azure-AD-External-Identities Not Supported
COZYROC SSIS+ Suite Supported
Chronicle SOAR Supported
Cisco XDR Supported
ConnectWise ScreenConnect Not Supported
Google Digital Risk Protection Supported
IT Glue Not Supported
MyGlue Not Supported
NetWatch.ai Supported
Network Glue Not Supported
SSOJet Not Supported
Splunk Enterprise Not Supported
ThreatQ Supported
Vectra AI Supported
Wandera Supported

Integrations

Armis Centrix Not Supported
Auth0 Supported
Axonius Not Supported
Azure-AD-External-Identities Supported
COZYROC SSIS+ Suite Not Supported
Chronicle SOAR Not Supported
Cisco XDR Not Supported
ConnectWise ScreenConnect Supported
Google Digital Risk Protection Not Supported
IT Glue Supported
MyGlue Supported
NetWatch.ai Not Supported
Network Glue Supported
SSOJet Supported
Splunk Enterprise Supported
ThreatQ Not Supported
Vectra AI Not Supported
Wandera Not Supported
Claim Cybereason and update features and information
Claim Cybereason and update features and information