Application Control and Allowlisting Solution

Our main use for Airlock Digital Application Control  is locking down which applications can run on critical endpoints. For example, we had a finance server where only pre-approved accounting software is allowed. Airlock Digital Application Control  made that a breeze to enforce.

Airlock Digital Application Control has positively impacted my organization by boosting our confidence in security. We've drastically cut down on Shadow IT issues, with no unapproved apps running. Plus, we've had smoother audits, and overall downtime from security incidents has gone down significantly. It's been a major win for operational stability.

Roughly, the downtime from unauthorized software incidents dropped about 40% over the year with Airlock Digital Application Control.

Airlock Digital Application Control makes it easy to enforce restrictions compared to what we were doing before by streamlining the whole process with its central control and real-time approvals. Before, we had a mix of manual allowlists and some group policy tools, but they were clunky and easy to bypass. It's faster and no one's sneaking in rogue apps now.

Airlock Digital Application Control has saved us a lot of time. Whenever we roll out a new tool, approval and deployment are super smooth. It fits naturally into our workflow because it's flexible, but still strict where we need it to be.

The best feature of Airlock Digital Application Control is the real-time approval workflow, which is a game-changer. When something new tries to run, I get notified immediately, and I can approve or deny right there. Also, the audit logging is incredibly detailed, which makes compliance a breeze. These stand out because they give me both control and visibility without slowing down our team.

The policy creation in Airlock Digital Application Control is intuitive. Templates help us get started quickly. Plus, it integrates well with our existing security tools, so it doesn't feel we're reinventing the wheel. Those integrations mean less hassle when we're managing things end-to-end.

Airlock Digital Application Control's governance is strong. It's very clear who approves what, and that's well-logged. On the security side, they've done well with no obvious gaps. If they evolve AI features further, maintaining that same tight control would be key.

In terms of accuracy and reliability, Airlock Digital Application Control is spot on. When it identifies applications, it's been correct every time. I haven't encountered false positives or misses in our environment. It's proven to be a reliable layer of control.

The granularity in Airlock Digital Application Control is one of its strengths. We can tailor policies down to specific apps or even user groups, and that's been really helpful. It gives us the right amount of control without feeling overwhelming.

The policy creation wizard definitely helps day-to-day. The policy wizard simplifies creating or updating rules, so I spend less time on repetitive steps. It's intuitive enough that managing policies doesn't feel like a chore. It's more streamlined.

We do use the policy change history feature in Airlock Digital Application Control, and it's been a big help. The history lets us track exactly who changed what and when, making audits smoother and ensuring we have a clear governance trail. It's given us peace of mind and accountability.

The newer interface of Airlock Digital Application Control is definitely an improvement. It's clearer and more responsive, so I can get things done faster. Compared to the old version, it just feels smoother and less clunky. Definitely a good evolution.

We do leverage Airlock Digital Application Control's bidirectional REST API, and it's been a game-changer for automation. It lets us integrate with our existing tools, like our ticketing system, so we can automatically approve or log changes. It's cut down on manual steps and made the process more efficient.

Utilizing Airlock Digital Application Control has definitely helped prevent malware within our systems. We had one notable case where a suspicious executable tried to run, and Airlock Digital Application Control blocked it immediately. Turned out it was a malware attempt. Without Airlock Digital Application Control, that could have caused real trouble. So, it's been a strong layer of defense.

The main improvement for Airlock Digital Application Control is that the initial rollout required a bit of a learning curve for less technical folks. More user-friendly onboarding for non-admins would help. Otherwise, it's been pretty solid.

The documentation for Airlock Digital Application Control could be a bit more expansive, especially for edge case scenarios. And while the interface is mostly intuitive, a slight refresh could make navigating complex policies even smoother. But overall, nothing too critical.

The Azure  integration with Airlock Digital Application Control has been solid overall, but deeper automation, like more granular policy syncing between on-prem and cloud, could be helpful. But really, that's more of a nice-to-have than a critical gap.

I've been using Airlock Digital Application Control for a little over a year now, so I've had a good chance to see how it holds up day-to-day.

Airlock Digital Application Control is stable in my experience. We haven't had unexpected crashes or disruptions, and it's reliably enforced policies day in and day out.

Airlock Digital Application Control scales well. We started small and gradually expanded coverage across more endpoints without any hiccups. It's handled growth in our environment smoothly, so scalability hasn't been an issue.

The customer support for Airlock Digital Application Control has been responsive. When we had questions during setup, they were quick to assist. It's reliable and knowledgeable, so we felt supported throughout.

I'd give the customer support team of Airlock Digital Application Control a solid 9. They were quick, knowledgeable, and really helped us when we needed them. There's always room for improvement, but I've got no complaints.

Before Airlock Digital Application Control, we used a combination of group policies and basic allowlists. We switched because those were too manual and easy to bypass. Airlock Digital Application Control gave us real-time control and more robust security.

Before choosing Airlock Digital Application Control, we evaluated a couple of other application control solutions like Microsoft AppLocker and Carbon Black, but ultimately, Airlock Digital Application Control gave us the mix of ease, control, and support we were after.

I'd suggest starting with a pilot group for Airlock Digital Application Control. Get familiar with its workflow and policy setup before going organization-wide. Also, involve your security and operations teams early. It'll help smooth out the learning curve and ensure policies fit your environment.

In rough terms, we cut incident response time by about 30% with Airlock Digital Application Control, which translated into fewer overtime hours for the team. We didn't reduce headcount, but we reallocated time from putting out fires to more proactive work. While hard to quantify perfectly, the time saved definitely outweighed the cost.

The pricing for Airlock Digital Application Control felt reasonable for the value we got. Setup costs were mostly tied to our time investment, but licensing was straightforward. Overall, we felt it was a fair deal given the security benefits.

Deployment in our setup involves Airlock Digital Application Control in a hybrid environment. We manage some on-premise endpoints, but it integrates with our cloud infrastructure as well. We primarily use Azure  for our cloud side of things.

Airlock Digital Application Control is super effective and reliable, and I gave it a rating of 8 to reflect this. The initial learning curve and the need for a bit more user-friendly refinement held it back from a 10. If onboarding were smoother and the UI a tad more polished, it'd be perfect. But as it stands, it's still excellent.

Application whitelisting has become increasingly important, and ensuring that we’re not running code unknown to our organization is crucial. The organizations I work for have been using it to effectively whitelist applications known to be in use, and then highlight any applications that aren’t within the remit of the service delivery organizations or the infrastructure organizations, ensuring that we’re only executing known code.

One of the use cases for Airlock Digital Application Control  that we identified were timer applications; we found applications being used potentially to exfiltrate information. We found people using WhatsApp as well as Signal, which weren’t under the control of the data loss prevention capability within the organization I was working with, so we were able to identify applications that might be missed by DLP .

We have certain use cases where users require using scripting languages and programming languages such as Python to run simulations and modeling; this is not something we want every user to be able to do, but it’s allowed us to select which users are allowed to run certain applications and under what scripting languages and programming languages and under what circumstances they’re allowed to run them. This means that it’s not a blanket on or off; it’s about under what context the application can actually run, allowing users to use Python or PowerShell under constrained use cases as opposed to unrestricted access.

One of the other capabilities I haven’t mentioned is the ability to have an on-premises as well as a cloud instance; in the industries I work in, having the ability to run disconnected from the internet or running everything on-premises for data sovereignty purposes is really important. Airlock Digital Application Control  has given us that flexibility to have both deployments depending on the context in which we’re running the application or needing this capability.

Anybody going on an application control journey is going to realize that they need a maturity uplift; this has allowed us to present information back to the service delivery organizations and the infrastructure organizations, and the application organizations within the companies I’m working with, and help them develop a maturity plan around uplifting their processes and their policies and their workflows. It’s also helping them have justification around limiting Shadow IT, and being able to say no—this application is not appropriate or this application is appropriate. It helps them on that maturity journey.

Airlock Digital Application Control is probably the easiest application control that I’ve come across; the product has a GUI-first, web interface-first approach to application control, and the way that it’s able to present exceptions or identify what those untrusted executions are is the best that I’ve seen in the field. It’s easy, it’s very quick, and I think that it reduces that barrier to entry for application control.

One of the best features that Airlock Digital Application Control offers is the ability to create complex rules around what applications are allowed to execute under what circumstances and where. It helps us answer the who, what, where, when, and why, to a lesser extent, applications are being used; it’s absolutely the ability to define complex rule sets.

I appreciate the automated baselines that are in Airlock Digital Application Control; being able to start off with a starting point of what, for example, Windows 10  or Windows 11  or one of the server platforms would normally run means we’re not developing our policies from scratch. I also appreciate the ability for bulk adding and identifying publishers of applications and being able to blanket approve publishers, for example, or I can put complex rules around publishers so that the publisher can only execute under certain circumstances. The flexibility and the way that the product has been designed has been really well thought out.

I love how granular Airlock Digital Application Control is; I think the metadata rules, which allow us to create complex rule sets, are excellent compared to what I’ve seen in other products doing application control. Airlock Digital Application Control is just so far ahead of others.

I think there are features that are coming down the pipeline that we don’t have yet; one of which is the ability to have a managed installer process. There is that capability currently, but it’s reliant on WDAC or Windows Application Control , as opposed to being natively within Airlock Digital Application Control. This is something that is coming, but we haven’t actually seen it deployed yet. At the moment, we’re still having to onboard applications individually, and that would be the biggest pain point that we have right now.

I think more guides on how to onboard and bring Airlock Digital Application Control into production would be helpful; these aren’t technical needs, more around documentation and potentially some videos on how to onboard or how to bring it into your organization more efficiently.

I have been using Airlock Digital Application Control now for about nine months.

Airlock Digital Application Control has been extremely stable for me so far; I haven’t had any problems with the agents when they’re deployed and the policies are stable. It has had some problems with the on-premises deployment, in terms of stability of the server-side components, and there have been some minor problems with upgrades of agents, but nothing insurmountable.

At this stage, the only scaling issues we’ve had with Airlock Digital Application Control have been around the reporting database; everything else has been fine.

We were using AppLocker in some use cases, which was really managed by a group policy; we found that it was too coarse, and we weren’t able to get granular policy control with it. That’s why we moved towards Airlock Digital Application Control, and with Airlock Digital Application Control, we are actually installing that on the entire workstation and server estates, whereas previously it was only on very specific application servers.

At nine months in with Airlock Digital Application Control, I think we’re still not seeing a return on investment, and that’s partially because the need for application control was more important or timely than the processes were able to keep up with. At this stage, we’re still heavily invested in resources bringing it up and aligning our processes with it, so I think we will have a return on investment, but I don’t think it’s going to be in year zero. I think it’s going to be probably towards the back end of year one.

I think the user experience is quite good for a modern product; the reporting is getting better with every release, and at this stage, I don’t have any specific points on the reporting that I would want to be better. Perhaps some UI performance improvements, but generally, I think that for what Airlock Digital Application Control does, it does extremely well and fits within that scope really well.

I advise others looking into using Airlock Digital Application Control to understand what your software asset register looks like and what is allowed to run in your organization; once you understand what is allowed to run, you can then develop policies and processes to implement Airlock Digital Application Control efficiently. If you don’t have those governance structures in place, you’re really going to struggle to move Airlock Digital Application Control from audit mode into enforcement mode.

I would rate this product a 9 out of 10.

We use Airlock Digital Application Control  for endpoint management, for protection and management of shadow IT, not in a punitive sense, but if we find people trying to use unapproved software, we try and point them to approved software to minimize our risk profile while maximizing the value. We call all of our employees owners, so when I say owners, that is what I am talking about. For our owners, for example, at one point, BioCryst had 74 different zip tools in their total environment, and by getting it down to one, we reduced license costs, we reduced the risk profile from having lots of different unpatched software. We got all of them up to date, so we were no longer running out-of-date software, and the experience for our owners was better, and the protection for the enterprise was better.

With Airlock Digital Application Control , we have to make sure the versions on the endpoints are up to date, but that is managed as part of the tool. We do tracking and reporting to make sure that all of the systems are up to date, and there are occasional requirements where something broke on an endpoint, and we have to manually reinstall it. But we had 800 endpoints all told, and I think we had to reinstall it less than 20 times manually, so it was not exactly common. But because we could feed the reporting into Splunk, it was easy to catch because Airlock Digital Application Control is not stellar necessarily about giving you a good report that says this machine has not checked in in a timely manner because their window is too small, and it is not really adjustable. Some of our salespeople might not turn their laptop on but once a month. Once it had not checked in for 72 hours, it just stopped doing anything. But we could see in the Splunk instance when their version got out of date, and the reporting, even though we got the data from Airlock Digital Application Control, was easier to do in Splunk. Then we would say, this one is five versions out of current, and our current is two versions off of latest. Then we would see if Airlock Digital Application Control could update it internally, and if not, we told the help desk to go manually reinstall Airlock Digital Application Control. That got it back up to date, but since it is a SaaS product, there was not server maintenance or anything we had to do.

What I like the most about Airlock Digital Application Control is that when I first joined BioCryst, they had an existing relationship to deploy Carbon Black, and Carbon Black was such a screaming nightmare because they got sold and resold and acquired six times in 14 months. So they did not know whether to scratch their ass or wind their watch, so it was kind of crazy, and their service was abysmal. The tool was still the bleeding edge of 1997, had not been updated since; it just kept getting sold. Airlock Digital Application Control is taking that Carbon Black concept, making it cloud-based, making it much more dynamic and scalable, and more reactive in terms of the reporting. Does it still have some growing pains? It does, but even on its worst day, it was head and shoulders above Carbon Black, even though at the most granular level, they did essentially the same thing, but things that we would try to do in Carbon Black would just crash in Carbon Black, and you could do in seconds or minutes in Airlock Digital Application Control.

It handled the scale with very rare exceptions; every once in a while, you would catch them when they were doing an update or something, and it would hang, but I could count that on the fingers of one hand in two years, where I could not tell you how many times a day Carbon Black was crashing because it was well into the dozens. It actually performed better. It had better granularity in reporting because we used Splunk as our SIEM  for data aggregation, and it was able to set up direct data feeds, and as the environment changed, those data feeds updated. So it worked very well in a centralized reporting and tools environment, allowing us to better leverage that risk protection. We did not necessarily watch Airlock Digital Application Control every second, but we had a SOC that could run queries against that data and compare it to our CrowdStrike data and compare it to our Zscaler data and some of our other firewall data and see what was going on and where we may have opportunities for excellence.

What I dislike about Airlock Digital Application Control is that the whole endpoint management concept as implemented there is silly, and they need to have a better flow so you can appropriately do that type of work at the access control layer, not at the machine layer. If you simply take local admin away from everyone in the company, it is a way of taking local admin away without telling people you are doing that, and I think that is kind of silly. But the biggest challenge is the tool does not let you migrate information between groups, and its export function is not stellar, though it is markedly better than it was when we first started with it. If I built a group and we grew and we decided we need to change how that was organized, I had to take a buttload of screenshots to capture all of the information because there was not a way to migrate them into a new structure. That is one of the things they are working on, and it was due to be released soon, and I got laid off about eight weeks ago now, so maybe they have released it now. But that was a pain because there was no way to export it, even as a CSV, and that was annoying because it did not screenshot easily.

I have been a customer for about two years.

I have paid for enhanced support, so we have a weekly call with a technical success manager, and I have never had to call support; I called him.

The support from Airlock Digital Application Control was excellent. I am drawing a blank on his name because we had two of them, but they were top-notch. It took a little while to get the second guy up to speed, but that is normal. We had been working with the first guy for about 10 months at that point, and he got promoted; good for him. We got the new guy up to speed, and once he understood what was going on with our environment and everything, it was great. Having that regular cadence, when we had extra questions, he always responded within a timely manner. From my perspective, it was not the kind of tool that you regularly had to have an instant response, but it was rare not to have a response by the next business day, and typically we got something the same day unless I sent it at about 6:00 at night.

If I were to put their support on a scale from 1 to 10, I would give them an 8. It is not that there was any fault of the support person we had, our technical contact; it is just sometimes things that we wanted as baselines had to go into the development pipeline. He was a good advocate for us getting those into the development pipeline and giving us links so that we could go into the tool that development used to track it, so we could go in and all vote for it to bump it up in the priority.

The initial deployment of Airlock Digital Application Control was just an Intune  push, and it was pretty easy. We already had a centralized management tool.

I thought the pricing for Airlock Digital Application Control was good. I was the one that negotiated the contract and was actually successful in suing Carbon Black and getting all of our money back, and then working with Airlock Digital Application Control to get a multi-year contract within that budget. They are much more cost-effective than Carbon Black, both just in terms of the flat pricing and then what you get for the pricing. We did pay extra for some of the customer service support, but it was an excellent investment to get the best return out of the environment, fast.

Airlock Digital Application Control has helped me to prevent malware within our systems. The policy change history feature did not exist when I started, but they had auditing; that is part of the policy change history. We did look and see, if something happened, who did it, so we did use the auditing.

I have indeed had experience with the bidirectional REST API; that is how Airlock Digital Application Control updated itself and updated the dashboard. We played with that a lot, especially when we were first setting it up, but once we had the key set up, it worked pretty well.

The single SKU licensing model has not affected our organization's budgeting and resource allocation for the application control. What we had was not technically one SKU because we had one SKU for the service and then we had one SKU for the support. But it is not a tool that is so granular or so fractional that you need a bunch of other SKUs. It is kind of binary; you either buy it or you do not. You either buy support or you do not. It is not like Oracle or SAP where there are 12 billion subcomponents that you have to buy individually and track, so you do not need a billion SKUs or a Microsoft SKU-of-the-week model.

If I am looking for that type of tool in another environment, I am going to reach out to them. Overall, I give Airlock Digital Application Control a solid 8.

My use case for Airlock Digital Application Control  is application control.

The best features of Airlock Digital Application Control  include the ability to block using publishers, path rules, and many features that fit our purpose. The main thing would be blocking all and allowing only specific applications, which is the approach we are following.

Airlock Digital Application Control helps improve my auditability and governance over policies because it can be logged and we can see who made changes and for what purpose. We have our own internal standards defined so that whenever people make changes, they should have obtained all the approvals and the comments are updated with the request details and all those things.

I have noticed that Airlock Digital Application Control has improved the way my organization functions as it is more of a security tool. With technology transitioning so fast with artificial intelligence, we wanted to be careful about what is getting executed in each and every endpoint device. In that aspect, we were looking at a solution where only what we allowlist is getting executed.

In Airlock Digital Application Control, there are areas for improvement which, more specifically being a security tool, relate to the performance issues that end-user devices are experiencing because of the tool. It is getting improved on a version-to-version upgrade basis, but I would say that is one major area to improve. Otherwise, whatever is defined on the product works as expected.

The performance aspect of Airlock Digital Application Control could be improved.

I have been using Airlock Digital Application Control for almost a year.

So far, I have not had any issues with the stability of Airlock Digital Application Control, so I would rate it about eight or nine.

The scalability of Airlock Digital Application Control depends on the problem statement or the use case that we come up with. There were some challenges initially, but I think with the current version, it is quite scalable now.

I would rate the scalability of Airlock Digital Application Control as seven because there are still some features upcoming which will improve the scalability much more.

I would rate the technical support of Airlock Digital Application Control as nine.

I find that the deployment of Airlock Digital Application Control was very straightforward.

The deployment of Airlock Digital Application Control was staged, but otherwise, we did not have any issues during the deployment. Everything went smooth. We have devices across the regions, so we usually stage it by regions such as APAC and EMEA.

Time-wise, I would say that Airlock Digital Application Control saves a lot of time. Monitoring a fleet of devices will take a team's effort, but we three or four people are working on this, and it is quite easy. Integrating to other monitoring tools saves a lot of time.

I would say Airlock Digital Application Control saves around thirty percent of our time.

I compare Airlock Digital Application Control with other vendors such as ThreatLocker, Carbon Black, and BeyondTrust based on the proof of concept we did with other competitive tools. What made Airlock Digital Application Control different is the features and options we had to approach a single problem. We have the capability of blocking or allowing publishers or even more granularly, up to a device or a device group, which gives us that agility.

Approximately three thousand to four thousand devices use Airlock Digital Application Control.

The users of Airlock Digital Application Control are global, not just based in India.

I would recommend Airlock Digital Application Control to people who are looking to manage endpoint computers to enhance their security. I gave this review a rating of seven out of ten.