A Fortify 24x7 brand, minding the tills, counters, and back offices that keep trade moving.Trader sign inSpeak to an engineer
CommerceGuard Tech
Stall 02 / Software gate

The till should run four programs. It currently runs whatever anyone installed.

Recognising bad software is a race you have to keep winning. Deciding in advance what is allowed to run is a race you win once and then maintain. On the machines that take money, the second approach is worth the small amount of friction it costs.

ThreatLockerManaged allowlistApprovals worked for you
1 line / default deny / approvals staffed
Cards on this board1
Stocked byThreatLocker
Weighed byEndpoint
ApprovalsHandled on your behalf

Default deny, without the shop grinding to a halt

The same objection to allowlisting arrives every time, and it is a fair one: somebody has to say yes, and where nobody is around to say it, work halts. That is precisely why this sells as a managed card and not as a licence. A watching period observes what your business genuinely opens and assembles the list from that. Once it shuts, anything new wants approving, and the approving is our job at any hour rather than yours during office hours.

Updates are the other objection, and they are handled. ThreatLocker tracks vendor releases so a routine update to your accounts package does not lock a manager out on a Tuesday morning.

Deciding in advance what may run is a race you win once, and then maintain.

Ringfencing, which is the part people underrate

Letting a program run is a long way from trusting it with the run of the place. Ringfencing names the files an approved application may open, the programs it may set running, and how far across the network it may reach. That is what keeps the abuse of a legitimate tool to a short story instead of a long one.

Start with the machines that carry the most risk: the till, the back office PC, the laptop your bookkeeper works from. Extending it later is easy, and most businesses get round to it.

On this board

Cards and rates

Rates below are weighed straight off the billing scales the moment this page opens. Lift anything down and it waits in the basket until you are ready.

Fortify-ZeroTrustWeighed and priced

Execution Control

Approval first, execution second, on the money machines

Refusal by default wherever money changes hands. Software nobody approved never gets asked for its opinion on the matter, which is a cruder answer than recognising it afterwards and a far steadier one.

  • A watching period draws the list up out of what your shop opens daily.
  • Supplier releases are followed, so no update strands a manager at the till.
  • Ringfencing pins down which files, programs, and destinations an approval covers.
Trades onThreatLocker
GuardsTills, back office kit, and anything that reaches your banking
Banked forApprovals and elevation requests, kept where they can be reviewed
Settled byThe Fortify 24x7 desk, taking approvals and escalations
Weighed byEndpoint, charged monthly
Weighing per endpoint
weighed monthly, paid ahead QTY
Honest scope

Where this board stops

A single card doing a single job, plus a short list of the things it is not.

  • Allowlisting is not detection. It stops software from running. It does not investigate an account being misused by a person who is already inside and working with approved tools.
  • It needs somebody who can decide. Once in a while a program turns up that nobody recognises, and somebody of yours has to be contactable. Routine calls are ours. Guessing at the rest is not.
  • The learning spell is not instant. Expect a couple of weeks of watching before the gate closes, and a handful of exceptions in the fortnight after that.
  • PCI DSS obligations stay with you and your acquirer. This line supports technical controls you may be asked about. It does not deliver PCI compliance or certification, and we are not a Qualified Security Assessor.
  • Hardware you do not own is out. Machines that are not yours do not get locked down by us. A bookkeeper working from a personal laptop is a scoping question first and a technical one second.
ON THE SPIKE

Heads up: card statements show FORTIFY 24X7 - CommerceGuard Tech is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.

Stall 01Floor watchStall 02Software gateStall 03Mail counterStall 04Shop floor kitStall 05Customer ledgerStall 06Spare copies
The whole railSix stallsTrader account Open the price rail