Grant temporary application execution and privilege elevation, then automatically revokes access based on policy.
Available only in Endpoint Central with Application Control and Endpoint Privilege Management add-on
Block the unknown. Elevate only when necessary.
Application Control
Create rules to allow trusted applications and block risky or unapproved software.
Audit unauthorized applications and block events
See what would be blocked before enforcement. Track unmanaged executions and block attempts.
Just-in-time application access
Temporarily allow specific apps when needed and revoke access automatically.
Endpoint Privilege ManagementEliminate excessive admin privileges
Eliminate standing local admin access to reduce attack surface.
Passwordless, app-specific elevation
Elevate only the app or task without sharing admin passwords.
Grant time-bound elevation and auto-revoke based on policy.
Elevate control panel and administrative tools
Allow standard users to securely access Control Panel applets and built-in administrative tools without full admin rights.
Discover what runs, validate in audit mode, then apply policy-based control.
5M+
Endpoints secured
100+
countries served
5000+
organizations worldwide
Start free to validate policies. Upgrade when you are ready to roll out controls at scale.
Application allowlisting and blocklistingAudit mode visibility for apps and elevationPolicy-based control for execution and privilegeElevation workflows without sharing admin credentialsReporting and activity trail for governanceWant complete endpoint protection?
+ Everything in Application Control Plus
Vulnerability managementPatch ManagementEnterprise data securityData loss preventionEndpoint detection and responseEnterprise browser securityPeripheral device control
Download 
Sign up 
