# Control every app and privilege on your endpoints

## Just-in-time access control

Grant temporary application execution and privilege elevation, then automatically revokes access based on policy.

*Available only in Endpoint Central with Application Control and Endpoint Privilege Management add-on*

### Autonomous approval for elevation requests

Automatically approve trusted elevation requests using confidence scoring and policy context.

![Autonomous approval](https://cdn.manageengine.com/sites/meweb/images/application-control/images/acp-home-jit-1.png)

### Eliminate shadow IT risk

Gain visibility into unapproved software and decide what runs in your environment.

[Video: Eliminate shadow IT risk](https://cdn.manageengine.com/sites/meweb/images/application-control/images/acp-home-jit-4.mp4)

### Just-in-time access control

Grant temporary application execution and privilege elevation, then automatically revoke access based on policy.

[Video: Just-in-time access control](https://cdn.manageengine.com/sites/meweb/images/application-control/images/acp-home-jit-5.mp4)

### Passwordless application elevation

Run approved applications with elevated privileges without exposing admin credentials.

![Passwordless Elevation](https://cdn.manageengine.com/sites/meweb/images/application-control/images/acp-home-jit-2.png)

### Identify and remove unnecessary admin rights

Detect systems with local admin accounts and remove excess privileges.

![Admin Sprawl](https://cdn.manageengine.com/sites/meweb/images/application-control/images/acp-home-jit-3.png)

## Block the unknown. Elevate only when necessary.

### Application Control

Stop unauthorized applications from running on endpoints.

- [Allowlist](https://www.manageengine.com/application-control/application-allowlisting.html?acp-new-homepage-features) and [blocklist apps](https://www.manageengine.com/application-control/application-blocklisting.html?acp-new-homepage-features)
  - Create rules to allow trusted applications and block risky or unapproved software.
- [Audit unauthorized applications and block events](https://www.manageengine.com/application-control/unmanaged-applications.html?acp-new-homepage-features)
  - See what would be blocked before enforcement. Track unmanaged executions and block attempts.
- [Just-in-time application access](https://www.manageengine.com/application-control/just-in-time-access.html)
  - Temporarily allow specific apps when needed and revoke access automatically.

### Endpoint Privilege Management

Grant temporary admin access when users need it.

- [Eliminate excessive admin privileges](https://www.manageengine.com/application-control/remove-admin-rights.html?acp-new-homepage-features)
  - Eliminate standing local admin access to reduce attack surface.
- [Passwordless, app-specific elevation](https://www.manageengine.com/application-control/request-access.html?acp-new-homepage-features)
  - Elevate only the app or task without sharing admin passwords.
- [Just-in-time elevation access](https://www.manageengine.com/application-control/just-in-time-access.html?acp-new-homepage-features)
  - Grant time-bound elevation and auto-revoke based on policy.
- [Elevate control panel and administrative tools](https://www.manageengine.com/application-control/how-to/epm-elevate-com-objects.html?acp-new-homepage-features)
  - Allow standard users to securely access Control Panel applets and built-in administrative tools without full admin rights.

## Know what runs. Control what matters.

Discover what runs, validate in audit mode, then apply policy-based control.

### Discover

Identify applications running across endpoints.

### Audit

Monitor execution and policy impact without disrupting users.

### Enforce

Allow only approved applications and blocks everything else by policy.

## Pick the Right Path to Control

Start free to validate policies. Upgrade when you are ready to roll out controls at scale.

### Free Edition

**$0** — up to 25 endpoints

### Professional Edition

**$6** — / endpoint per year*

- Application allowlisting and blocklisting
- Audit mode visibility for apps and elevation
- Policy-based control for execution and privilege
- Elevation workflows without sharing admin credentials
- Reporting and activity trail for governance

The more you scale, the lesser you pay per endpoint.

*for 1000 endpoints*

### Explore Endpoint Central

Want complete endpoint protection?

+ Everything in Application Control Plus

- Vulnerability management
- Patch Management
- Enterprise data security
- Data loss prevention
- Endpoint detection and response
- Enterprise browser security
- Peripheral device control