Allowlisting

Stop malware before it runs

Only approved applications run on your endpoints. Everything else is blocked by default.

Why allowlisting?

Take control of what runs in your environment

Allowlisting demo

Deploy in hours to days, not months to years. No unknown software slipping in, no silent installs happening in the background, and no ransomware quietly starting to encrypt. Take control of your environment with clear, enforceable allowlisting application control.

• Works on macOS and Windows
• Request-approval flows
• Application fencing and granular control

Block ransomware

If it’s not approved, it doesn’t execute. And no execution means no encryption.

Stop shadow IT

Unauthorized tools can’t run. Simple as that.

Meet compliance

Deny-by-default execution satisfies NIST, CMMC, CIS requirements, Essential 8 guidelines, and more.

Major features

What allowlisting offers

Application discovery

Deploy Idemeum agent and quickly discover all applications and publishers in your environment. No more manual list building or creating policies from scratch, a significant reduction in your operational burden.

• Discover applications and publishers in audit mode
• Pre-configured catalog of most common applications

Application fencing

Decide exactly what every application is allowed to do. Enforce trusted boundaries around certain applications. Or allow your key applications to invoke additional processes with a single click.

• Child process control
• Automatic process map reconstruction

Request approval flows

Idemeum offers the option for users to request applications. Once the request is submitted, IT team will receive a notification / ticket will be created in the ticketing system.

• PSA integrations
• Mobile approvals

Security and AI context

Every application request is enriched with malware intelligence, our proprietary behavioral risk score, as well as LLM generated summary of what application does.

• Malware reputation checks
• LLM generated summary of the event
• Confidence score that looks at 20+ behavioral attributes

Features

Allowlisting packed with features

• Application catalog: A catalog of most common Windows and macOS applications that can be allowlisted with a single click.
• Elevation integration: Seamless allowlisting and Endpoint Privilege Management integration - control executions and elevations with a single rule.
• AI agents: Leverage LLM to explain how safe each application request is. Use your own API key to connect to Anthropic, OpenAI, or Gemini.
• Malware reputation: Every application event is checked for malware reputation as well as assigned a behavioral confidence score.
• App store control: Control what applications can be delivered from Windows and Apple stores as well as directly installed executables on workstations.
• Mobile app: Respond to application requests via the Idemeum mobile app.

Simple integrations

Deployment tools, ticketing systems, and more.

Connect your tools

Works with the tools your team already uses.

Block everything. Approve what matters.

Application allowlisting for Windows and macOS.