Airlock Digital Application Control Reviews

Application whitelisting has become increasingly important, and ensuring that we’re not running code unknown to our organization is crucial. The organizations I work for have been using it to effectively whitelist applications known to be in use, and then highlight any applications that aren’t within the remit of the service delivery organizations or the infrastructure organizations, ensuring that we’re only executing known code.

One of the use cases for Airlock Digital Application Control that we identified were timer applications; we found applications being used potentially to exfiltrate information. We found people using WhatsApp as well as Signal, which weren’t under the control of the data loss prevention capability within the organization I was working with, so we were able to identify applications that might be missed by DLP.

We have certain use cases where users require using scripting languages and programming languages such as Python to run simulations and modeling; this is not something we want every user to be able to do, but it’s allowed us to select which users are allowed to run certain applications and under what scripting languages and programming languages and under what circumstances they’re allowed to run them. This means that it’s not a blanket on or off; it’s about under what context the application can actually run, allowing users to use Python or PowerShell under constrained use cases as opposed to unrestricted access.

One of the other capabilities I haven’t mentioned is the ability to have an on-premises as well as a cloud instance; in the industries I work in, having the ability to run disconnected from the internet or running everything on-premises for data sovereignty purposes is really important. Airlock Digital Application Control has given us that flexibility to have both deployments depending on the context in which we’re running the application or needing this capability.

Anybody going on an application control journey is going to realize that they need a maturity uplift; this has allowed us to present information back to the service delivery organizations and the infrastructure organizations, and the application organizations within the companies I’m working with, and help them develop a maturity plan around uplifting their processes and their policies and their workflows. It’s also helping them have justification around limiting Shadow IT, and being able to say no—this application is not appropriate or this application is appropriate. It helps them on that maturity journey.

Airlock Digital Application Control is probably the easiest application control that I’ve come across; the product has a GUI-first, web interface-first approach to application control, and the way that it’s able to present exceptions or identify what those untrusted executions are is the best that I’ve seen in the field. It’s easy, it’s very quick, and I think that it reduces that barrier to entry for application control.

One of the best features that Airlock Digital Application Control offers is the ability to create complex rules around what applications are allowed to execute under what circumstances and where. It helps us answer the who, what, where, when, and why, to a lesser extent, applications are being used; it’s absolutely the ability to define complex rule sets.

I appreciate the automated baselines that are in Airlock Digital Application Control; being able to start off with a starting point of what, for example, Windows 10 or Windows 11 or one of the server platforms would normally run means we’re not developing our policies from scratch. I also appreciate the ability for bulk adding and identifying publishers of applications and being able to blanket approve publishers, for example, or I can put complex rules around publishers so that the publisher can only execute under certain circumstances. The flexibility and the way that the product has been designed has been really well thought out.

I love how granular Airlock Digital Application Control is; I think the metadata rules, which allow us to create complex rule sets, are excellent compared to what I’ve seen in other products doing application control. Airlock Digital Application Control is just so far ahead of others.

I think there are features that are coming down the pipeline that we don’t have yet; one of which is the ability to have a managed installer process. There is that capability currently, but it’s reliant on WDAC or Windows Application Control, as opposed to being natively within Airlock Digital Application Control. This is something that is coming, but we haven’t actually seen it deployed yet. At the moment, we’re still having to onboard applications individually, and that would be the biggest pain point that we have right now.

I think more guides on how to onboard and bring Airlock Digital Application Control into production would be helpful; these aren’t technical needs, more around documentation and potentially some videos on how to onboard or how to bring it into your organization more efficiently.

I have been using Airlock Digital Application Control now for about nine months.

Airlock Digital Application Control has been extremely stable for me so far; I haven’t had any problems with the agents when they’re deployed and the policies are stable. It has had some problems with the on-premises deployment, in terms of stability of the server-side components, and there have been some minor problems with upgrades of agents, but nothing insurmountable.

At this stage, the only scaling issues we’ve had with Airlock Digital Application Control have been around the reporting database; everything else has been fine.

We were using AppLocker in some use cases, which was really managed by a group policy; we found that it was too coarse, and we weren’t able to get granular policy control with it. That’s why we moved towards Airlock Digital Application Control, and with Airlock Digital Application Control, we are actually installing that on the entire workstation and server estates, whereas previously it was only on very specific application servers.

At nine months in with Airlock Digital Application Control, I think we’re still not seeing a return on investment, and that’s partially because the need for application control was more important or timely than the processes were able to keep up with. At this stage, we’re still heavily invested in resources bringing it up and aligning our processes with it, so I think we will have a return on investment, but I don’t think it’s going to be in year zero. I think it’s going to be probably towards the back end of year one.

I think the user experience is quite good for a modern product; the reporting is getting better with every release, and at this stage, I don’t have any specific points on the reporting that I would want to be better. Perhaps some UI performance improvements, but generally, I think that for what Airlock Digital Application Control does, it does extremely well and fits within that scope really well.

I advise others looking into using Airlock Digital Application Control to understand what your software asset register looks like and what is allowed to run in your organization; once you understand what is allowed to run, you can then develop policies and processes to implement Airlock Digital Application Control efficiently. If you don’t have those governance structures in place, you’re really going to struggle to move Airlock Digital Application Control from audit mode into enforcement mode.

I would rate this product a 9 out of 10.

My main use case for Airlock Digital Application Control is to provide protection to the application, and I am using it for in-house hosted applications.

I have internal software that is being used for filling up client data, and it was internally developed. Since my users are working from home or over the internet from remote locations, there are chances to be attacked by hackers over the internet. I am using this solution to identify the attack surface and to protect it from being attacked.

The best feature that Airlock Digital Application Control offers is the protection against DDoS attacks, which I appreciate most.

What stands out to me about the DDoS protection is that it addresses distributed denial-of-service attacks, so my legitimate application can be unavailable for actual users if a DDoS attack is happening on the application.

Airlock Digital Application Control has positively impacted my organization because I now have more visibility on my application security areas, which is giving my business confidence about the security and confidentiality. Based on this, my customers are able to easily use it, along with employees.

This increased visibility has helped my team and business by helping me understand the current gaps I have to work on to make my application more secure based on the reports and insights I am getting from the tool itself.

I think the team is doing well, and if the PS team or another team can help me with more granular technical training, that will be helpful for my team to learn the product and support the product without submitting a ticket with the tech team.

I have been using Airlock Digital Application Control for the last one year.

I did not previously use a different solution; this one is the first solution that I have implemented in my organization.

I have seen a return on investment because I am saving in terms of resources and fewer employees are needed. Earlier, manual tasks were more prevalent, and now because of AI and automation, things are quite easier for my organization.

My experience with pricing, setup cost, and licensing is definitely good. Although it is a bit on the higher side for a small organization, for a medium or enterprise organization, it is a good choice, and the pricing is very effective.

Regarding Airlock Digital Application Control's AI capabilities, it is maintaining all kinds of logs of the traffic as well as the audit logs, which is helpful for maintaining governance.

For accuracy, I feel Airlock Digital Application Control is providing almost eighty-five percent accuracy, and the results are reliable. I am utilizing it for my daily routine work.

Airlock Digital Application Control is deployed in my organization on the public cloud.

I use AWS as the cloud provider.

I purchased Airlock Digital Application Control through the AWS Marketplace.

My impression of the granular policy control offered by Airlock Digital is that it is impressive, and there are many policies with granular control, giving me a more flexible environment for controlling traffic.

The use of Airlock Digital's policy creation wizard impacts my daily management tasks because it is helping in designing the policies and also giving me suggestions. Even an L1 person can easily configure it because the wizards are very useful and easy to configure.

I am using the policy change history feature in Airlock, and it is helping me because if a policy was created in the past and was working well, and somebody changed it for some reason, I can easily track it to understand if the new changes have created any kind of issues for the environment.

I assess the clarity and speed of the new user interface compared to the previous version as very good. It is very user-friendly, and I am very satisfied with the new user interface.

I am using Airlock Digital's bidirectional REST API, and it definitely helps with integration and automation in my IT processes because Airlock logs can be utilized with the SIEM tool. In a similar fashion, logs collected by other endpoint security technologies can be integrated with Airlock, so both tools can simultaneously synchronize and help me make the environment better.

In my experience, the single SKU licensing model is definitely good for my organization's budgeting and resource allocation for application control because if organizations are small or they want to start with Airlock, it is a great choice in that case.

Utilizing Airlock has helped prevent malware within my systems, and it definitely helps to prevent malware because it easily understands and detects traffic related to the applications. It helps me see if any kind of unintended traffic is there.

I would rate this product a ten out of ten.

My use case for Airlock Digital Application Control is application control.

The best features of Airlock Digital Application Control include the ability to block using publishers, path rules, and many features that fit our purpose. The main thing would be blocking all and allowing only specific applications, which is the approach we are following.

Airlock Digital Application Control helps improve my auditability and governance over policies because it can be logged and we can see who made changes and for what purpose. We have our own internal standards defined so that whenever people make changes, they should have obtained all the approvals and the comments are updated with the request details and all those things.

I have noticed that Airlock Digital Application Control has improved the way my organization functions as it is more of a security tool. With technology transitioning so fast with artificial intelligence, we wanted to be careful about what is getting executed in each and every endpoint device. In that aspect, we were looking at a solution where only what we allowlist is getting executed.

In Airlock Digital Application Control, there are areas for improvement which, more specifically being a security tool, relate to the performance issues that end-user devices are experiencing because of the tool. It is getting improved on a version-to-version upgrade basis, but I would say that is one major area to improve. Otherwise, whatever is defined on the product works as expected.

The performance aspect of Airlock Digital Application Control could be improved.

I have been using Airlock Digital Application Control for almost a year.

So far, I have not had any issues with the stability of Airlock Digital Application Control, so I would rate it about eight or nine.

The scalability of Airlock Digital Application Control depends on the problem statement or the use case that we come up with. There were some challenges initially, but I think with the current version, it is quite scalable now.

I would rate the scalability of Airlock Digital Application Control as seven because there are still some features upcoming which will improve the scalability much more.

I would rate the technical support of Airlock Digital Application Control as nine.

I find that the deployment of Airlock Digital Application Control was very straightforward.

The deployment of Airlock Digital Application Control was staged, but otherwise, we did not have any issues during the deployment. Everything went smooth. We have devices across the regions, so we usually stage it by regions such as APAC and EMEA.

Time-wise, I would say that Airlock Digital Application Control saves a lot of time. Monitoring a fleet of devices will take a team's effort, but we three or four people are working on this, and it is quite easy. Integrating to other monitoring tools saves a lot of time.

I would say Airlock Digital Application Control saves around thirty percent of our time.

I compare Airlock Digital Application Control with other vendors such as ThreatLocker, Carbon Black, and BeyondTrust based on the proof of concept we did with other competitive tools. What made Airlock Digital Application Control different is the features and options we had to approach a single problem. We have the capability of blocking or allowing publishers or even more granularly, up to a device or a device group, which gives us that agility.

Approximately three thousand to four thousand devices use Airlock Digital Application Control.

The users of Airlock Digital Application Control are global, not just based in India.

I would recommend Airlock Digital Application Control to people who are looking to manage endpoint computers to enhance their security. I gave this review a rating of seven out of ten.

Airlock Digital Application Control is used primarily for whitelisting and endpoint security, controlling which applications are allowed to execute on endpoints, preventing unauthorized and potential malicious software from running and reducing overall attack surface.

A specific example of whitelisting and endpoint security involves an unauthorized executable being introduced onto an endpoint and attempting to run. Because the application was not on the approval whitelist, Airlock blocked its execution before it could run.

Utilizing Airlock has helped prevent malware within our systems, particularly when an unknown executable or application is introduced at an endpoint. Because it is not approved by the application control policy, Airlock blocks it from executing, allowing the security team to investigate it before it can cause an impact.

The best features Airlock Digital Application Control offers include policy management, which allows us to define and maintain application control rules based on our environment.

The policy management feature has made things easier for the team because it provides understanding of what was blocked and allowed, giving the security team useful information for investigation.

Airlock Digital Application Control has positively impacted the organization by increasing productivity and reducing the time consumed to validate alerts and issues, making it an overall good process.

Airlock improved productivity and reduced the time to validate alerts, particularly because for legitimate applications that are blocked, the audit information helps identify the reason for the block and resolve the issue faster, thus reducing the investigation and validation efforts overall.

Airlock Digital Application Control can be improved, as its main use case is the ease of management and automation, yet managing policies, exceptions, and application changes can become more time consuming as the environment grows. More automation for policy recommendations, stronger integrations with SIEM tools, and other security tools would be helpful.

I wish Airlock Digital Application Control would add more integrations, and automation could be improved further, particularly around identifying trusted applications and recommending policy changes, which would reduce the amount of manual efforts given to this application.

Airlock Digital Application Control has been used for two years, and it has been deployed in an enterprise environment.

Airlock Digital Application Control is stable.

Airlock Digital Application Control's scalability is very good, as it increases the ability to scale whenever the organization grows.

The customer support for Airlock Digital Application Control is good.

I would rate the customer support a 10 on a scale of one to ten.

Previously, local endpoints were used, but now Airlock Digital Application Control is used because it created an additional layer of security.

The experience with pricing, setup cost, and licensing for Airlock Digital Application Control is good.

The pricing, setup cost, and licensing have been good, as they are transparent and straightforward, and the initial setup cost was reasonable considering the security value and functionality provided by the platform.

There has been a very good return on investment, which can be measured in terms of operational efficiency and reduced security risk. Airlock has helped prevent unauthorized applications from executing, leading to reduced manual efforts, faster investigations, and better endpoint protection.

The single SKU licensing model of Airlock Digital Application Control positively affects the organization's budgeting and resource allocation for application control by combining all expenses in one place, simplifying procurement, and making it easier to understand overall costs while planning for the number of endpoints that need to be covered.

Before choosing Airlock Digital Application Control, other options were evaluated primarily based on application control capabilities and policy granularities. Airlock stood out with a good balance of strong application control, centralized management, and straightforward licensing.

Airlock Digital Application Control is highly recommended to others looking into using it. Airlock Digital Application Control is a very good application and it is performing great. I would rate this review a 10 on a scale of one to ten.

The DevOps team uses the REST API for Airlock Digital Application Control, but I am not part of that team, so I am not directly administering or controlling or using the REST APIs tool.

The pre-sales team handles the pricing for Airlock Digital Application Control; I am the technical person who looks after the configuration and administration according to the requirements of the client.

We are using the policy change history in Airlock Digital Application Control.

According to the governance, procedures, policies, and SOPs defined within the client environment, which are quite strict, Airlock Digital Application Control provides user-level privileges. Using the policy management tool provided by Airlock Digital Application Control is very beneficial and completely aligns with the compliance and governance expectations of the client.

The endpoint security feature of Airlock Digital Application Control is very beneficial, as are some of the products that have been integrated with Airlock Digital Application Control, making it a very supportive feature.

Some of the vulnerabilities that are meant for CVEs specific to Airlock Digital Application Control need to be addressed in newer versions. This is the improvement that I would suggest, because zero-day exploits are being administered by threat actors on a daily basis, and from a cybersecurity point of view, I need it to be more resilient to vulnerabilities.

During my total career of 13 years, I have used Airlock Digital Application Control with one of my clients who had deployed this solution, and I had been working on that product for more than a year.

I have not faced any lagging, crashing, or downtime with Airlock Digital Application Control for a while, so we are satisfied with it, and every user management is satisfactory.

We have not performed any scalability adjustments for Airlock Digital Application Control because the initial product that we deployed is serving the number of users well. I think there is a license available so we can purchase it and upgrade to the amount of users that is needed, though for now we do not need to upgrade and have not felt the need to do that.

We engage with the customer support portal for Airlock Digital Application Control on and off to get troubleshooting guides or to have issues resolved where we are stuck, and they are very helpful.

Technically, a device always has some operational issues, and this is not specific to Airlock Digital Application Control but applies to any device, such as Cisco, Huawei, Juniper, or any big names in the market, as they always have issues or require troubleshooting. What I found is that their support team is quite technical, and their approach in understanding and resolving the issue is very direct and robust.

Positive

Initial deployment of Airlock Digital Application Control is very user-friendly.

The deployment of Airlock Digital Application Control took about a week because I had to configure each policy and each connectivity to our network step-wise. The integration was easy, but the assignment of the policies due to the load of the users was a cumbersome task. Once the users were added, then it was good to go.

I had support from my senior staff for the deployment of Airlock Digital Application Control. As the L2 person, I had to get help from the L3 for some configurations, and meanwhile, the L1 staff also assisted me during the integration and the issues that were faced, and we troubleshot until it was resolved.

The graphical user interface provided by Airlock Digital Application Control is very user-friendly, and configuration management is easy, so this is what I like about it the most.

Some of our clients are using the Cisco ISE product and some of them are using the PAM solution, so there are different options they are using according to their own choice, but I would prefer Airlock Digital Application Control to be a good product and a useful one.

I would rate this review a 9 out of 10.

In our organization, we use Airlock Digital Application Control for granular application control and to prevent unauthorized applications, DLLs, and browser extensions which can be vulnerable to our organization's internal computers and databases.

We use Airlock Digital Application Control to prevent vulnerable applications and end-of-life applications which can be vulnerable for execution in the organization.

Application controls provide broad execution coverage across application libraries and DLLs with contextual restrictions. We can check for files which are uploaded in the application or in browser extensions.

Since implementing Airlock Digital Application Control, we have gained visibility into application usage and how users are utilizing it.

We are receiving notifications of vulnerabilities if vulnerabilities exist. The compliance aspect has improved significantly because the control includes granular control methods and compliance features.

The VirusTotal overlay is a standout feature for me. Airlock Digital Application Control integrates natively with Google's VirusTotal so that global intelligence is directly available to end security teams, allowing them to instantly spot non-malicious or suspicious files. The intelligence and visibility that Airlock Digital Application Control provides is excellent.

The VirusTotal overlay shows any vulnerabilities if an application has vulnerabilities, any CVEs present, or any active CVEs. This allows us to easily patch applications accordingly based on the criticality of the vulnerability. The audit mode or monitoring mode visibility is also very helpful for us, as we can have visibility into application usage and how employees and users are utilizing it.

The direct blocklisting is another feature I can specify. Alongside its core allowlist features, pre-configured blocklists map to the MITRE ATT&CK databases and Microsoft recommended block rules. This proactively neutralizes living-off-the-land attacks where bad actors try to hijack legitimate native system utilities.

For improvements, Airlock Digital Application Control could add patching advice or recommendations to improve the usage of their application. They could specify critical security vulnerabilities they are finding in applications or end-of-life applications. For example, if an application is end of life, that should be identified. Although the VirusTotal overlay exists and VirusTotal provides their own database and repository information, Airlock Digital Application Control could add additional information related to the security aspects of the applications or browser extensions we are using.

I have been using Airlock Digital Application Control for the last year in my organization.

On a scale of one to ten, I would give eight out of ten. I will not give any application a ten out of ten because no application is perfect in nature.

Regarding governance, I can say that we have audit mode and enforcement mode, and governance is completely in compliance. Regarding the security aspect of the application, that is excellent, which includes OTP and for administrators, multi-factor authentication and one-time passwords. The security advice is an area for improvement that I mentioned earlier.

It has been consistent because of the multiple policies that we can add as multi-attribute trust policies. These can be configured based on file hashes, digital publishers, specific file paths, or parent processes, which has been very useful for me. The broad execution coverage is one of the beneficial aspects, covering EXE, MSI, or DLL files, as well as scripts such as PowerShell scripts.

I would recommend trying the free trial which is offered. I experienced Airlock Digital Application Control in the trial, and the satisfaction I received led me to purchase Airlock Digital Application Control from AWS.