A Fortify 24x7 brand. Bench work on whichever mechanism a small or medium business trades through.Bench book sign inWrite to the bench
ServiceTrust Cyber
Movement 02 / Fitted parts only

A bench fits the component the calibre was drawn for. Nothing else goes in.

Here is the trade oldest habit, carried onto computers. Settle beforehand what belongs on a machine, let that run, refuse the rest by default. It wins no fashion prizes, and an entire class of trouble vanishes before cleverness is needed.

ThreatLockerSigned off software onlyRingfences and elevation
One line, reckoned per endpoint, refusing by default once settled in
Lines hereOne
Parts fittedThreatLocker
Reckoned inEndpoint
BenchThe Fortify 24x7 bench

Why refusing by default still wins

Almost everything sold in this trade works by recognising bad things. That is a footrace, and the people at the other end have a say in the pace. Refusing by default turns the problem inside out. Instead of knowing every bad thing, you settle what your shop genuinely needs, and anything outside that never gets as far as starting.

The objection is always the same one, and it deserves a straight answer: could this stop my people working. It could, if it were fitted carelessly. That is precisely why there is a settling in stretch, why maker updates are followed, and why sign off requests reach a bench with somebody at it rather than a queue somebody skims on Thursdays.

Settling what belongs costs you an afternoon once and buys quiet for every day after.

The ringfence, which is the half people forget

Allowing something to run falls well short of trusting it with the keys. A ringfence settles what a permitted program may do once up: what else it launches, what it opens, where it dials.

That matters because a great deal of trouble arrives inside software you approved on purpose. A document starts a script, the script dials out, and every link in that chain was on the list. Breaking the chain is what a ringfence is for.

Lines on this movement

The lines in full, with what each one costs

Every figure below leaves billing at the moment this page opens. Anything laid on the service card sits waiting there while you carry on reading.

One word in the tables below needs pinning down. Certified by names the person who did the work and put their name beside it, which is how a watchmaker certifies a service. It carries no claim that Fortify 24x7 holds a security certification, and buying a line confers none on your business either.

Fortify-ZeroTrustCalibre

Execution Control

ThreatLocker, allowlisting with ringfences around it

At a bench you fit the component the calibre was drawn for, and you fit nothing else. This line moves that habit onto your computers. What you signed off starts. What nobody signed off is never asked for its opinion.

  • A settling in stretch reads what your staff really open and builds the list from it.
  • Maker updates are followed, so a Tuesday release never strands the front counter.
  • A ringfence fixes what a permitted program can open, spawn and dial while up.
Serviced onWindows and macOS hardware you have brought onto the bench
RegulatesWhat is permitted to start, and what it may lay hands on afterwards
IntervalSettling in first, then held tight, with sign offs worked as they arrive
Adjusted byOur engineers take the sign off requests and the elevation asks off your staff
Certified byThe sign off trail is kept per machine and produced whenever you ask for it
Readingper endpoint
taken a month aheadQTY
Tolerances

Where this movement stops

Each of the six sheets carries a block like this one. It is the section most suppliers quietly omit, and it is the section that settles whether you feel let down in a year.

  • This is not friction free. Occasionally something new gets stopped. Read that as the control working rather than failing. Sign offs land at a staffed bench and are usually cleared within minutes, though somebody does have to ask.
  • It governs starting, not signing in. Somebody using a genuine login and nothing but approved software is another problem altogether. It belongs to the watching sheet and to the post sheet, not here.
  • It reaches only what came onto the bench. Personal hardware, an unmanaged contractor laptop, and anything that never took the agent sit wholly outside this line.
  • Windows and macOS, and no further. This line is fitted to Windows and macOS. Handsets, tablets and network gear answer to other lines on this card, or to nothing at all.
  • Permission to run is not a licence. Letting a program start says nothing whatever about your right to use it. Licensing stays your business, and your auditor question.
BENCH NOTE

Heads up: card statements show FORTIFY 24X7 - ServiceTrust Cyber is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.

Movement 01Watch and respondMovement 02Fitted parts onlyMovement 03Screening the postMovement 04Devices kept woundMovement 05Sealing the dataMovement 06The second movement
Every rate on one pageThe six movementsBench bookOpen the rate book
\n