Detection is never enough as Plan A, says ThreatLocker CEO

TLDR:

• ThreatLocker CEO emphasizes blocking malware automatically over relying on detection as plan A
• Zero trust security controls provide time to react, with detection as a backup

ThreatLocker co-founder and CEO Danny Jenkins stresses the importance of using a deny-by-default approach to security. He argues that relying solely on detection tools can result in damage being done by the time an issue is detected. By automatically blocking malware and using detection as a secondary measure, organizations can gain valuable time to respond to threats.

Article:

Zero trust security controls ‘give you time’ to react, with detection merely serving as a backup, according to ThreatLocker co-founder and CEO Danny Jenkins. If a detection tool spots malicious activity on an endpoint that does not block malware by default, the damage may have already been done by the time you’re alerted that there’s an issue, according to Jenkins.

By taking a deny-by-default approach, ThreatLocker’s managed detection and response (MDR) offering stands out in the market, according to partners like Mike Shook, CEO of 5S Technologies. Partners have noted the benefits of using ThreatLocker’s tools in protecting customers, such as blocking attackers from executing malware even after gaining initial access due to vulnerabilities.

Jenkins reiterated the importance of blocking malware deployment by default, putting attackers at a disadvantage. This approach, combined with zero trust principles, not only provides time to respond to threats but also alerts users to malicious activity happening on their machines.