Application Control.
Whitelisted. Enforced.

Control which applications can run on your endpoints. Block unauthorized software, prevent ransomware, enforce compliance — with zero user friction.

Start Free Trial See How It Works

How It Works

1

Install the Agent

Deploy the lightweight AppGuard agent to your endpoints. Windows and macOS. Takes 30 seconds.

2

Learning Mode

The agent observes which applications are running and builds a baseline. No blocking during learning — just discovery.

3

Create Rules

Review discovered applications and create whitelist rules by hash, publisher, or path. Approve what's trusted, block the rest.

4

Enforce

Switch to enforcement mode. Unauthorized applications are blocked in real time. Full audit trail of every blocked attempt.

Everything You Need

Application Whitelisting

Only approved applications can run. Everything else is blocked automatically. The simplest way to stop unauthorized software.

Hash-Based Blocking

Block or allow applications by their exact file hash. Even renamed executables can't bypass your policies.

Learning Mode

Discover what's running before enforcing. Learning mode builds your whitelist from real usage — no guesswork.

Publisher Verification

Whitelist by code-signing publisher. Trust all apps from Microsoft, Adobe, or any verified publisher with one rule.

Multi-Tenant / MSP Ready

Manage multiple companies from one console. Per-company policies, rules, and audit logs.

Real-Time Enforcement

Applications are checked and blocked instantly at launch. No delays, no workarounds, no user friction for approved apps.

Simple, Transparent Pricing

Starter

$5/endpoint/mo
Up to 100 endpoints
  • Application whitelisting
  • Learning mode
  • 30-day audit logs

Enterprise

$2/endpoint/mo
Unlimited endpoints
  • Everything in Pro
  • Custom policies
  • API access
  • Dedicated support

All plans include a 7-day free trial. No credit card required.

Frequently Asked Questions

How does blocking work?

AppGuard intercepts application launches in real time. When an application isn't on your whitelist, it's blocked before it can execute. Users see a clear notification explaining why the app was blocked.

What is learning mode?

Learning mode monitors which applications are running on your endpoints without blocking anything. It builds a baseline of trusted applications so you can create whitelist rules based on real usage rather than guesswork.

Can I whitelist by publisher?

Yes. You can create rules that trust all applications signed by a specific publisher — for example, allow everything signed by Microsoft or Adobe. This reduces rule management significantly.

Does it affect performance?

No. The agent is lightweight and checks are performed instantly at application launch. There's no noticeable impact on system performance or application startup times.

Can I use this as an MSP?

Absolutely. AppGuard supports multi-company management from a single tenant. Each company gets its own endpoints, policies, rules, and audit logs.

Is there a free tier?

Yes, up to 5 endpoints are free forever. No credit card required.