
A repository containing scripts and configuration files to help administrators implement Microsoft AppLocker for application whitelisting based on NSA security guidelines.
Checked October 2026.
AppLocker Guidance is a collection of scripts and configuration files designed to help administrators implement Microsoft AppLocker for application whitelisting on Windows systems.
The repository provides starter policies for Windows 7 and Windows 10 environments, along with Group Policy Object (GPO) templates specifically for Windows 10 deployments. These resources are based on NSA Information Assurance guidelines and follow the recommendations outlined in the "Application Whitelisting Using Microsoft AppLocker" security guide.
The project includes configuration templates and implementation scripts that administrators can use to establish application control policies. The guidance follows NSA's top 10 mitigation strategies, specifically focusing on application whitelisting as a security control mechanism.
The repository also references the Windows Secure Host Baseline repository, which contains additional AppLocker-related Group Policy Objects for enterprise deployments.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about AppLocker Guidance: features, pricing and alternatives.
AppLocker Guidance is a product in the Endpoint Protection Platform category. It covers AppLocker, Security Hardening and Configuration Management.
AppLocker Guidance is free. Download and setup instructions are at https://github.com/nsacyber/AppLocker-Guidance/.
Alternatives to AppLocker Guidance listed on CybersecTools:
Compare all AppLocker Guidance alternatives at https://cybersectools.com/alternatives/applocker-guidance
AppLocker Guidance is available as on-premises software. It is listed for small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Application allowlisting/blocklisting platform enforcing deny-by-default on endpoints.
Application allowlisting/blocklisting platform with per-user controls and SSO.
Centrally-managed client-side ad blocker that blocks malvertising org-wide.
Endpoint security suite with AV, EDR, firewall, ransomware protection for Windows/Android.
Encrypted desktop security for Windows & Mac with antivirus integration.
Endpoint security tool for controlling and monitoring USB device usage
On our shortlist?
No shortlist covers this product's category yet. The closest is Best EDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,033 products.
Connect your AI