PC Matic Pro - Application Allowlisting is an endpoint protection product that uses a default-deny (zero trust) approach to prevent unauthorized applications, malware, ransomware, and malicious scripts from executing on protected devices. The product operates by maintaining a Global Allowlist of over 22 billion known-good applications, which endpoints verify against either locally or via the cloud. Customers can supplement this with a Local Allowlist for custom or low-frequency applications and a Local Directory Allowlist for development environments. Beyond standard application control, the product includes several specialized allowlist layers: - Signature Allowlist: Allows signed applications via publisher signature, covering past and future versions without individual hash entries. - Malicious Script Allowlist: Prevents ransomware deployed through valid scripting applications. - RDP Authentication Allowlist: Authenticates devices connecting via RDP to block ransomware entry through breached RDP ports. - Microsoft Office Allowlist: Controls which applications can be launched via Office macros. - File Extension Allowlist: Blocks execution through compromised file extensions. PC Matic Pro is designed to run alongside existing endpoint security solutions without conflicts, functioning as an additional preventative layer. It supports Windows 8+, macOS 10.12+, and Windows Server 2016+. Mobile devices are not supported. The product aligns with NIST standards for application allowlisting compliance and supports adherence to the Australian Essential Eight Maturity Model.