PC Matic SuperShield

PC Matic SuperShield is an application allowlisting security product that uses a globally maintained allowlist to control which applications are permitted to execute on endpoint devices. Rather than relying on a blacklist of known malicious files, SuperShield blocks any application not found on its global allowlist by default. The global allowlist has been maintained by PC Matic for over a decade and is supplemented by digital signature verification of trusted publishers. Key components of the technology include: - **Automated Global Allowlist:** A cloud-based baseline list of approved applications, digital signatures, and publisher certificates that endpoints check against in real time. - **Digital Signature Allowlisting:** Validates publisher-signed applications by checking digital signatures and certificates, eliminating the need to allowlist individual file hashes. - **Local Application Allowlist:** A per-device custom allowlist that supplements the global list, with Zero Trust Network Access (ZTNA) to restrict lateral network movement. - **Malicious Script Allowlisting:** Real-time blocking of unauthorized scripts to prevent ransomware, malware, and advanced persistent threats (APTs) from executing. - **Secure RDP Access Control:** Monitors and controls Remote Desktop Protocol sessions to prevent unauthorized access, with Virtual Network Computing (VNC) for port management. Unrecognized applications are automatically submitted to PC Matic's malware research team for analysis. Administrators can manually approve unknown applications while analysis is pending.