Glossary 💻 Endpoint

Endpoint Security

Application allowlisting

Only lets approved programs run on a device, blocking anything that is not on the list.

Why this matters

Each laptop or phone is a possible entry point, and one infected device can spread to shared files and accounts.

You might see this as

Microsoft DefenderCrowdStrikeSentinelOne

More in Endpoint

Antivirus (AV)Software that scans files and programs to find and remove known malicious software (malware).Endpoint Detection & Response (EDR)Continuously watches device activity for suspicious behavior and lets responders investigate and isolate affected devices.Extended Detection & Response (XDR)Combines signals from devices, email, identity, and cloud into one view to detect and respond to attacks.Host firewallA firewall built into each device that controls which network connections are allowed in and out.Device control (USB restrictions)Blocks or limits USB drives and other plug-in devices that could carry malware or copy data.Mobile Device Management (MDM)Centrally sets up, secures, and can remotely lock or wipe company phones, tablets, and laptops.Full disk encryptionScrambles everything stored on a device so the data is unreadable if the device is lost or stolen.Patch managementKeeping operating systems and software updated with security fixes, ideally on a regular, tracked schedule.

Want help with endpoint?

Tell me what you have and I'll tell you which few things actually matter for you.

Get in touchSee what I offer