Trust Center Sign in
Endpoint modulesNGAV / Malware PreventionFirewall & Firewall PolicyApp ControlDevice ControlDLPFileHunt & QuarantineFile Integrity MonitoringHost InventorySoftware Inventory / SBOMPatch ManagementExposure ManagementExposure ControlEncryption PostureIdentity & ITDRSession AssuranceZTNA PostureThreat IntelligenceCustom DetectionsObservabilitySIEM ForwardingBrowser & IDE SecurityComplianceEndpoint EffectorsIR ShellAutonomic RemediationAnalyst Workflows
OffensivePenetration TestingRed TeamingAI Red TeamingAdversary SimulationVulnerability AssessmentsApplication Security AssessmentsDetectionManaged Detection & ResponseThreat HuntingIncident Response RetainersIncident Readiness & ResponseDetection EngineeringPreparednessTabletop ExercisesRansomware Readiness AssessmentsIncident Response Plan Development and TestingSecure Software Development AssessmentArchitectureSecurity Program DesignSecurity Maturity AssessmentsZero Trust AssessmentsCloud Security Architecture ReviewsRiskSupply Chain Risk ManagementSoftware Supply Chain SecurityQuantum Readiness AssessmentsData Security Assessments
Architecture LibraryWhitepapersPerspectivesAnalyst & Investor BriefingsGlossaryEvents
Company overviewVisionCode of EthicsLeadershipCareersNews & PressContact
Worldwide (EN) United Kingdom Australia Singapore India France Deutschland Brasil Latinoamérica 日本 대한민국
Sign inContact us
Platform capability · Protect

App Control

Allow trusted applications only

Bring execution policy to the endpoint with governed allow, deny, and exception decisions that are scoped to identity, device, and declared intent.

Request a demo →
The capability

Make application trust explicit

App Control turns software execution from an informal assumption into a policy decision that can be explained, bounded, and reviewed.

Allow with intent

Define which applications may run within a declared operating boundary.

Scope the decision

Use device, identity, posture, and policy context instead of a single global list.

Verify the outcome

Keep the action and resulting endpoint state available for evidence and review.

What it governs

Trust decisions at execution time

A useful application policy is not only a list of names. It expresses what should be trusted, for whom, on which device, and under what conditions.

Policy inputs

Understand the context

  • Application identity and provenance
  • Device and user scope
  • Declared policy intent
  • Exception and maintenance conditions
Policy outcome

Make the boundary clear

  • Allow, deny, or observe
  • Explain the decision path
  • Route exceptions through governance
  • Preserve evidence of the result
How it stays governed

Control without turning policy into a black box

Application control belongs inside the same governed loop as endpoint telemetry, authorization, action, verification, and evidence.

Boundary · 01

Identify

Establish what is attempting to run and which context surrounds it.

Boundary · 02

Authorize

Apply the policy boundary and any explicitly governed exception.

Boundary · 03

Record

Preserve the decision and verification context for investigation and audit.

Current evidence

Runtime-integrated on macOS

Policy-driven application control is integrated into the endpoint effector path in the macOS agent.

Qualification

Platform scope remains explicit

Cross-platform policy delivery and enforcement maturity vary by agent and deployment condition. This page does not imply universal application coverage.

See the boundary

Discuss application trust in your environment

Review policy scope, exceptions, deployment conditions, evidence, and the maturity path with the Spacetime team.

Request a demo →