Menu
Complete moves from 'detect and respond' to 'prevent and control'. The full ThreatLocker suite means only approved software can run, approved apps can only do what they're supposed to, data can't leave via unauthorised routes, and anomalies are surfaced for investigation. This is what we recommend.
The Complete Device Security Pack is the full endpoint security stack — everything in Core plus the complete ThreatLocker suite. The recommended tier for any client with sensitive data, regulatory obligations, or a serious approach to ransomware defence.
When you want the strongest available endpoint protection, not just the minimum. Particularly important for clients handling confidential data, subject to regulatory scrutiny, or who've experienced a security incident.
Everything in Core (RoboShadow, NinjaOne, SentinelOne Control, ThreatLocker Elevation) plus ThreatLocker Allowlisting, Ringfencing, Storage Control, Network Control, and Endpoint Detect.
Stops ransomware and malware that antivirus misses, prevents data exfiltration, blocks lateral movement if a device is compromised, and provides a full audit trail of everything on your estate.
ThreatLocker Endpoint Detect adds an intelligence layer on top of the ThreatLocker stack — analysing behaviour patterns across your estate, surfacing suspicious activity, and bringing a managed detection and response capability to SMBs that would previously have needed a large enterprise budget to access it.
Key Features
ThreatLocker Network Control is a host-based firewall that goes further than a traditional network firewall — it controls exactly which ports and connections each device can make, opening them only when a specific authorised application needs them and closing them automatically afterwards.
Key Features
Data can leave a business in many ways — a USB stick, a personal cloud drive, an email attachment. ThreatLocker Storage Control gives you precise control over all of it, letting you allow legitimate data movement while blocking the routes you don’t want open.
Key Features
Just because software is trusted doesn’t mean it should be able to do anything. Ringfencing controls exactly what each approved application is allowed to interact with — so even if an attacker exploits a legitimate tool like Word or a browser, the damage they can do is contained.
Key Features
Most security tools try to stop known bad software. ThreatLocker Allowlisting flips this entirely — only software you’ve explicitly approved is allowed to run. Everything else is blocked by default, regardless of whether it’s been seen before.
Key Features
Running as a local administrator is one of the biggest hidden security risks in any business. ThreatLocker Elevation solves this elegantly — staff can run approved applications that need elevated permissions, without ever being granted full admin rights on their device.
Key Features
Traditional antivirus reacts to threats it already knows. SentinelOne Control uses AI to detect and stop new, unknown threats in real time — and uniquely, can automatically roll back the damage if ransomware does get a foothold, restoring files to their pre-attack state.
Key Features
You can’t fix what you can’t see. RoboShadow continuously scans your devices and externally-facing services for vulnerabilities — open ports, missing patches, known weaknesses — and gives you a clear risk score so you know exactly where you stand.
Key Features
NinjaOne is the engine behind your managed IT service. It keeps every device on your estate patched and up to date, monitors for issues before they become problems, and gives both your IT team and your own staff remote access to devices — all from a single platform.
Key Features
Step 1
Step 2
Step 3
Step 4
Step 5
The full ThreatLocker suite — default-deny Allowlisting, application Ringfencing, Storage Control for USB and cloud, Network Control for host-level firewall, and Endpoint Detect for anomaly detection.
The ThreatLocker suite deploys in learning mode first — your team’s legitimate workflows are mapped before any restrictions go live. We manage the rollout carefully to avoid disruption.
Ransomware needs to execute to encrypt files. With Allowlisting, it can’t execute unless it’s on the approved list — and it won’t be. This stops ransomware that would get past even the best next-gen AV.
Yes. ThreatLocker Storage Control manages exactly which USB devices and cloud storage services are accessible from managed devices.
Yes — £8.94 per user per month.
Yes. All security packs sit on top of Complete Unlimited IT Support.
SentinelOne stops individual threats as they execute. Endpoint Detect watches for patterns of unusual behaviour across your estate over time — they work at different layers and complement each other.
Yes. We can upgrade your pack at any point. If your risk profile changes — new data type, new regulation, or post-incident — we move you to Complete.
Yes — 10% off on 12, 24, or 36-month terms.
Not for legitimate use. Ringfencing stops Office apps from doing things they should never need to do — like launching PowerShell. Normal document editing, printing, and saving all work as expected.
There is nothing more annoying than an IT glitch that stops you working efficiently. However, knowing you have access to immediate attention to the glitch and a solution to it, is very reassuring and that is provided by We Do Your IT. We have so appreciated the availability and response given by the team at We Do Your IT, enabling us to remain a productive firm.
Richard Sharp – Sharp Family Law