Sophos Intercept X vs. ThreatLocker

Sophos Intercept-X is well suited for any environment big or small. There is even a home version that is free that I highly recommend for anyone at home. If you are looking for endpoint protection that is centrally managed, catches everything, and has many features this is the product for you.

Incentivized

If you want to know what is running in your environment and what it is trying to access, you should be able to take preemptive measures to prevent and protect yourself from it. ThreatLocker is the system for you! It will replace almost any EDR requirement, although I recommend you partner it with Windows Defender.

Incentivized

• Sophos is a little too good at DLP. But it is indeed very good at not allowing our data to leave our endpoints without strict adherence to policy.
• Sophos is very good at protecting endpoints against viruses and other malware.
• Sopho is really good at informing us of what is happening on our endpoints. OOTB reporting is way better than expected.

Incentivized

• Application whitelisting.
• Unified audits of everything network & application.
• Clean and concise portal to manage the same.
• Dynamic ability to allow users to request more apps.
• Security and a sense of complete control.

Incentivized

• The migration from on-prem sophos to cloud sophos, could have been a little more seamless
• Would love to get more insight on what was blocked or flagged and what it was trying to do
• Better and more granular feature management from group policies

Incentivized

• Unused polices are nearly impossible to navigate due to no sorts or filtering options.
• Redundant polices are impossible to determine.
• Cannot view literally all policies for one organization in one view/list. Instead of have to check policies per device, group, or all machines.

Incentivized

We have gotten a great product for the price. Easy to maintain and set up on new devices. Support is great and easy to work with and understand.

Incentivized

ThreaLocker has done its job and has prevented malware from executing. It has stopped an encryption process once already. It has kept a user from going to a bad website. He tried twice and was wondering why he was getting an error message from ThreatLocker and ESET both.

Incentivized

The usability has never been a problem. Sophos Intercept X is a program you can install and let protect your company without much intervention. Apart from a few policies, Sophos will keep you protected better than most any product on the market. Sophos Intercept X works quite well when you are looking to "tighten your grip" on user's access to websites, programs, and add-ons.

The console is very user friendly and is frequently updated based on user requests. It is well laid out and many of the areas allow the ability to pivot from one area to another without having navigate the entire menu tree. Much of what you do is to query activities on a given PC and the application allows you to save frequently run queries.

Incentivized

There is rarely ever an outage. I have seen slowness in ThreatLocker service. But that is very rare too!

Incentivized

ThreatLocker is always available. The admin's console loads very fast and report runs almost instantly. It does not interfere with operating system.

Incentivized

Most of the support reps are fantastic. There have been a few though that have had to be escalated via Account Manager when they haven't followed up but this is a rare instance, and often followed up by the Support Manager for APAC.

Incentivized

You can email, call or do online chat with tech support. I love their online chat. They are quick and friendly. Also, if you need to show them something, you can give the chat technician permission from your Chat box to allow the tech access to your computer. They also can pull out your admin console on their side. They can look at your "Unified Audit" log and see the same thing that you can. They have a good KnowledgeBase that you can look for answers. They have what is called "ThreatLocker University" where you can go through tutorials and take tests.

Incentivized

The owners and co-founders work with you through Zoom Meetings. They walk you through how to use and setup ThreatLocker. They also have webinars. You also can go through ThreatLocker University online training.

Incentivized

Using ThreatLocker University online training is very easy and informative. You take online tests to see how well you learned the material. It is great!

Incentivized

Best thing was the help pushing out via group policy and was able to get instructions for that on sophos site

Incentivized

ThreatLocker is a family ran business. The owners, co-founders work with you to ensure you are up and running as quickly as possible. They went to ensure your success with ThreatLocker.

Incentivized

I don't feel it's fair to compare Sophos Intercept X with the versions of Symantec and AVG that I have used in the past - as that was such a long time ago. I'm sure those other companies have released far more features than I used all those years ago

Incentivized

We chose Threatlocker because it is unique in that it specializes in a specific area, whereas other products offer a broader range of capabilities. It blocks software from running and provides us with all the necessary information for this purpose in an easy-to-use graphical user interface (GUI), which is all we need for our use case.

Incentivized

ThreatLocker is very easy to add new ThreatLocker agents on computers and servers. It is very easy to do. You can install an agent on a computer or server in about 2 minutes or less.

Incentivized

• Before we had Intercept X, we had several infections of ransomware. Since that time it has stopped at least 10 attempts, saving us thousands of man-hours and hundreds of thousands of dollars.
• By decreasing the time needed for malware remediation, it has saved us the cost of .25 FTE in the IT department.
• Initial setup was cumbersome and cost us .1 FTE in additional costs the first year.

Incentivized

• Applications that are new to the environment can be blocked even if they are wanted. Which can cause strain on the environment if not properly tuned or prepped.
• We have this deployed onto around 7700 endpoints at this moment with less than 0.01% of issues with the agent or its functionality being noted. It's incredibly stable and the Vendor support further helps if it does break, and they can usually fix it without 15 mins.
• We have had this tool on customers, and it has single handedly stopped Ransomware attacks by itself when the customers previous EDR failed to catch threat actor attacks. I can remember 3 separate instances where someone did something to cause an attack and ThreatLocker brought it to a screeching halt due to the application control and built-in ringfencing it provides.