What Airlock Digital does

Airlock Digital is an Australian application control software company founded in 2013 in Unley, South Australia, by cybersecurity practitioners David Cottingham and Daniel Schell. The company focuses exclusively on enterprise-grade application allowlisting and blocklisting, enforcing a Deny by Default posture at the file level — uniquely identifying every file and application library and blocking any that has been modified or tampered with — across Windows, macOS, and Linux endpoints. The platform includes core allowlisting, blocklisting with allowlist override, browser extension control, Trusted Installer publisher allowlisting, and (as of v7.0, June 2026) Application Context for execution visibility, Trust Builder for guided policy creation, and Elevation Control for scoped privilege management. The product integrates with CrowdStrike EDR, Microsoft Entra ID, Jamf, SIEM platforms, ServiceNow, Slack, Microsoft Teams, and VirusTotal, and supports both cloud-hosted and on-premises deployments.

The company monetizes through annual subscription licensing on an endpoint basis via quote-based enterprise sales, supplemented by a channel partner program, a dedicated partner portal, implementation partners (e.g., The Missing Link), and listing on the CrowdStrike Marketplace. GTM combines direct enterprise field sales, channel partners, and event-driven engagement (Customer Summits in Sydney and Perth, Black Hat USA 2025). The customer base spans federal and defense (US Navy, BAE Systems, Booz Allen), banking and financial services (Valley Strong Credit Union, EQT, iBanFirst, NineStar Connect, RACQ), pharmaceuticals (Amgen), consumer goods (Procter & Gamble), technology (Qualcomm), energy and utilities (SA Power Networks, ActewAGL, Ampol, Melbourne Water, Inductive Automation), equipment rental (Sunbelt Rentals), education (Cornell University), and state/local government (Northern Beaches Council). Independent validation from a Forrester Consulting TEI study (January 2026) quantified a 224% ROI, $3.8M NPV over three years, zero breaches across interviewed customers, and greater than 25% breach risk reduction on a composite 20,000-endpoint enterprise. Airlock Digital holds ISO 27001:2022 certification and SOC 2 Type 2 attestation, and aligns with Essential Eight, NIST, CMMC, PCI-DSS, GDPR, and Canadian Top 10 frameworks. The company is privately held and bootstrapped (no disclosed external funding), operating through an Australian parent entity and a US subsidiary (Airlock Digital, Inc.) headquartered in Atlanta.

Name

Airlock Digital

Legal name

Airlock Digital Pty Ltd

Website

https://airlockdigital.com

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

101–250 employees

Short description

Airlock Digital is an Australian application allowlisting software company that prevents unauthorized code execution across Windows, macOS, and Linux endpoints for enterprise and government customers in defense, financial services, healthcare, energy, and critical infrastructure.

Ownership category

akta.pro rank

Product category

Endpoint Application Control (Allowlisting) Software

NAICS

Software Publishers (5132)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Endpoint Application Control & Allowlisting (HDADAEAI)

Keywords

• Application allowlisting software
• Endpoint security platform
• Deny by default security
• Application control solutions
• Zero trust endpoint

Headquarters

HQ city

Unley

HQ country

Australia

HQ region

Oceania

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Software Licenses and Subscriptions: Application control software licenses and subscriptions for endpoint protection. Offered as cloud-hosted or on-premises deployment options.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels8 records

Core offering

Airlock Digital provides an enterprise-grade application control (allowlisting) platform that defines trust before execution on Windows, macOS, and Linux endpoints through a Deny by Default model. The software uniquely identifies every file and application library and prevents execution of any file that has been modified or tampered with, available as cloud-hosted or on-premises deployments. It is designed for organizations that need to control what software runs on endpoints to prevent malware, ransomware, and unauthorized execution while meeting compliance frameworks such as Essential Eight, NIST, CMMC, and PCI-DSS.

Product overview

Airlock Digital provides a unified application control (allowlisting) platform designed for enterprise environments. The core Airlock Digital platform enables organizations to define what software is trusted and prevent unauthorized execution through a Deny by Default approach. Key modules include Application Allowlisting (core enforcement), Application Blocklisting (explicit blocking with precedence over allow rules), Application Context (v7.0 application-level visibility), Trust Builder (v7.0 guided policy creation), Elevation Control (v7.0 privilege management), Trusted Installer (publisher allowlisting), and Browser Extension Control. The platform supports Windows, macOS, and Linux across desktops, laptops, and servers, with deployment options for cloud-hosted or on-premises management. An Allowlisting Auditor tool is available for evaluation purposes.

Differentiator

Problem solved

Functional benefit

Products and services

• Airlock Digital Application Control Platform Enterprise-grade application control platform that uniquely identifies every file and application library, prevents execution of tampered or untrusted code, and enforces a Deny by Default approach across Windows, macOS, and Linux endpoints. Designed for federal government, defense, financial services, healthcare, energy, manufacturing, and education customers needing to protect sensitive data and critical infrastructure while meeting frameworks such as Essential Eight, NIST, CMMC, and PCI-DSS.
• Airlock Digital Allowlisting Auditor Standalone tool for evaluating the effectiveness of application allowlisting in customer environments, used as a free assessment utility.
• Airlock Digital Multi-Tenant Cloud Platform Auto-scale, multi-tenant cloud management platform enabling enterprise administrators to manage application control as discrete segmented tenants and request additional instances, with capabilities equivalent to the single-server on-premises solution.

Quantifiable outcome

• 224% ROI and $3.8M NPV over three years (composite 20,000-endpoint enterprise)
• +6 more outcomes

Named customers15 records

Segments8 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration8 records

Feature11 records

Partnerships

Four partnerships are on record, tiered core and minor.

• VirusTotalcoreTechnology or Integration · 10 October 2023Strategic partnership integrating VirusTotal's threat intelligence into Airlock's Intelligence Cloud framework. The integration provides enhanced visibility and real-time threat intelligence for trust decisions, including VT Augment offering indicators of compromise, execution graphs, and attribution information for files executed within customer environments.
• CrowdStrikecoreTechnology or IntegrationIntegration with CrowdStrike endpoint detection and response platform, enabling a more cohesive security architecture. Airlock Digital is also available through the CrowdStrike Marketplace, providing additional distribution channel.
• Microsoft EntracoreTechnology or IntegrationIntegration with Microsoft Entra ID (formerly Azure AD) for cloud security group support, enabling hybrid cloud and cloud native domain customers to drive user-based allowlisting decisions and exception management based on Entra group membership.
• The Missing LinkminorImplementation/ SI/ Consulting PartnerIT consultancy partner that worked with SA Power Networks on Airlock Digital deployment and implementation. Partner assists with customer implementations of the application control solution.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• ThreatLocker: ThreatLocker is a direct competitor focused exclusively on application allowlisting, ringfencing, and storage control for endpoints — targeting the same 'Deny by Default' use case as Airlock Digital across enterprise and mid-market customers.

Broad incumbents

• Microsoft Defender Application Control (WDAC) / AppLocker: Microsoft's built-in Windows application control features (WDAC and AppLocker) ship natively with the OS at no incremental cost, setting the baseline against which Airlock Digital competes on ease of management, cross-platform coverage, and policy tooling.
• CyberArk Endpoint Privilege Manager: CyberArk's Endpoint Privilege Manager combines application control with privilege elevation, a use case Airlock Digital entered with v7.0's Elevation Control. CyberArk's broader identity-security portfolio positions it as a competitor in adjacent endpoint policy use cases.
• CrowdStrike Falcon: CrowdStrike is both an integration partner and the largest indirect competitor — its Falcon platform bundles EDR/XDR with application control features and hosts Airlock Digital on its Marketplace, so it competes for the same endpoint security budget.
• SentinelOne: SentinelOne's Singularity XDR platform includes application control / allowlisting capabilities alongside EDR and identity protection, competing head-to-head with Airlock Digital in enterprise endpoint security deals.
• Palo Alto Networks Cortex XDR: Cortex XDR delivers endpoint protection, EDR, and application-control features as part of Palo Alto Networks' broader security platform, competing for the consolidated endpoint security budget that Airlock Digital targets with its specialist approach.
• Microsoft Defender for Endpoint: Microsoft Defender for Endpoint bundles EDR, vulnerability management, and application control capabilities natively into the Microsoft 365 ecosystem, providing a default option for Windows-heavy enterprises that Airlock Digital must displace.
• Trend Micro: Trend Micro's endpoint security suite (including application control features in Vision One / Apex One) competes with Airlock Digital in mid-market and enterprise deals, particularly across APAC where Trend Micro has strong distribution.
• Cybereason: Cybereason's Defense Platform combines EDR/XDR with behavioral prevention; its prevention-led positioning competes with Airlock Digital for organizations prioritizing pre-execution controls over detection and response.

Emerging players

• BeyondTrust Endpoint Privilege Management: BeyondTrust's Endpoint Privilege Management for Windows, Mac, and Linux combines application control with least-privilege enforcement, overlapping directly with Airlock Digital's Elevation Control and allowlisting capabilities in regulated enterprise accounts.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/airlock-digital
• Xx.com/AirlockDigital

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles9 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Airlock Digital