ThreatLocker

Cybersecurity United States Website Reviewed Sept. 22, 2026

Zero trust endpoint security platform providing application allowlisting, ringfencing, storage control and elevation control.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
SOC 2 Type II Independent auditor, not named ThreatLocker states it is audited at least annually and a SOC 2 Type II report is issued. No dates published. — — Current

Compliance Frameworks

SOC 2 Type 2
Partial
The only attestation ThreatLocker actually holds; auditor and dates not published.

Do not read the compliance page as certifications

**ThreatLocker’s "compliance" page lists frameworks it helps CUSTOMERS meet — not certifications it holds.** Its own knowledge base says controls are "aligned with" ISO 27001/2, NIST 800-53 Rev 5, CMMC L2 and HIPAA. **SOC 2 Type II is the only actual attestation. Do not record ThreatLocker as ISO 27001 certified.**

The 26-framework list covering PCI DSS v4, Cyber Essentials, NIS2, TISAX and CMMC 2.0 describes customer compliance enablement.

No privacy policy, DPA, sub-processor list, data residency statement or security contact was found on the pages checked. **No public evidence** of a breach or exploited vulnerability in ThreatLocker’s own products.

Assess ThreatLocker in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register