Register today for Zero Trust World 2026!

ThreatLocker® Unveils Advanced Anomaly Detection, Elevating Cloud Security with Impossible Travel Insights

August 13, 2025

ORLANDO, Fla. – Aug. 13, 2025 – ThreatLocker®, a global leader in endpoint security and Zero Trust solutions, today announced the launch of Advanced Anomaly Detection, a new feature within its Cloud Detect product. Advanced Anomaly Detection significantly enhances organizations' ability to identify and neutralize sophisticated cyber threats such as impossible travel, cookie theft, and credential harvesting.  

This enhancement is particularly crucial for security analysts and CISOs grappling with the complexities of modern cloud-based environments. 

Key benefits

  1. Works independently of Microsoft Licensing 
  2. Improves use of telemetry data through implementation of trusted IPs to reduce false positive for traveling users  
  3. Empowers customers with deeper visibility into irregularities, beyond traditional individual log analysis. 

"This new capability is critical for hardening attack surfaces and highlighting irregularities in distributed environments," said Danny Jenkins, ThreatLocker CEO and co-founder. “Without a unified source of truth for the location of its users, organizations often lose out on critical security measures. Cloud Control creates this source of truth for our Advanced Anomaly Detection, allowing us to identify suspicious activities, such as an authentication from Florida followed by a login from Europe in a different application, which strongly indicates account compromise. And it doesn’t have to end at just Microsoft 365.” 

The Advanced Anomaly Detection feature is designed to analyze log data from a customer’s cloud environment, running advanced analytics to determine if two login attempts from the same user constitute an "impossible travel" scenario. This means if a user logs in from Europe and an hour later a login is recorded for the same user in the United States, Cloud Detect can identify this as an impossible event, highlighting potential account compromise. 

About ThreatLocker 

ThreatLocker® is a global cybersecurity leader that helps organizations stop cyberattacks at the source by taking a true Zero Trust approach to securing endpoints. Through powerful tools like Application Allowlisting, Ringfencing™, and Network Control, ThreatLocker gives IT teams the granular control they need to block ransomware, prevent zero-day exploits, and harden their environments from the inside out. Designed for simplicity, scalability, and speed, ThreatLocker security stack reduces complexity, accelerates compliance, and empowers businesses to take control of their cybersecurity—before threats strike. Headquartered in the United States with a growing global presence, ThreatLocker protects 50,000-plus organizations across industries.

Request your 30-day trial to the entire ThreatLocker platform today.

Try ThreatLocker