A Canadian alternative to ThreatLocker
ThreatLocker is a Zero Trust endpoint security platform for businesses and MSPs/MSSPs (source). Lavawall® is a Canadian alternative for administrator elevation, owned and hosted in Canada, with the closest match for each ThreatLocker capability listed below.
On this page: ThreatLocker at a glance, feature by feature, ThreatLocker and Canada, and moving over.
Start a 14-day free trialTalk to a human
14-day trial of the full platform, no credit card. Then month-to-month, in Canadian dollars, with no long-term contract.
ThreatLocker at a glance
What ThreatLocker says about itself, with a link to the page each fact comes from.
| Made for | Businesses and MSPs/MSSPs (source) |
|---|---|
| Pricing model | Contact sales for a quote, based on endpoint count (source) |
| Free trial or free plan | Trial (30 days) (source) |
| Platforms | Windows, macOS, Linux (source) |
| Deployment | Cloud (SaaS) (cloud-managed portal with endpoint agents) (source) |
| Integrations it lists | ServiceNow, ConnectWise Manage, HaloPSA, Okta, and IT Glue (source) |
| Data export | Audit tables export to CSV (source) |
ThreatLocker feature by feature
ThreatLocker lists these capabilities on its own website; each links to its source. Beside each is the closest Lavawall® feature and the article that shows how to use it.
| What ThreatLocker says it does | Closest Lavawall® feature | How-to article |
|---|---|---|
| Application allowlisting (deny by default) (source) | Lavawall does not do application allowlisting. It uses administrator elevation with execution prevention for high-risk tools (Windows). | |
| Ringfencing to limit application behavior (source) | Execution prevention for high-risk built-in tools on Windows | Execution Prevention |
| Privileged access management (source) | Application Elevation: just-in-time administrator rights on Windows | Application Elevation Dashboard |
| Patch management (source) | Patching for more than 7,400 applications on Windows, Mac, and Linux | Patch Config |
| External storage device control (source) | No direct equivalent in Lavawall. Check whether you need it before you move. | |
| EDR with automatic isolation (source) | Lavawall is not an antivirus or EDR. It deploys yours, monitors it, and brings its detections into one list. | |
| Zero Trust Network Access (source) | Lavawall does not include zero trust network access. It can deploy WireGuard. | |
| 24/7 managed detection and response (source) | Lavawall does not provide a 24/7 staffed SOC. It works alongside one. |
Lavawall® has a close match for 3 of these 8 ThreatLocker capabilities. For the other 5, check whether you rely on them before you move.
For a longer comparison, see Lavawall® compared with ThreatLocker.
ThreatLocker and Canada
ThreatLocker lists its headquarters in Orlando, Florida. ThreatLocker announced a data centre in Toronto in 2024.
| Canadian criterion | Lavawall® | ThreatLocker |
|---|---|---|
| Headquarters and ownership | Calgary, Alberta; fully Canadian-owned | Orlando, Florida |
| Hosting in Canada | Yes, by default | Yes, a Toronto data centre (source) |
| Canadian-dollar pricing | Yes, with GST, HST, PST, and QST | See ThreatLocker’s pricing |
| Console in French | Yes: Canadian French, Canadian English and US English, chosen by each person (details) | No French option documented on its website (checked October 2026) |
Taken from ThreatLocker’s own website and documentation in September 2026 and linked on this page. Tell us if something has changed and we will correct it.
Lavawall® is built and owned by ThreeShield Information Security Corporation in Calgary, hosted in Canada by default, billed in Canadian dollars, supported from Canada, and available in Canadian French. What makes Lavawall® Canadian.
Moving from ThreatLocker to Lavawall®
- Export what you need from ThreatLocker. Its documentation describes this: audit tables export to CSV.
- Start a free Lavawall® trial and add your companies.
- Install the Lavawall® agent through your RMM; elevation installs with it, with no separate enrolment code. Start with execution prevention in audit mode and review what it would block.
- Set up each feature from the table above. The how-to articles to start with: Execution Prevention, Application Elevation Dashboard, Patch Config.
- Run both side by side and turn ThreatLocker off one company at a time, when your team is ready.
Where ThreatLocker may fit better
If you want an allowlisting model in which only approved software can run, that is how ThreatLocker describes its approach; Lavawall® uses administrator elevation with execution prevention for high-risk tools instead. Elevation is available for Windows. If Canadian hosting is your only requirement, ThreatLocker’s Canadian option may already meet it.
Lavawall® has no direct equivalent for these ThreatLocker capabilities, so check whether you need them:
- application allowlisting (deny by default): Lavawall does not do application allowlisting. It uses administrator elevation with execution prevention for high-risk tools (Windows).
- external storage device control
- EDR with automatic isolation: Lavawall is not an antivirus or EDR. It deploys yours, monitors it, and brings its detections into one list.
- Zero Trust Network Access: Lavawall does not include zero trust network access. It can deploy WireGuard.
- 24/7 managed detection and response: Lavawall does not provide a 24/7 staffed SOC. It works alongside one.
Frequently asked questions
- Is Lavawall a Canadian alternative to ThreatLocker?
- Yes. Lavawall® is Canadian-owned and hosted in Canada by default. Of the 8 ThreatLocker capabilities listed on this page, Lavawall has a close match for 3.
- Does ThreatLocker host data in Canada?
- Yes, according to its own documentation. ThreatLocker announced a data centre in Toronto in 2024.
- How is ThreatLocker priced?
- Its own website describes its pricing as contact sales for a quote, based on endpoint count. Lavawall® publishes its prices in Canadian dollars on its pricing page, month-to-month.
- Does ThreatLocker offer a free trial?
- Its own website lists this: trial (30 days). Lavawall® offers a 14-day free trial with no credit card.
- What does Lavawall not replace in ThreatLocker?
- Lavawall® has no direct equivalent for these ThreatLocker capabilities: application allowlisting (deny by default), external storage device control, EDR with automatic isolation, Zero Trust Network Access, and 24/7 managed detection and response.
- Can Lavawall replace ThreatLocker?
- For administrator elevation on Windows, yes. Lavawall® grants administrator rights just in time and blocks high-risk tools, without a kernel driver, on the same agent as its RMM.
- Can I export my data from ThreatLocker?
- ThreatLocker’s documentation describes this: audit tables export to CSV.
- Is ThreatLocker available in French?
- ThreatLocker does not document a French option on its website (checked October 2026). Lavawall® works in Canadian French, Canadian English and US English, chosen by each person.
ThreatLocker is a trademark of its owner. Other product names are trademarks of their respective owners. Lavawall is not affiliated with ThreatLocker.