Intrusion Shield Endpoint safeguards your device by blocking malicious websites and unwanted background traffic. It monitors traffic and checks them against Intrusion's extensive threat intelligence database. If a connection attempt is flagged as malicious or high-risk, Shield Endpoint immediately blocks it, keeping your endpoint secure.

Intrusion Shield Endpoint's traffic filter is enabled by a loopback VPN for the purpose of filtering traffic from other applications and applying real-time threat intelligence. It does not connect to a remote VPN server but routes traffic locally through the threat filter.

Intrusion Shield Endpoint is a business-to-business solution that is part of a Software-as-a-Service offering. Distribution of the app is private and requires a 3rd party business agreement with terms and conditions for the service agreed upon, which define the usage and privacy of data collected for the purpose of security monitoring. Network traffic statistics are collected from endpoint devices so that they can be reviewed by a business's IT administrators in a cloud reporting dashboard, similar to a SIEM, in order to respond to network threats.