HP Sure Click

HP Sure Click
Name	HP Sure Click
Developer	HP Inc.
Released	0 2016
Operating system	Microsoft Windows
Genre	Computer security, Application virtualization
License	Proprietary

HP Sure Click. It is a security software solution developed by HP Inc. to protect endpoints from advanced malware and targeted attacks delivered via web browsers and email clients. The technology leverages a micro-virtualization approach to isolate potentially risky tasks, such as opening email attachments or downloading files, into disposable, hardware-enforced containers. This solution was initially introduced on select commercial HP EliteBook and HP ProBook notebooks and has since expanded to other enterprise-focused devices within the HP portfolio.

Overview

HP Sure Click was developed by the cybersecurity division of HP Inc. to address the growing threat of sophisticated malware and exploits targeting common productivity applications. The core premise is to contain damage from user-initiated actions that could compromise the host operating system. It integrates directly with the hardware of supported HP business notebooks, utilizing features of modern CPUs to create secure, isolated environments. The solution is often part of a broader security ecosystem from HP, which may include HP Sure Sense and HP Sure Recover, forming a layered defense strategy for enterprise clients.

Technology and architecture

The architecture of HP Sure Click is built upon a micro-virtualization framework, a concept pioneered by security researchers at Bromium, which HP acquired. It uses the hardware virtualization extensions found in Intel processors with VT-x technology and AMD-V from Advanced Micro Devices to create lightweight, hardware-isolated virtual machines, often termed "micro-VMs." Each risky document or web session is opened within its own ephemeral container, completely segregated from the host Microsoft Windows operating system and its core files. This isolation is managed by a thin hypervisor, ensuring that any malicious code executed within the container is discarded when the task is completed, leaving no persistent threat on the main system.

Features and capabilities

Key features include automatic protection for popular applications like Microsoft Edge, Google Chrome, Mozilla Firefox, Microsoft Outlook, and the default Windows file handler for opening attachments. It provides seamless, transparent isolation for files such as PDF documents, Microsoft Office files (e.g., .docx, .xlsx), and various archive formats. The software includes administrative tools for configuring trusted websites and file sources that can bypass isolation, and it offers detailed logging of containment events for security auditing. Its capability to render advanced web-based threats, such as those from drive-by download attacks or malicious Adobe Flash content, harmless is a central function.

Deployment and management

Deployment is typically managed through enterprise IT channels, often integrated with tools like Microsoft Intune or VMware Workspace ONE for unified endpoint management. Administrators can push configurations and policies via standard protocols to fleets of HP devices across an organization. The management console allows for the customization of protection profiles, enabling exceptions for specific internal web applications or trusted cloud storage services like Microsoft OneDrive or Box. Updates to the security definitions and core engine are delivered through HP Support Assistant or enterprise management suites.

Compatibility and system requirements

HP Sure Click requires specific hardware and software support to function. It is compatible with HP commercial PCs, including the HP Elite Dragonfly, HP ZBook mobile workstations, and certain HP EliteDesk models, that are equipped with supported Intel Core or AMD Ryzen processors with virtualization technology. The operating system must be a modern version of Microsoft Windows 10 or Windows 11, typically the Windows 10 Pro or Enterprise editions. System firmware, such as the BIOS or UEFI, must have virtualization features enabled, and a Trusted Platform Module (TPM) is often utilized for enhanced security integrity checks.

Security efficacy and reception

The security efficacy of HP Sure Click has been recognized in various industry evaluations. It has received positive analysis from independent testing organizations like AV-TEST Institute and has been highlighted in reports by Gartner and Forrester Research for its innovative approach to application isolation. The technology is particularly noted for mitigating threats from zero-day exploits in commonly targeted software, providing a robust layer of protection that complements traditional antivirus software. Reception within the information technology community has been favorable, especially among sectors with high security needs such as financial services, healthcare, and government agencies, where containing advanced persistent threats is critical.

Category:HP Inc. software Category:Computer security software Category:Virtualization software