Under every example: the exact HubSpot settings that produce it — Field › Sub-field · Choice, named as they appear on the module’s Content / Styles tabs. Section (dashed) is the section template the module sits in (Add section › AIRLOCK 1 · Section — …) — set on the section, not the module. See Section backgrounds.
base — light background (text-and-lines ledger; the only look)
Column containers › Left columnNone (text and lines)defaultColumn containers › Right columnNone (text and lines)defaultComparison rows › Verdict chip (right cell, optional — e.g. Allowed / Extended)filled in on 2 of 4 rows (Faster, Automated)Footnote / referencesfilled inSectionSolid White
Application control today
Extended with agentic AI

Policy creation

Analysts build and tune allowlists by hand from execution logs.

Faster

Agents draft policy from observed behaviour and hand it to an analyst for approval.

Change handling

Every software update triggers a review before it can run.

Automated

Trusted-publisher changes are pre-assessed and staged automatically.

Incident triage

Blocked events are investigated one at a time in the console.

Related blocks are grouped, explained and prioritised before a human looks.

Oversight

Full control, but limited by analyst hours.

Same Deny by Default guarantees; the human stays the final approver.

Illustrative comparison. Read how Deny by Default works at airlockdigital.com.

base — dark background
Column containers › Left columnNone (text and lines)defaultColumn containers › Right columnNone (text and lines)defaultComparison rows › Verdict chip (right cell, optional — e.g. Allowed / Extended)filled in on 2 of 4 rows (Faster, Automated)Footnote / referencesfilled inSectionGradient Dark
Application control today
Extended with agentic AI

Policy creation

Analysts build and tune allowlists by hand from execution logs.

Faster

Agents draft policy from observed behaviour and hand it to an analyst for approval.

Change handling

Every software update triggers a review before it can run.

Automated

Trusted-publisher changes are pre-assessed and staged automatically.

Incident triage

Blocked events are investigated one at a time in the console.

Related blocks are grouped, explained and prioritised before a human looks.

Oversight

Full control, but limited by analyst hours.

Same Deny by Default guarantees; the human stays the final approver.

Illustrative comparison. Read how Deny by Default works at airlockdigital.com.

left column in a white card — on a dark background
Column containers › Left columnWhite cardColumn containers › Right columnNone (text and lines)defaultComparison rows › Verdict chip (right cell, optional — e.g. Allowed / Extended)filled in on 2 of 4 rows (Faster, Automated)Footnote / referencesfilled inSectionGradient Dark
Application control today
Extended with agentic AI

Policy creation

Analysts build and tune allowlists by hand from execution logs.

Faster

Agents draft policy from observed behaviour and hand it to an analyst for approval.

Change handling

Every software update triggers a review before it can run.

Automated

Trusted-publisher changes are pre-assessed and staged automatically.

Incident triage

Blocked events are investigated one at a time in the console.

Related blocks are grouped, explained and prioritised before a human looks.

Oversight

Full control, but limited by analyst hours.

Same Deny by Default guarantees; the human stays the final approver.

Illustrative comparison. Read how Deny by Default works at airlockdigital.com.

right column in a dark panel — on a light background
Column containers › Left columnNone (text and lines)defaultColumn containers › Right columnDark panelComparison rows › Verdict chip (right cell, optional — e.g. Allowed / Extended)filled in on 2 of 4 rows (Faster, Automated)Footnote / referencesfilled inSectionSolid White
Application control today
Extended with agentic AI

Policy creation

Analysts build and tune allowlists by hand from execution logs.

Faster

Agents draft policy from observed behaviour and hand it to an analyst for approval.

Change handling

Every software update triggers a review before it can run.

Automated

Trusted-publisher changes are pre-assessed and staged automatically.

Incident triage

Blocked events are investigated one at a time in the console.

Related blocks are grouped, explained and prioritised before a human looks.

Oversight

Full control, but limited by analyst hours.

Same Deny by Default guarantees; the human stays the final approver.

Illustrative comparison. Read how Deny by Default works at airlockdigital.com.

both columns contained: left white card + right dark panel — on a light background
Column containers › Left columnWhite cardColumn containers › Right columnDark panelComparison rows › Verdict chip (right cell, optional — e.g. Allowed / Extended)filled in on 2 of 4 rows (Faster, Automated)Footnote / referencesfilled inSectionSolid White
Application control today
Extended with agentic AI

Policy creation

Analysts build and tune allowlists by hand from execution logs.

Faster

Agents draft policy from observed behaviour and hand it to an analyst for approval.

Change handling

Every software update triggers a review before it can run.

Automated

Trusted-publisher changes are pre-assessed and staged automatically.

Incident triage

Blocked events are investigated one at a time in the console.

Related blocks are grouped, explained and prioritised before a human looks.

Oversight

Full control, but limited by analyst hours.

Same Deny by Default guarantees; the human stays the final approver.

Illustrative comparison. Read how Deny by Default works at airlockdigital.com.