# idemeum > AI agents that autonomously resolve IT issues on endpoints and in the cloud. idemeum has two product lines: AI agents for IT (Assist and Automate) and Endpoint Control (Application Allowlisting, Endpoint Privilege Management, and Just-in-time Admin Access). ## AI agents - [Assist](https://idemeum.com/platform/assist): Conversational AI agent that resolves end-user IT requests on endpoints and in the cloud, with security guardrails at every step. - [Automate](https://idemeum.com/platform/automate): Cloud AI agent that runs IT workflows from webhooks or schedules, with skills written in plain language and integrations with your stack. ## Endpoint Control - [Endpoint Control](https://idemeum.com/platform/endpoint-control): Unify endpoint control with one platform: Application Allowlisting, Endpoint Privilege Management, and Just-in-time Admin Access for Windows, macOS, and Entra ID. - [Application Allowlisting](https://idemeum.com/allowlisting): Only approved applications run on your Windows and macOS endpoints. Everything else is blocked by default. - [Endpoint Privilege Management](https://idemeum.com/endpoint-privilege-management): Remove local admin rights on Windows and macOS: automatic elevation rules, admin account discovery, and elevation requests approved by IT. - [Just-in-time Admin Access](https://idemeum.com/just-in-time-admin-access): Just-in-time Admin Access for computers, servers, and Entra ID tenants: on-demand admin accounts, passwordless sign-in, and cloud LAPS. ## Company - [Pricing](https://idemeum.com/pricing): AI agents priced to your ticket volume. Endpoint Control priced per device, free up to 50 devices. Contact us for partner or MSP pricing. - [Security](https://idemeum.com/security): idemeum is SOC 2 Type II certified. Its AI agents run with guardrails and audit trails, Endpoint Control uses FIDO2 MFA, and the service runs on AWS. - [Blog](https://idemeum.com/blog): Articles from idemeum on application allowlisting, EDR, and preventing malware on endpoints. - [Integrations](https://idemeum.com/integrations): Connect idemeum to your identity providers, device management (MDM and RMM), ITSM and PSA, collaboration, and knowledge base tools. - [About](https://idemeum.com/about): The team behind idemeum: founded in 2021, backed by Y Combinator, and building AI agents that resolve IT issues on endpoints and in the cloud. - [Docs](https://docs.idemeum.com/): Product documentation. ## Blog posts - [What is application allowlisting?](https://idemeum.com/blog/what-is-application-allowlisting): Allowlisting lets only approved applications run and blocks everything else by default. Here's how it compares to blocklisting, and why it fits Zero Trust. - [Why EDR is not enough for endpoint security](https://idemeum.com/blog/why-edr-is-not-enough-for-endpoint-security): EDR reacts after an attack starts. Allowlisting stops it before it runs. - [The malware problem](https://idemeum.com/blog/the-malware-problem): Ransomware attacks on critical industries surged 34% in 2025, and detection is falling behind. Here’s why prevention has to come first. ## Optional - [Full text of every blog post](https://idemeum.com/llms-full.txt)