Settings: Runtime protection
What the SDK does inside your customers' programs when it detects something. Each kind of detection either ends the program or is only reported to you.
Open it now:Settings, Runtime protection
The groups
| Group | What it covers |
|---|---|
| Debuggers | A debugger or breakpoint attached to your program. |
| Code changes | Your program's code, or the functions it calls, being altered while it runs. |
| Added code | Unknown code or libraries appearing after sign-in. Libraries from Windows and signed libraries are not counted. |
| Stalled checks | The program's own background checks stopping, for example when a laptop goes to sleep. |
End the app or report only
| Setting | What happens on a detection |
|---|---|
| End the app | The program closes shortly after the detection, and the detection is recorded. This is the default for every group. |
| Report only | The program keeps running. The detection is recorded in Logs as Client detection. |
Neither setting bans anyone. To react to detections, add an Automation rule for the Client detection event: it can notify you, or ban the license, the hardware or the address.
The Strict, Balanced and Compatible buttons set all five groups at once. Balanced only reports stalled checks. Compatible also only reports added code.
When to change it
- Your program builds code while it runs, such as a script engine or a plugin loader: set Added code to Report only.
- You test builds under a debugger: use a separate test application with Debuggers on Report only. Do not relax it on the application your customers use.
When it applies
The setting reaches the program after a successful sign-in. Before that, every group ends the program. If the setting cannot be read, or stops arriving, every group goes back to ending the program. If detections appear in three different groups in one session, every group goes back to ending the program for the rest of that session.
A session that keeps running after a detection that should have ended the program is ended by the server.