Explore Expel’s auto remediations: Contain host

**Executive summary:** Expel’s contain host auto remediation describes an automated endpoint isolation capability orchestrated via Expel Workbench and EDR integrations to immediately sever network connectivity of compromised or suspicious hosts; it outlines common use cases (e.g., ransomware, worms, lateral movement, active C2, exploited critical vulnerabilities), how Org Context settings prevent business disruption, and a five-step operational workflow from detection through confirmation.