SecureAPlus is mostly cloud based to develop a whitelist/blacklist (gives you the option on anything unknown to it), uses minimal resources, and has a free trial for one year. I would have kept using it had the trial not lapsed, never an issue at all....
https://www.secureaplus.com/