Device Posture Management
Device posture management is the continuous process of evaluating whether a device meets an organization’s security requirements before and while it accesses enterprise resources.
ON THIS PAGE
What Device Posture Management Means
Identity alone is no longer enough to establish trust. Even a legitimate employee can introduce risk when connecting from a compromised, unmanaged, or improperly configured device.
Device posture provides additional context that helps organizations determine whether access should be permitted, restricted, or challenged.
Device posture represents the current security state of an endpoint.
A device posture assessment evaluates signals from the device to determine whether it meets organizational security requirements.
Rather than treating every authenticated endpoint equally, organizations can incorporate device health into access decisions.
For example, a user may have valid credentials but be connecting from a device with disabled security controls or outdated software.
In that situation, identity is valid while the device itself may not be trustworthy.
How Device Posture Is Assessed and Continuously Measured
Organizations can evaluate device posture at authentication and continue monitoring it throughout a session.
Typical endpoint compliance checks may examine:
Operating system and version
Security patch status
Disk encryption
Firewall configuration
Endpoint security software
Device ownership or enrollment
Screen-lock configuration
Presence of prohibited software
Indicators that the device has been compromised
Organizations can combine these signals to establish a broader device security posture.
Importantly, posture can change.
A device that meets security requirements in the morning may become noncompliant later. Continuous assessment can therefore provide stronger security than a one-time check at login.
Common Misconceptions About Device Posture Management
One misconception is that device posture is simply another term for device management.
It is not.
Device management platforms can configure and administer endpoints. Device posture focuses specifically on evaluating security state and using that information to inform security decisions.
Another misconception is that a trusted user automatically implies a trusted device.
Modern Zero Trust approaches separate these concepts.
Zero trust device health means continuously evaluating whether the endpoint remains appropriate for accessing a particular resource rather than granting permanent trust based solely on successful authentication.
Signals and Indicators Used to Determine Device Posture Status
There is no single universal device posture signal.
Organizations typically combine multiple indicators based on the sensitivity of the resource and their security requirements.
For access to a low-risk application, basic device enrollment and patch status might be sufficient.
For access to sensitive infrastructure or data, organizations may require stronger controls such as encryption, active endpoint protection, specific operating system versions, and additional security configurations.
AI adoption adds another consideration.
As employees increasingly use AI applications and agents from their workstations, endpoint context can become an important component of determining whether an AI-driven action should be trusted.
Dash explores the broader implications of these new environments in its discussion of agentic AI security.
Frequently asked questions
What attributes are typically checked during a device posture assessment?
Common attributes include operating system version, patch level, encryption status, endpoint security software, firewall configuration, device enrollment, and other indicators of device health.
How does device posture management differ from mobile device management (MDM)?
MDM primarily manages and configures devices. Device posture management evaluates their current security state and can use those findings to influence access decisions. Organizations may use information from MDM systems as part of posture assessment.
Which compliance frameworks reference device posture as a control requirement?
Various security and compliance frameworks emphasize endpoint security, access control, configuration management, and continuous verification. Specific requirements vary by framework, industry, and jurisdiction.
Related terms
See what your agents are actually doing.
Dash discovers every AI agent, tool, and MCP server across your estate, understands session and intent, and enforces policy at runtime.