<!-- Device Inventory Manager — https://wiki.cyberguard.srl/dim/fleet-insights/ -->

# Fleet Insights

The device page tells you everything about one device. **Fleet Insights** turns the question around: which devices are not compliant, which miss the latest security update, where is an application installed, which drivers or applications have known vulnerabilities.

| Page | Answers | Guide |
| --- | --- | --- |
| **Compliance** | Which devices are not encrypted, have no TPM, an outdated BIOS or an operating system out of support? | [Compliance](https://wiki.cyberguard.srl/dim/fleet-insights/compliance.md) |
| **Updates** | Which Windows updates are installed, which failed, which devices miss them, which vulnerabilities each update fixes? | [Windows Updates](https://wiki.cyberguard.srl/dim/fleet-insights/windows-updates.md) |
| **Drivers** | Which drivers are installed, which are unsigned, do they have known vulnerabilities? | [Drivers](https://wiki.cyberguard.srl/dim/fleet-insights/drivers.md) |
| **Applications** | Which applications are installed and where, which have known vulnerabilities, which AI tools are in use? | [Applications](https://wiki.cyberguard.srl/dim/fleet-insights/applications.md) |
| **Software Metering** | Which programs are actually used, and how much? | [Software Metering](https://wiki.cyberguard.srl/dim/fleet-insights/software-metering.md) |
| **Statistics** | How is the fleet made up? | [Statistics](https://wiki.cyberguard.srl/dim/fleet-insights/statistics.md) |

All these views include only the devices you are allowed to see (see [Device Visibility (RBAC)](https://wiki.cyberguard.srl/dim/administration/device-visibility.md)).

## Vulnerabilities (CVE)

Device Inventory Manager links what is installed on your devices to the public catalogs of known vulnerabilities, identified by their **CVE** code (for example *CVE-2026-20149*):

| Where | Source | What you see |
| --- | --- | --- |
| [Windows Updates](https://wiki.cyberguard.srl/dim/fleet-insights/windows-updates.md) | Microsoft Security Response Center (MSRC) | The vulnerabilities each update fixes, with severity, CVSS score, impact and whether they are actively exploited. Devices that miss the update are exposed to them. |
| [Applications](https://wiki.cyberguard.srl/dim/fleet-insights/applications.md) | National Vulnerability Database (NVD) | The known vulnerabilities of an application, highlighting the versions installed in your fleet that are affected. |
| [Drivers](https://wiki.cyberguard.srl/dim/fleet-insights/drivers.md) | National Vulnerability Database (NVD) | The known vulnerabilities of a driver. |
| [Compliance](https://wiki.cyberguard.srl/dim/fleet-insights/compliance.md) and the device page | Manufacturer security bulletins | Whether the installed BIOS has known vulnerabilities, with a link to the manufacturer's bulletin. |

Vulnerability data is cached for 24 hours. The **CVSS** score goes from 0 to 10; the severity (Critical, High or Important, Medium, Low) tells you what to fix first. Click the link next to a CVE to open its page in the public catalog.

> Matching applications and drivers to the public catalog is based on their names and versions, so it can miss a vulnerability or show one that does not apply. Use it to decide where to look, and check the details on the CVE page before acting.