Fleet Insights
The device page tells you everything about one device. Fleet Insights turns the question around: which devices are not compliant, which miss the latest security update, where is an application installed, which drivers or applications have known vulnerabilities.
| Page | Answers | Guide |
|---|---|---|
| Compliance | Which devices are not encrypted, have no TPM, an outdated BIOS or an operating system out of support? | Compliance |
| Updates | Which Windows updates are installed, which failed, which devices miss them, which vulnerabilities each update fixes? | Windows Updates |
| Drivers | Which drivers are installed, which are unsigned, do they have known vulnerabilities? | Drivers |
| Applications | Which applications are installed and where, which have known vulnerabilities, which AI tools are in use? | Applications |
| Software Metering | Which programs are actually used, and how much? | Software Metering |
| Statistics | How is the fleet made up? | Statistics |
All these views include only the devices you are allowed to see (see Device Visibility (RBAC)).
Vulnerabilities (CVE)
Device Inventory Manager links what is installed on your devices to the public catalogs of known vulnerabilities, identified by their CVE code (for example CVE-2026-20149):
| Where | Source | What you see |
|---|---|---|
| Windows Updates | Microsoft Security Response Center (MSRC) | The vulnerabilities each update fixes, with severity, CVSS score, impact and whether they are actively exploited. Devices that miss the update are exposed to them. |
| Applications | National Vulnerability Database (NVD) | The known vulnerabilities of an application, highlighting the versions installed in your fleet that are affected. |
| Drivers | National Vulnerability Database (NVD) | The known vulnerabilities of a driver. |
| Compliance and the device page | Manufacturer security bulletins | Whether the installed BIOS has known vulnerabilities, with a link to the manufacturer's bulletin. |
Vulnerability data is cached for 24 hours. The CVSS score goes from 0 to 10; the severity (Critical, High or Important, Medium, Low) tells you what to fix first. Click the link next to a CVE to open its page in the public catalog.
Matching applications and drivers to the public catalog is based on their names and versions, so it can miss a vulnerability or show one that does not apply. Use it to decide where to look, and check the details on the CVE page before acting.