During authentication, it’s not just a user that authenticates but also their devices. However, it’s difficult for IT and security teams to ensure device security compliance because they have limited options for gaining visibility on unmanaged devices, consolidated risk reporting, and gathering real-time data . Plus, current endpoint management tools can be misconfigured and require manual runs that noticeably erode performance for end-users.

Device360 is Beyond Identity’s newest product, released today, deepens our device trust capabilities to enable organizations of any size to understand device security risk across their entire inventory easily, quickly, and with a single pane of glass.

It is the first and only device security tool built around a simple admin experience, provides visibility into security posture of 100% of devices including unmanaged devices, and combines device security with authentication.

Learn more about the product below and see the product in action today – the first 100 users will get access to Device360 for free for a year.

Centralized visibility into vulnerabilities and misconfigurations

Maintaining device hygiene across an entire fleet of devices is complicated because device configuration drifts and every tool provides a different view into risk-related data. To solve this problem for IT and security administrators, Device360 provides:

• Overview of vulnerabilities and misconfigurations across your entire fleet of devices
• Central report to help track, assure, and prove device compliance
• Ability to drill down on risky devices to perform deeper diagnosis on device security posture

Real-time and scheduled device query with managed Osquery

Osquery is an open source instrumentation, monitoring, and analytics framework for Windows, macOS, and Linux using SQL commands. It allows users to gather data about those operating systems including device security configurations. However, Osquery on its own can be time-consuming to maintain and manage and most companies also don’t have in-house expertise.

Device360 extends Beyond Identity’s device trust capabilities with:

• 45 ready-made device queries using Osquery – no SQL knowledge or Osquery experience needed
• Real-time device queries so you can have the most accurate and up-to-date information about your inventory
• Scheduled queries that run automatically on your preferred schedule so you can go beyond point-in-time checks to understand risk over time and ensure continuous endpoint security

Visibility over unmanaged devices

Endpoint security solutions today often face tremendous challenges getting users to adopt them on unmanaged endpoints. Employees, contractors, partners, and consultants often don’t want an endpoint agent on their personal devices and for good reason.

Device360 solves this challenge by combining privacy-preserving endpoint security assessments with authentication in a lightweight Authenticator. The Beyond Identity Authenticator is not an MDM or EDR and does not ask the end-user to hand over administrative privileges to their devices. This means that the Beyond Identity Authenticator cannot remotely wipe devices or make changes on the end-user’s device.

Additionally, the application is available for download on any device with the ability for end-users to enroll by themselves easing the administrative overhead of deployment.

Test zero trust access policies

Device trust is important in service of zero trust authentication because it gives organizations controls over access enforced at time of authentication. However, until an end-user authenticates, it is not clear how a security policy will affect them – this is especially true for complex policies with nested logic.

To help administrators understand the impact of access policies, Device360 enables policy simulation so you can test out policy without impacting user authentication in production.

Enforce device security compliance at time of authentication

Getting visibility across your device inventory is only the first step. Visibility without action is like having a map without actually going on drive.

Beyond Identity’s core platform, Secure Workforce, in conjunction with Device360 allows you to enforce device security compliance at time of authentication. Instead of just knowing a device is out of compliance, you can actually block it from authenticating into your corporate resources and applications.

Learn more about how Device360 and Secure Workforce work together to deliver the highest authentication assurance for identity and device.

‍