Continuous Endpoint Configuration Scanning Explained

Cyrisma continuously evaluates the configuration posture of every endpoint with the Cyrisma agent installed. Findings update automatically as endpoint configurations change. You do not need to create, configure, or schedule a separate configuration scan.

How It Works

When a Cyrisma agent is installed and begins communicating with the Cyrisma platform, the endpoint is automatically included in Continuous Endpoint Configuration Scanning.

The agent captures a snapshot of the system information required for configuration analysis and securely sends it to the Cyrisma platform.

Cyrisma analyzes the snapshot server-side by comparing the endpoint’s configuration with the applicable security benchmark and level. When the agent is installed, Cyrisma selects an initial configuration profile based on the endpoint’s detected operating system.

What It Evaluates

Depending on the operating system and applicable benchmark, Endpoint Configuration Scanning may evaluate:

• Operating system security settings

• Local policies and configuration values

• Authentication and access controls

• Logging and auditing settings

• Service and feature settings

• Encryption and other system protections

These findings help identify insecure settings, configuration drift, and gaps in system-hardening practices.

Coverage follows the Cyrisma agent. New endpoints are included automatically after the agent is installed and begins communicating with the Cyrisma platform. Findings reflect the endpoint’s configuration in the latest processed snapshot.