---
module: aria.device-posture
title: Device Posture
tab: Customer
order: 10
audience: customer
---

Device Posture gives you a per-device security health check across your fleet. Use it to spot machines that are out of compliance — unencrypted disks, outdated operating systems, or images that have drifted from your approved build.

## 🔍 What you can do here

1. **Browse devices by institution** — devices are grouped under a collapsible institution header. Click a header to expand or collapse its list. Each header shows the device count, an average score, and a **⚠ below 80** flag if any device needs attention.
2. **Filter the list** — open the **Filters** sidebar on the left and narrow by:
   - **Score** — *Low (<50)* or *Below Good (<80)*.
   - **OS Status** — *EOL*, *Supported*, or *Unknown*.
3. **Clear filters** — active filters appear as chips at the top; remove one with its **×**, or use **✕ Clear all** in the sidebar.
4. **Open device detail** — click any row (or its **Detail** button) to slide open a panel with the full breakdown for that device.
5. **Stay current** — the screen auto-refreshes every 60 seconds. Toggle **Auto-refresh** off if you prefer, or hit the **↻** button to refresh right now.

## 📊 What you're looking at

Each device row shows:

- **Device** — the device's agent ID.
- **OS Version** / **OS Status** — the operating system and whether it's still *Supported* or has reached end-of-life (*EOL*).
- **Disk Enc.** — whether disk encryption is on (✓) or off (✗).
- **Audit Policy** — whether the device meets the audit policy (✓/✗).
- **Whitelist** — whether software whitelisting is enabled (✓/✗).
- **Image** — **Match** if the device matches your approved (gold) image, or **Drift** if it has changed.
- **Score** — an overall posture score from 0–100 (green = good, amber = needs review, red = poor).
- **Last Check** — when the device last reported its posture.

## 🗂️ Device detail panel

Opening a device shows its big **Posture Score** plus each check that affects it — Disk Encryption, Audit Policy, Software Whitelist, OS Version, and OS EOL Status. Failing checks display the point penalty they cost (for example, a device with encryption off shows **−25**). The panel also shows the approved and current image references so you can see exactly where a device drifted, along with the last posture check and record update times.

> **Good to know:** A higher score is better — anything below 80 is worth a look. If a device shows no posture data, it simply hasn't reported yet through the ARIA signals module.
