Analyzing risk for devices within a managed environment

A system comprising:

• a computer system including at least one processor and a memory, and configured to perform operations including:
• receiving, from a network, a provisioning request from a device including a device identifier, device credentials, and a current firmware revision, wherein the device is a peripheral device, wherein the provisioning request is received by the server after being sent by the device upon being first connected to another device within a managed environment, and wherein the provisioning request indicates that the device is newly connected to the managed environment;
• verifying the authenticity of the device based at least in part on the device identifier and the device credentials;
• determining a risk score associated with the device based at least in part on the device identifier, the device credentials, the current firmware revision of the device, and on whether any known vulnerabilities are associated with the device;
• and
• in response to the risk score, implementing a policy to be applied to the device, wherein the policy includes a restriction on use of the device outside of a virtual private network (VPN).

An article of manufacture comprising a non-transitory, computer-readable medium having computer-executable instructions thereon that are executable by a processor of a computer system to perform operations comprising:

• receiving, from a network, a provisioning request from a device including a device identifier, device credentials, and a current firmware revision, wherein the device is a peripheral device, wherein the provisioning request is received by the server after being sent by the device upon being first connected to another device within a managed environment, and wherein the provisioning request indicates that the device is newly connected to the managed environment;
• verifying the authenticity of the device based at least in part on the device identifier and the device credentials;
• determining a risk score associated with the device based at least in part on the device identifier, the device credentials, the current firmware revision of the device, and on whether any known vulnerabilities are associated with the device;
• and
• in response to the risk score, implementing a policy to be applied to the device, wherein the policy includes a restriction on use of the device outside of a virtual private network (VPN).