Orchestration of agent-based cybersecurity endpoint deployments

A computer program product embodied in a non-transitory computer readable medium for software deployment, the computer program product comprising code which causes one or more processors to perform operations of:

• installing a software agent on each endpoint device within a plurality of endpoint devices, wherein each software agent remotely manages a unique endpoint device within the plurality of endpoint devices, and wherein each software agent is communicatively coupled to an orchestration software running on a compute device;
• providing a software access, wherein the software access enables, on one or more endpoint devices within the plurality of endpoint devices, one or more third-party applications, and wherein the one or more third-party applications communicate with each software agent installed on the one or more endpoint devices;
• monitoring, by a first software agent installed on a first endpoint device within the one or more endpoint devices, an activity by the one or more third-party applications on the first endpoint device;
• sending, to the orchestration software, by the first software agent, a plurality of security information details, wherein the plurality of security information details includes the activity that was monitored;
• summarizing, by the orchestration software, the plurality of security information details from the first software agent;
• and
• taking an action, on the first endpoint device, wherein the action is based on the summarizing, wherein the action is initiated by the orchestration software, and wherein the action is performed by the first software agent.

A computer system for software deployment comprising:

• a memory which stores instructions;
• one or more processors coupled to the memory wherein the one or more processors, when executing the instructions which are stored, are configured to:
• install a software agent on each endpoint device within a plurality of endpoint devices, wherein each software agent remotely manages a unique endpoint device within the plurality of endpoint devices, and wherein each software agent is communicatively coupled to an orchestration software running on a compute device;
• provide a software access, wherein the software access enables, on one or more endpoint devices within the plurality of endpoint devices, one or more third-party applications, and wherein the one or more third-party applications communicate with each software agent installed on the one or more endpoint devices;
• monitor, by a first software agent installed on a first endpoint device within the one or more endpoint devices, an activity by the one or more third-party applications on the first endpoint device;
• send, to the orchestration software, by the first software agent, a plurality of security information details, wherein the plurality of security information details includes the activity that was monitored;
• summarize, by the orchestration software, the plurality of security information details from the first software agent;
• and
• take an action, on the first endpoint device, wherein the action is based on the summarizing, wherein the action is initiated by the orchestration software, and wherein the action is performed by the first software agent.