Methods and systems for controlling access to computing resources based on known security vulnerabilities

A non-transitory computer readable medium containing computer instructions for controlling the operation of an endpoint, comprising:

• providing a user interface, at a computing system remote from the end point, configured to allow configuration of a plurality of policies;
• maintaining the plurality of policies in a data store on the computing system;
• identifying, from the plurality of policies, a plurality of operating conditions on the endpoint to monitor;
• configuring one or more software agents on the endpoint to monitor the plurality of operating conditions;
• receiving, across a network, at the computing system, status information about the plurality of operating conditions on the endpoint gathered by the one or more software agents;
• determining, by the computing system, a compliance state of the endpoint based on the status information and a plurality of compliance policies in the data store;
• and
• initiating, by the computing system, based on the compliance state, an action identified in at least one rule in the data store, wherein the action is carried out by a processor on the endpoint.

A system for controlling the operation of an endpoint, comprising:

• a user interface, provided by a computing system remote from the end point, configured to allow configuration of a plurality of policies;
• a data store, at the computing system, that contains the plurality of policies;
• one or more software agents on the endpoint configured to monitor a plurality of operating conditions identified in the plurality of policies;
• and
• one or more hardware processors at the computing system configured to:
• receive, across a network, status information about the plurality of operating conditions on the endpoint gathered by the one or more software agents,
• determine a compliance state of the endpoint based on the status information and a plurality of compliance policies in the data store, and
• initiate, based on the compliance state, an action identified in at least one rule in the data store, wherein the action is carried out by the hardware processor on the endpoint.