Device Posture
Device posture is the security state of a device at the time of authentication or access evaluation.
- Synonym
- Endpoint Posture
Definition
Device posture refers to the observed security condition of an endpoint at the moment an authentication or access decision is made. Posture signals may include operating system version, patch level, encryption status, EDR presence, jailbreak or root detection, screen lock status, certificate presence, configuration compliance, browser health, or enterprise management state. Device posture is often used alongside identity factors and contextual signals to determine whether a login should be accepted, challenged, restricted, or denied. It is particularly important in conditional access and zero trust designs.
Why it matters
A legitimate identity using an unhealthy or compromised device may represent a higher risk than a stronger authentication flow alone can offset.
The Ariovis perspective
Context improves an access decision only when the signals are reliable, understood and governed. Adding more signals does not automatically produce a better policy.
Related services
Common pitfalls
- Many teams collect posture data but fail to define clear policy consequences when posture is weak, outdated, or unverifiable.
Standards and protocols
- NIST SP 800-207
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.