Security posture and centralized antivirus

KairosLink surveys the security posture of every managed computer and shows the protection status of the whole fleet from a single per-customer view. The survey is a read-only script: it changes nothing on the computer, writes nothing to disk and returns the status over standard output. From that data, the panel computes a score per computer and a traffic light, and centralizes Microsoft Defender management.

What is surveyed on each computer

Each survey checks the status of the antivirus, the firewall, BitLocker disk encryption, pending updates, local administrators, RDP access, the presence of SMBv1, User Account Control (UAC) and the computer's local accounts. Each check is surveyed in isolation: if a cmdlet does not exist or the operating system is old, that check is marked as not evaluated instead of punishing the score. Each finding is classified by severity and the computer keeps its survey history.

A score per computer and per customer

Each computer gets a score with a color band (green, yellow, red) and the customer shows an aggregate score. The aggregate is an average weighted by computer criticality: a Domain Controller or a server weighs more than a workstation, and computers that have not been surveyed are left out of the average. The survey can be triggered on demand for one computer or for all the customer's online computers; results appear as the agent responds. It is the continuous reading that complements the Active Directory assessment: one looks at each computer's status, the other audits the domain.

Centralized Defender antivirus

The antivirus module gathers the Microsoft Defender status of every computer: real-time protection, signature version and age, tamper protection and the threats detected and quarantined. From there you can launch batch actions on one or several computers: update signatures, quick scan, full scan and remove from quarantine.

Detects third-party antivirus

If a computer has a third-party antivirus as its primary engine, KairosLink detects it and marks Defender as passive. In that case the panel does not offer Defender scan or update actions, because they would conflict with the other product. The third-party antivirus status (active, outdated signatures) is still reflected in the view.

Frequently asked questions