Device Zero Trust
Device trust built on real device posture
Before you trust a device, know its state. trio.so checks every device against your controls, gives it a risk score from 0 to 100 with the reason, brings in Microsoft Defender alerts, and asks people to sign in again when their device falls out of compliance.
trio.soHarbor & PineEndpoint Management ›DevicesDevices
- Open critical vulnerability · CVE-2026-21874
- Open high vulnerability · CVE-2026-20417
- Fails the check: no passcode or screen lock within 15 minutes
A password says nothing about the laptop
Healthy logins, unhealthy devices
A correct password and MFA prompt can still come from a laptop with encryption off and months of missing patches.
Device health lives elsewhere
Compliance, vulnerabilities and security alerts sit in different tools from the people who use the device.
Trust checked once
A session trusted in the morning stays trusted after the device fails a check at lunch.
How it works
How device trust works in trio.so
- Check every deviceEach device is checked against your controls, from disk encryption and firewall to screen lock, OS version and Secure Boot.
- Score the riskEvery device gets a 0 to 100 risk score, with the reason shown, such as an open high severity vulnerability or no passcode.
- Check again when it changesWhen a device's compliance changes, trio.so asks the person to sign in again.
Controls
Every device checked against your controls
Compliance results come from the controls that matter on each platform, and every device shows how many pass and fail.
- WindowsDisk encryption, real time protection, firewall, screen lock, USB storage block, Secure Boot.
- macOSFileVault, firewall, passcode, screen lock, Gatekeeper, System Integrity Protection.
- Linux, Android and iPadOSDisk encryption and Secure Boot on Linux; passcode and screen lock on Android and iPadOS.
Risk
A risk score with the reason
The score goes from 0 to 100, low to critical, and always shows what's behind it, so you know what to fix first.
Defender
Microsoft Defender alerts next to each device
If you use Microsoft Defender for Endpoint, trio.so shows each device's Defender risk, exposure, sensor health and open alerts, matched to the devices you manage. trio.so only reads from Defender.
People and devices
From a person to every device they use
Open anyone's record to see all their devices and the state of each one, next to their apps, groups and MFA.
Device trust at a glance
- 0 to 100
- risk score per device
- 5
- platforms checked
- Defender
- alerts per device, read only
- Reauth
- when compliance changes
Related