Calculator · Interactive tool

Endpoint Maturity Calculator

How mature is your Windows endpoint management? Answer six quick questions to see where you sit today - from manual and reactive to automated and auditable - and what to tackle next.

Most teams sit somewhere between "we fix things by hand when they break" and "policy is enforced and logged on every device." This calculator places you on that scale and highlights the gaps worth closing first.

Each answer maps to a real capability - central enforcement, automatic re-apply, USB control by device class, offline fail-closed policy, audit-ready evidence, and role-based access. Your score is worked out entirely in your browser.

1. How do you apply security settings to your Windows PCs today?
  • Manually, on each PC, one at a time
  • Scripts or Group Policy we maintain ourselves
  • A management tool, but coverage is partial
  • One central console that enforces policy on every device
2. When a setting is changed or removed on a device, what happens?
  • We usually find out only when something breaks
  • We catch it during occasional manual checks
  • We get alerted, then re-apply it by hand
  • Policy re-applies automatically and the change is logged
3. How do you control USB storage and removable media?
  • No control - any USB drive works
  • We ask staff not to use them
  • Blocked on some machines
  • Enforced by policy across the fleet, by device class
4. What protects laptops when they are off the network?
  • Offline devices are effectively unmanaged until they reconnect
  • They keep their old settings, but nothing is actively enforced
  • Some protections stay on, but not by design
  • Policy fails closed after a set number of offline days
5. How would you prove what was configured, and when, for an audit?
  • We'd have to reconstruct it manually
  • Screenshots and spreadsheets
  • Exports from a tool, assembled by hand
  • A tamper-evident audit log plus exportable evidence packs
6. Who can change endpoint policy in your organization?
  • Anyone with local admin
  • A few people sharing one login
  • Named admins, but everyone has the same level of access
  • Role-based access with least privilege (owner / admin / helpdesk / auditor / viewer)

This is a quick self-assessment, not a formal security audit. Your answers and score stay in your browser - nothing is sent to a server or saved.

Complete the questions above to calculate your endpoint maturity entirely in your browser.