Managing and revoking devices

Every enrolled device shows on the Devices screen with its last check-in time and current findings. A device that goes quiet for too long is flagged on its own — that silence is itself a finding, not treated as "all clear."

How to use it

• Revoke a device at any time from the Devices screen — its credential stops working immediately, and it is removed from active management.
• Rotate a device's secret if you suspect it leaked, without losing its enrollment or history.
• When someone assigned to a device is removed from the organization, their devices are revoked automatically — offboarding a person offboards their laptop with them, without a separate step to remember.