Security dashboard

Live signal compliance across devices (grouped by fingerprint).
Overview
Counts represent device groups (fingerprint) so re-enrollments don’t inflate totals.
Device groups
Compliant
Non-compliant
Expired
Unknown
Revoked
Signal compliance distribution
Based on server-side decision (complianceStatus + expiresAt).
Effective profile sources
Shows where the current profile assignment came from (default vs group override, etc.).
At-risk devices
Prioritized: Expired → Non-compliant → Unknown. Revoked is excluded.
Recent scans
Most recent active enrollments per device group.