Skip to main content
Approved Software manages software compliance by comparing the applications actually installed on your endpoints against an inventory of explicitly approved entries.

Purpose

The module establishes an allow-list — a baseline of authorized software for the endpoints across your infrastructure. When endpoint agents collect their software inventories, Kikimora cross-references what it finds against your approved entries and surfaces anything unauthorized, unexpected, or non-compliant.

Key concepts

  • Approved software — an application explicitly permitted in your organization. Each entry has a name, an optional version, and its matching configuration.
  • Unapproved software — an application detected on an endpoint that matches nothing in the baseline.
  • Endpoint scoping — compliance data can be read globally across the fleet or narrowed to one endpoint.
  • Matching criteria — matching runs on name alone, or on name and version together when Compare by name and version is enabled.