Position

Invinsense Unified Endpoint Control (UEC) is the endpoint application-control and endpoint-risk workspace of Invinsense XDR. It combines policy enforcement, durable endpoint telemetry, software inventory, detection, response, compliance and AMTD exposure context.

Core capabilities

Capability	Highlights
Cross-platform fleet	Windows, macOS, Linux and Android inventory context
Application control	WDAC base/supplemental policy, artifacts, audit/enforce pair
Endpoint intelligence	Events, file identities, software catalog, signature posture
Detection	Alert rules, Sigma/YARA packs, UEBA, sandbox detonation
Response	Containment, domain blocks, JIT, forensics, live response
Hardening	Defender baselines, host firewall, macOS security, CIS benchmarks
Risk	AMTD vulnerabilities, misconfigurations, controls, identity, AI usage, exfiltration
Governance	Immutable audit, roles, group scoping, multi-tenancy, reports

Architecture at a glance

• Next.js 16 console
• ASP.NET Core / .NET 10 API and policy services
• Rust Windows/Linux sensor components and Swift macOS sensor
• PostgreSQL 18.3
• ClickHouse 26.3
• NATS JetStream 2.14
• Redis 8.6

Safe adoption path

Deploy agents → inventory → audit base policy → tune with discovery
→ enforce Ring 0 → expand rings → detect/respond → prove compliance

Operational strengths

• Durable local event buffering with acknowledged delivery
• Target-specific policy artifacts
• Explicit ring-based rollout and convergence reporting
• Honest module/coverage state
• Full audit trail with redaction modes
• Light and dark operator themes

Screenshots

See the screenshot catalogue for every captured console page.