# EDR Status Discovery

**Categories:** Security

Maintains endpoint protection coverage by continuously detecting agent issues such as inactive installs, outdated versions, stale scans, or active threats.

- Runs periodic checks on EDR agent status across all managed endpoints
- Identifies devices with missing, disabled, or outdated agents
- Distinguishes newly flagged endpoints from those already being tracked
- Notifies device owners and the security team about coverage gaps
- Opens a ticket for IT to restore protection
- Auto-resolves once the agent returns to a healthy state