I can't remember the names of any of these companies, but I know there's a healthy ecosystem of "endpoint management" businesses that sell essentially this serv

I can't remember the names of any of these companies, but I know there's a healthy ecosystem of "endpoint management" businesses that sell essentially this service (among other things, like endpoint security monitoring/EDR). The downside is then that you're running an ultra-privileged agent on each developer machine, with no particular guarantee that said agent is more secure than any given piece of software despite having way more power. Edit: Remembered one: you could use something like Kolide[1], which more or less wraps osquery[2] to enumerate applications and their versions, and push out warnings asking users to upgrade. [1]: https://www.kolide.com/ https://www.kolide.com/ [2]: https://www.osquery.io/ https://www.osquery.io/