# Security Overview

> Read the Security Overview tab: fleet-wide antivirus, encryption, firewall, update, reboot, driver, patch, and local administrator status in one view.

Source: https://docs.capaone.com/capaone/security-monitor/security-overview/  
Product: CapaOne — a separate CapaSystems product; do not apply this page to any other.

The **Overview** tab under **Windows → Security** shows the security configuration of all your
Windows endpoints in one view. Each widget summarizes one area, so you can see where your fleet
is weakest and open the endpoints that need attention.

For vulnerabilities and CVEs, use the other tabs on the same page. See
[Security Dashboard](/capaone/security-monitor/security-dashboard/).

![Security Overview tab with the Antivirus, Encryption, Firewall, Windows Update, Pending Reboot, Driver Compliance, Patch Percentage, Average Security Score, and Local Administrators widgets](/attachments/capaone/vulnerabilities-overview.png)

## Security configuration widgets

The **Antivirus**, **Encryption**, **Firewall**, **Windows Update**, and **Pending Reboot** widgets
show how many endpoints have each security score: **Good**, **Fair**, **Poor**, or **None**.

| Widget | What it shows |
|---|---|
| **Antivirus** | Endpoints with antivirus enabled and up to date. |
| **Encryption** | Endpoints encrypted with Microsoft BitLocker. |
| **Firewall** | Endpoints with the firewall enabled. |
| **Windows Update** | Endpoints fully updated with Windows patches. |
| **Pending Reboot** | Endpoints with a pending reboot. |

The percentage in the center of each chart is the share of **Good** and **Fair** endpoints out of
all scored endpoints. Endpoints with **None** are left out of the calculation.

For how each score is decided, see
[Security Score Calculation](/capaone/security-monitor/security-score-calculation/).

## Driver Compliance and Patch Percentage

- **Driver Compliance** shows the percentage of endpoints with up-to-date drivers, out of all
  endpoints with supported hardware. Endpoints with unsupported hardware are left out.
- **Patch Percentage** shows the share of application patches that are up to date. Updates that
  are available, pending, in progress, or failed count as not up to date.

## Average Security Score

**Average Security Score** is the average of the percentages in the Antivirus, Encryption,
Firewall, Windows Update, Pending Reboot, Driver Compliance, and Patch Percentage widgets.

| Rating | Average score |
|---|---|
| **Good** | 90% and above |
| **Moderate** | 45% to 89% |
| **Critical** | Below 45% |

## Local Administrators

The **Local Administrators** widget compares the local administrator accounts and groups on your
endpoints with a list of administrators you've approved. It shows:

- The share of endpoints that are **Compliant**, meaning every local administrator on the endpoint
  is approved. Endpoints with no local administrators count as compliant.
- **Unapproved admins**: the number of local administrator memberships that aren't on your approved
  list.
- **Orphaned accounts**: the number of accounts that hold local administrator rights but whose
  user no longer exists.

Select the table icon to list endpoints with their number of administrators, unapproved
administrators, and orphaned accounts. Select the tune icon to manage the approved list. See
[Approve Local Administrators](/capaone/security-monitor/approve-local-administrators/).

## Drill down to endpoints

Click a segment in a chart to open the list of endpoints in that segment. From the list, open an
endpoint to see its security details. See
[Endpoint Security](/capaone/security-monitor/endpoint-security/).

Select the expand icon on a widget to view it in a larger size.