Software Risk & Hygiene
Use this when you need a single view of software that is out of support, not meant for the business, or still installed after it was deprecated. The report estimates an annual exposure and lists the products behind it.
It is built from SIM. The card carries a SIM badge. Support dates in the inventory are on Spot end-of-support software. This page is the written exposure.
Open the report
Section titled “Open the report”- Click Reports, then NEO Reports.
- Click Software Risk & Hygiene.
At a glance
Section titled “At a glance”
Read the exposure
Section titled “Read the exposure”Financial risk is an annual exposure, split into four parts:
| Part | What it covers |
|---|---|
| Oracle Java licensing liability | Oracle Java installed in the estate. |
| Unsupported software | End-of-support installs. |
| Shadow IT and commercial freemium | Software whose free license is not for business use. |
| Workforce productivity loss | Games, streaming and other distractionware on work devices. |
Estimation Methodology is a collapsible note under those figures. Open it to see how each figure was estimated. Treat the amounts as a way to rank the work, and check the products in SIM before you act.
Tiles under the total name the same themes as counts: Critical infrastructure (servers at end of support), Active threats, Workstation risk, Productivity loss, Financial liability (Oracle Java) and Shadow IT / audit (commercial use).
Executive summary is the short narrative and the first remediation to take.
Software hygiene
Section titled “Software hygiene”Software Hygiene Analysis is a set of collapsible tables. Columns are Vendor, Product, Installs, Description and Pricing. Download a table for one row per device, with the user. See Using reports.
| Table | What it lists |
|---|---|
| Digital Debris & Deprecated Tech | Discontinued products still installed. |
| Free For Personal Use | Free software that is not licensed for commercial use. |
| Unauthorized Admin Tools | Remote access and other high-privilege tools. |
| Distractionware | Games, streaming and similar installs. |
| Shadow Cloud & AI | Unmanaged cloud, messaging and AI tools. |
An Oracle Java table follows, with products such as the JDK and the Java SE runtime.

Lifecycle
Section titled “Lifecycle”Lifecycle & Technical Debt shows when support ends.
- Support expiry timeline: expired, expiring this year, expiring next year.
- Top vendor risk concentration: which vendors account for the most of that install count.
- Critical Infrastructure at Risk: servers, with Risk, Vendor, Product, Version, Installs, Support end, Days, Status and Action.
What to do next
Section titled “What to do next”The device and version rows are on Spot end-of-support software. Products that should not be in the analysis at all can be excluded.