Skip to content
Sign in

Software Risk & Hygiene

Use this when you need a single view of software that is out of support, not meant for the business, or still installed after it was deprecated. The report estimates an annual exposure and lists the products behind it.

It is built from SIM. The card carries a SIM badge. Support dates in the inventory are on Spot end-of-support software. This page is the written exposure.

  1. Click Reports, then NEO Reports.
  2. Click Software Risk & Hygiene.

Software Risk and Hygiene, with financial risk and the headline counts

Financial risk is an annual exposure, split into four parts:

PartWhat it covers
Oracle Java licensing liabilityOracle Java installed in the estate.
Unsupported softwareEnd-of-support installs.
Shadow IT and commercial freemiumSoftware whose free license is not for business use.
Workforce productivity lossGames, streaming and other distractionware on work devices.

Estimation Methodology is a collapsible note under those figures. Open it to see how each figure was estimated. Treat the amounts as a way to rank the work, and check the products in SIM before you act.

Tiles under the total name the same themes as counts: Critical infrastructure (servers at end of support), Active threats, Workstation risk, Productivity loss, Financial liability (Oracle Java) and Shadow IT / audit (commercial use).

Executive summary is the short narrative and the first remediation to take.

Software Hygiene Analysis is a set of collapsible tables. Columns are Vendor, Product, Installs, Description and Pricing. Download a table for one row per device, with the user. See Using reports.

TableWhat it lists
Digital Debris & Deprecated TechDiscontinued products still installed.
Free For Personal UseFree software that is not licensed for commercial use.
Unauthorized Admin ToolsRemote access and other high-privilege tools.
DistractionwareGames, streaming and similar installs.
Shadow Cloud & AIUnmanaged cloud, messaging and AI tools.

An Oracle Java table follows, with products such as the JDK and the Java SE runtime.

A software hygiene table, with vendor, product, installs and pricing

Lifecycle & Technical Debt shows when support ends.

  • Support expiry timeline: expired, expiring this year, expiring next year.
  • Top vendor risk concentration: which vendors account for the most of that install count.
  • Critical Infrastructure at Risk: servers, with Risk, Vendor, Product, Version, Installs, Support end, Days, Status and Action.

The device and version rows are on Spot end-of-support software. Products that should not be in the analysis at all can be excluded.