Fleet hygiene is the overall health of an organization’s devices: whether laptops, phones, tablets, and other endpoints are inventoried, updated, configured, and maintained properly. Good fleet hygiene means devices are running supported operating systems, security patches are applied quickly, encryption and screen locks are enabled, and old or unused hardware is retired before it becomes a liability.
It matters because attackers often target the weakest endpoint in a fleet. A single unpatched phone or neglected laptop can provide a foothold for credential theft, malware, or lateral movement into cloud and internal systems. Defenders improve fleet hygiene with mobile device management, automated patching, asset tracking, compliance checks, and enforced baselines. In practice, strong fleet hygiene reduces exposure, makes incidents easier to contain, and helps security teams keep pace with changing software support windows.