Endpoint integrity is the assurance that a device is running only authorized software, with trusted settings and no unauthorized changes. In practice, it means the endpoint has not been tampered with at the boot, operating system, application, or device-control layer. On a Windows-based ATM, that can include the local image, security agents, middleware, and any software that talks to the cash dispenser.
This matters because many attacks succeed only after the attacker gains control of the endpoint itself. If integrity checks are weak, malware, a rogue maintenance tool, or altered boot media can let an ATM obey attacker commands instead of legitimate transaction logic. Defenders protect endpoint integrity with secure boot, signed and known-good images, application allowlisting, restricted maintenance access, file and configuration monitoring, and logs that reveal unexpected reboots or software changes. Strong endpoint integrity turns the machine from a soft target into a verifiable system.