US Patent 11190537 Vulnerability management of disconnected endpoints

A first latest status of the one or more disconnected endpoints from a memory is retrieved. A set of predicted vulnerabilities for each of the one or more disconnected endpoints from the memory is retrieved. A set of preventive actions and policies associated with the set of predicted vulnerabilities to be performed when each of the one or more disconnected endpoints reconnects to the network is retrieved. The set of preventive actions and policies are retrieved from the memory. A determination is made whether at least one endpoint in the one or more endpoints not connected to the network reconnects to the network. If least one endpoint in the one or more endpoints not connected to the network has reconnected to the network, at least one preventive action from the set of preventive actions and policies on the at least one endpoint reconnected to the network is performed.