Endpoint refresh
Refresh the devices that need it. Keep the ones that are fine.
An age-based refresh calendar replaces devices that work and keeps devices that are wrong for their users. We score every managed device from an export you already know how to produce, give each one a verdict with the reason, and hand finance a savings figure it can defend.
- Initial report, after we receive your export
- 5 business days
- Nothing installed
- Read-only
- Production deployments since 2014
- 200+
- Teams
- Texas and Munich
What we do
Every managed device gets one of four verdicts from an Intune or Configuration Manager export: keep, redeploy, right-size or replace, with the reason next to it. Finance gets the savings as a floor with a sum check, and the redeploy pool as upside.
How it worksHow we engage
Start with the initial report from an export. If the findings justify it, the Verdict Assessment covers every device and a subscription keeps the verdicts current. Commercial terms are set in the statement of work.
How an engagement runsWho we did it for
The calendar said 56 percent of devices were due. The evidence said fewer than 1 percent needed replacing now.
From one enterprise fleet of tens of thousands of devices. Customer pilot data. Savings identified, not yet realized.
Read the anonymized pilot case studyWhat we want from you
A device inventory export. Tell us your fleet size and platform, and we reply within one business day with a secure upload link and the export steps.
Request your initial reportThe calendar gets both halves wrong
A refresh rule set by age replaces machines that are fine because they turned four, and keeps machines that crash every week because they are two. Finance pays for the first mistake and the service desk pays for the second.
- Every managed device is classified into a role class by what it is and what it runs, then scored on five signals.
- Each one gets a verdict, keep, redeploy, right-size or replace, with the reason written next to it.
- Savings come out as a floor with a sum check, so the headline always equals the lines beneath it.
- The redeploy pool is shown separately as upside, and the cost of doing nothing sits beside it.
Send an export, every device is scored, you get the initial report. Nothing is installed.
What one fleet showed
The calendar and the evidence disagreed by a wide margin, and the gap was money finance had already budgeted to spend.
- 56%
- of devices the calendar said were due
- <1%
- the evidence said needed replacing now
- $340
- per device identified on the floor, before any redeploy
- +$950
- per device more if the redeploy pool is executed
From one enterprise fleet of tens of thousands of devices. Customer pilot data. Savings identified, not yet realized. Read the anonymized pilot case study
Every device gets one of four verdicts
The reason is shown next to the verdict, every time, in words an endpoint lead would use.
Keep
The evidence says it is fine.
The device stays in service. If the calendar had it due this year, the purchase it avoids is recorded as identified savings.
- Healthy telemetry and a workload that fits the class.
- Either it is under its class life, or it is past it and no other signal agrees that it should go.
How it counts. Deferred purchase: the unit cost of the class, counted once, for every due device that stays.
Redeploy
Too much machine for its user. Someone else needs it.
The device moves to a seat that is due for a machine of its class. One purchase is avoided when the move is executed.
- More machine than its user has run in the last 180 days.
- A due seat elsewhere in the fleet matches its class.
How it counts. Redeploy pool: the unit cost of the seat it fills. Shown separately as upside and never added to the floor, because the move has to happen first.
Right-size
Due, and the next one should be smaller.
The device is due, and its replacement is bought in the class the user actually needs. The price difference is recorded.
- Due for refresh by age against class life.
- Bought as a bigger class than the user has ever needed, by application and GPU evidence.
How it counts. Avoided wrong-size purchase: the unit cost of the bought class minus the unit cost of the class the user needs.
Replace
Due, and the signals agree.
Replace now. No savings are claimed on this cohort, and the report says what it will cost to leave it in service.
- Due, and at least one other signal agrees: reliability, measured performance or Windows 11 readiness.
- Or a failure that no other verdict can absorb, such as a device that cannot take Windows 11 and has no redeploy target.
How it counts. None. The cohort appears in the cost of doing nothing instead, at the support cost of an aging device.
From export to report in three steps
The first step is a file your endpoint team already knows how to produce. The readout happens within five business days of receiving it.
Send an export
A device inventory export from Intune or Configuration Manager, or a read-only connection. Endpoint analytics adds depth if you have it. Nothing is installed on any device.
Every device is scored
Each device is classified into a role class by hardware and application evidence, then scored on age against class life, workload fit, measured performance, reliability and Windows 11 readiness.
You get the initial report
The verdict split by class, identified savings with the sum check, the redeploy pool separately as upside, calendar against evidence, the cost of doing nothing, Windows 11 readiness and top findings, with sample device rows and a 30-minute readout.
What the initial report contains
Delivered as a PDF within five business days of receiving your export. For fleets of 1,000 managed devices and up. Smaller fleets can still ask, and we will tell you if the numbers are too thin to be useful.
- The verdict split for your fleet
- How many devices to keep, redeploy, right-size and replace, by device class.
- Identified savings as a floor
- Deferred purchases, avoided wrong-size purchases and support hours removed, with the sum shown. The redeploy pool is shown separately as "up to" upside.
- The calendar against the evidence
- Devices due this year by your refresh rule, next to the devices the evidence says need replacing now.
- The cost of doing nothing
- Windows 10 Extended Security Update exposure if any Windows 10 devices remain, at the cumulative Microsoft price, and the aging devices you would keep in service, priced from your own service desk data.
- Windows 11 readiness count
- How many devices can take Windows 11 today, how many cannot, and how many still run Windows 10.
- The top findings worth acting on
- In plain words. For example, the engineering workstations that have run office work only for six months.
- A 30-minute readout call
- With your endpoint lead and your budget owner, walking the numbers and the assumptions behind them.
How we engage
Start with the initial report from an export. If the findings justify it, the Verdict Assessment covers every device and the plan to act on it, and a subscription keeps the verdicts and the ledger current. Commercial terms are set in the statement of work.
Initial report
Verdict split, savings floor with its sum check, redeploy pool, calendar against evidence, cost of doing nothing, Windows 11 readiness, top findings and a 30-minute readout. For fleets of 1,000 devices and up.
Verdict Assessment
Every device with its verdict and reason, the plan by quarter, assumptions checked against your prices and labor rates, and an analyst-checked readout for finance.
Subscription
Scoped by fleet size and sources. Quarterly re-verdict in export mode, continuous in connected mode, and the ledger that turns identified savings into banked ones.
Included in every subscription
- Verdict engine with the four cohorts
- Refresh plan by quarter
- Savings floor and upside
- Savings ledger from identified to banked
- Sourced and tunable assumptions
- Quarterly re-verdict in export mode, continuous in connected mode
- Unlimited viewers, three admin seats
The honesty rule
We are paid the same whether you keep or replace, and we sell no hardware. If the identified savings floor does not justify a subscription, the assessment readout says so in plain words and we recommend you do not subscribe. You keep the assessment, the verdicts and the plan either way.
Built for everyone who owns the refresh decision
Finance, IT leadership and the endpoint team read the same report and argue about fewer things.
- Finance
For the CFO and the budget owner
You have a hardware line to cut and an age report that says half the fleet is due. The report tells you which devices you can safely keep, what that is worth, and what it costs to keep the ones that should go.
- Savings per cohort and per device, labeled identified until your team banks them.
- A sum check on every figure, so the headline always equals the lines.
- The redeploy pool shown separately as upside, never added to the floor.
- A ledger you can sign and bring to the next budget review.
- IT leaders
For the CIO and the head of workplace
You have been asked for a refresh plan that is better than a list of purchase dates. You get one by quarter, with a reason on every line, from the console you already own.
- The calendar and the evidence side by side, device by device.
- Windows 11 readiness and Windows 10 exposure in the same table as the refresh plan.
- Nothing new to roll out, no agent, no write access to the tenant.
- A plan procurement can phase and the service desk can staff.
- Endpoint teams
For the endpoint lead
You know which machines are tired and which ones were bought for a job their user never had. Send the export and get that knowledge written down, device by device, with the reason next to each verdict so you can defend it.
- Intune or Configuration Manager export, or a read-only connection.
- Every device classified and scored. Unclassified stays unclassified, never defaulted.
- The reason next to every verdict, in words you would use yourself.
- Re-run each quarter, or continuously when connected.
A sneak peek at the report
We built one for a fictional engineering company with 7,400 managed devices so you can see the format before you send anything. Every number on it is computed from the fictional fleet and labeled as such.
- Due by the calendar
- 4,03054.5 percent of the fleet
- Replace now, by the evidence
- 2343.2 percent of the fleet
- Identified savings, floor
- $2,574,28434.6 percent of the $7,432,000 the calendar asked for
- Redeploy pool
- up to $1,996,700upside, kept out of the floor
We earn nothing when you buy a device
- We sell no hardware and take no referral fee from anyone who does.
- We read what your management platform already knows. Nothing is installed on any device.
- We are paid the same whether you keep or replace.
- When the savings are too small to pay for the service, we say so before you buy anything.
Guides for the refresh decision
Refresh cycles, Windows 10 ESU costs, inventory exports, redeploy pools and right-sizing, written by people who have run the cycle.
All 10 guides- Hardware refresh cycle: three, four or five years, and how to decide per deviceThe cycle length debate has a 2026 answer from the benchmarks, and it is less useful than it looks. The better question is which devices in your fleet the rule gets wrong, and your inventory can answer that today.
- How often should businesses replace computers? A per-device answer for 2026Written for the owner or finance lead who has been handed a quote for the whole fleet. The benchmarks give a range and Windows 10 gives a deadline. Four questions per device tell you which machines actually need the money.
- Windows 10 ESU cost in year two and three, and when paying it beats replacingYear two of commercial Windows 10 Extended Security Updates started on 14 October 2026. Here is what each device costs now, what it costs through 2028, which devices get it free, and a per-device rule for ESU against upgrade against replace.
- How to export your device inventory from Intune, step by stepThe All devices export is the file most refresh decisions start from, and it leaves out the two columns people expect. Here is the documented path, what you get, where processor and memory actually live, and how a read-only app reads the same data through Microsoft Graph.
Questions budget owners and IT leaders ask
Is there any obligation after the initial report?
No. You send an export, we send back a PDF within five business days and walk you through it on a 30-minute call. Whether to go on to the Verdict Assessment or a subscription is your call after the readout.
How is the savings number computed?
Cohort by cohort, from your own device list and prices you can edit. Deferred purchases, avoided wrong-size purchases and support hours removed are added up, and the headline equals that sum. The redeploy pool is shown separately as upside. Every assumption carries its source.
What do you need from us?
A device inventory export from Intune or Configuration Manager, or a read-only connection. Endpoint analytics adds depth if you have it. User names and email addresses can be removed from the export before you send it.
Do we need Intune Advanced Analytics or Endpoint analytics?
No. Either one adds performance and reliability depth, and the report says which signals it had. The standard Intune export provides enrollment dates and basic inventory. Windows 11 readiness needs the readiness report or additional hardware inventory. Workload fit needs application evidence. We identify missing signals in the report. Microsoft added Advanced Analytics to Microsoft 365 E3 from July 2026, so many tenants already have the resource performance report without buying anything.
Where does our data live?
In a US or EU region we operate, as you choose, or in your own Azure tenant behind your own identity provider. Read-only, no agent, and a data processing agreement signed before anything is sent if you want one.
What happens after the initial report?
The initial report is what you get first. The Verdict Assessment adds every device with its verdict and reason, the refresh plan by quarter, assumptions checked against your own prices and labor rates, and an analyst-checked readout for finance. A subscription keeps the verdicts and the ledger current. Commercial terms for the assessment and the subscription are set in the statement of work.
What if the identified savings are small?
The initial report shows the floor, and the assessment readout says in plain words whether it justifies a subscription. If it does not, we recommend you do not subscribe. You keep the report either way.
Is this only for Windows fleets?
Windows fleets managed in Intune or Configuration Manager get the deepest signals, because that is where the inventory and analytics are richest. Jamf and Workspace ONE exports work for age, class and workload fit, and we tell you which signals the report could not score.
Get the refresh findings for your fleet
Send us the form and we will reply within one business day with a secure upload link and the export steps for your platform. The PDF follows within five business days of the export.