Application whitelisting is deployed to stop malware and other unauthorised software (which brings unmanaged vulnerabilities and licensing exposure) from installing or running. It works best on managed hosts whose users lack the privileges to add applications or disable the agent: kiosk workstations limited to a browser, laptops with every approved application preinstalled, and servers that malware could reach from other hosts such as administrators' laptops.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.