reduce risk of endpoint attacks