How are security controls validated for thousands of endpoints in a large scale organization.

After deploying security controls, how to do a post validation on all the endpoints?
Any off shelf tools / product suggestions are welcome if it helps answer with real life problems.

controls cybersecurity endpoints large life organization problems product real scale security security controls tools validation