1. A computer program product embodied in a non-transitory computer readable medium that, when executing on one or more computers, performs the steps of: a. assessing a metadata factor associated with metadata of code using an endpoint security facility to determine a compliance state of said code representing a state of compliance with an enterprise policy related to a risk posed by the code; b. at least one of assigning and adjusting a security sensitivity factor based at least in part on said compliance state of said code; c. repeating step (a) and step (b) at least once before executing the code, and least once while executing the code, and at least once after executing the code; and d. providing a remote security facility with an indicator of how to treat said code, wherein said indicator is based on said security sensitivity factor, wherein the indicator includes an indication of at least one of how aggressively to monitor said code and how aggressively to enforce a policy related to said code, and wherein the indicator includes a level of monitoring for the code including a frequency for further scans of the code.