1. A method for managing software on one or more computing devices, the method comprising: identifying, by one or more computer processors, an instance of software installed on a computing device; determining, by one or more computer processors, a fingerprint corresponding to the instance of software installed on the computing device; determining, by one or more computer processors, a security risk associated with the instance of software installed on the computing device; identifying, by one or more computer processors, a software management policy for the instance of software based, at least in part, on the determined fingerprint, the determined security risk associated with the instance of software, and a designated purpose of the computing device; identifying, by one or more computer processors, a second computing device that includes a second instance of software that has a similar fingerprint to the determined fingerprint corresponding to the instance of software installed on the computing device; identifying, by one or more computer processors, a second software management policy on the second computing device that includes the second instance of software based, at least in part, on the security risk; in response to identifying the second software management policy, enforcing, by one or more computer processors, the second software management policy on the second instance of software; determining, by one or more computer processors, the security risk associated with the computing device based, at least in part on, on one or more instances of software installed on the computing device; and determining whether a second instance of software can be added to the computing device based upon the security risk associated with the computing device.