1. A method comprising: identifying a first management controller of a first computing device on a network, the first management controller implemented in hardware of the first computing device and independent of a central processing unit (CPU) of the first computing device; querying the first management controller for attributes of the first computing device; receiving, from the first management controller, data identifying one or more attributes of the first computing device; and implementing a security policy of the network on the first computing device based on the one or more attributes.