Techniques are disclosed for implementing dynamic endpoint compliance policy configuration. In one embodiment, a security service is provided that automates endpoint compliance policy configuration. A customer identifies its deployed client security products, and specifies the desired level of security. This security product and level information is used by the security service to generate endpoint compliance policies tailored to that customer's current network and/or security scheme. The security service can incorporate data obtained from early warning services that deliver timely and actionable security alerts into its policy generation process. In this way, the security service can provide endpoint compliance policies that protect its customers' machines from the very latest threats at any moment in time.