Managing Solution Agents

Greetings all, So I'm executing my first infosec programme (governance to operations). Based on some of the solutions I've chosen to deploy, agents must be installed for asset management, SIEM, and patch management, in addition to the endpoint security agent already installed. I know that the more applications running on a device, the greater the potential attack surface. What's the most agents you've deployed to a device? How are you mana