I can't remember the names of any of these companies, but I know there's a healthy ecosystem of "endpoint management" businesses that sell essentially this service (among other things, like endpoint security monitoring/EDR).
The downside is then that you're running an ultra-privileged agent on each developer machine, with no particular guarantee that said agent is more secure than any given piece of software despite having way more power.
Edit: Remembered one: you could use something like Kolide[1], which more or less wraps osquery[2] to enumerate applications and their versions, and push out warnings asking users to upgrade.