When your organization purchased Workbench, a certain number of attack surfaces, or endpoints, were purchased. These endpoints are all the devices, users, and other places from which threats can come your environment. In Workbench you can see how many endpoints you're actually using in your environment.
For what the specific counts are and what they mean, go to What's counted in your Expel usage