Do my staff need an extra app?

No. The protection is built into the SecTepe app. There is no second app. On Android, you hand out the app through your MDM as a company app.

Can IT wipe a work phone remotely?

Only the data of the SecTepe app. There is no factory reset, on purpose. Private photos and other apps stay untouched.

Does the app detect every rooted Android phone?

Not every one. Anyone with root access can also hide it. The app catches the common cases. It reports hits, but it never confirms that a phone is surely clean.

What does my IT team see on private phones?

Details about the device and the list of installed apps. No emails, messages, photos, locations or browser history. Because the app list is visible, its use should be part of your works agreement or user notice.

SecTepe Endpoint

Mobile threat defense

Keep your company phones safe

Work phones hold emails, customer data and access to company systems. Yet they are often missing from the security console. SecTepe Endpoint also protects Android and iOS devices. This is called mobile threat defense. The phones show up in the same console as your computers and servers.

Request a demo

How the protection gets onto the phone

The protection is built into the SecTepe app. So you do not need a second app. The invite goes through your mobile device management, MDM for short. There you create an invite for a device. It contains a link. The user pastes it into the app under Settings › Device protection. Done.

On Android, the app checks the device every 15 minutes. On iOS, it checks when opened and every 15 minutes while it stays open. An iPhone that nobody uses for a long time therefore shows up as disconnected in the console.

What the app detects

Serious findings show up as alerts. The console lists smaller weak spots as hints. These include a missing screen lock or an old security patch.

Root and jailbreak

On a rooted Android phone or a jailbroken iPhone, the built-in protection is broken open. Apps can then do things the operating system normally forbids.

Tampering with apps

Some tools hook into running apps and read along. Experts call this hooking. The app spots such tools on Android and iOS.

Stalkerware

These are spy apps that secretly read messages or calls. On Android, the app checks all apps against a public list. The list is refreshed every 12 hours.

Malicious apps and banking trojans

On Android, the app asks our threat intelligence whether an app is known to be harmful. It also spots typical patterns of banking trojans.

What the app cannot measure for sure, it reports as unknown. Unknown never counts as a finding. This keeps false alarms down.

Respond with MDM commands

When an alert comes in, one person asks for an action. A second person approves it. This works just like for computers and servers. The action then goes to the phone as a command through your MDM.

• Lock company data: The app shows a lock screen and no longer gives access to company data. It locks the app, not the whole phone.
• Lock the screen: Only on Android, and only if the user allowed this in the app.
• Lost notice: The phone shows a message with a callback number.
• Delete app data: The data of the SecTepe app is deleted.

There is no factory reset, on purpose. A wrong click should never wipe the whole phone. No mobile operating system lets a normal app block the network for the whole device. For that you need full device management through Android Enterprise or Apple.

Limits on iOS

Apple does not give apps a list of installed apps. So the app cannot find stalkerware on iPhones. If you suspect something, a backup of the iPhone can be checked in a forensics case. Locking or wiping the whole device is not possible on iOS either.

Only metadata, no content

The app sends details about the device, its security state and the apps. These include the name, version and source of an app. Emails, messages, photos, locations and browser history stay on the phone.

To see how this fits a security plan for all devices, read our glossary entry onendpoint detection & response.

FAQ on mobile protection

Do my staff need an extra app?: No. The protection is built into the SecTepe app. There is no second app. On Android, you hand out the app through your MDM as a company app.
Can IT wipe a work phone remotely?: Only the data of the SecTepe app. There is no factory reset, on purpose. Private photos and other apps stay untouched.
Does the app detect every rooted Android phone?: Not every one. Anyone with root access can also hide it. The app catches the common cases. It reports hits, but it never confirms that a phone is surely clean.
What does my IT team see on private phones?: Details about the device and the list of installed apps. No emails, messages, photos, locations or browser history. Because the app list is visible, its use should be part of your works agreement or user notice.

Bring work phones into your security console

We show you the MDM invite and what the app reports on a test device.

Request a demo

How we work with you

We want to work with you for the long run, not just deliver once. Our way of working has four steps. So you always know what comes next, who does what and what you get.

1. Free initial conversation

We learn where you stand and what you want. In 30 to 45 minutes we check if we are a good fit. We show you options and answer your questions. There is no obligation.

2. Current state review

We check where you stand today: tech, processes and rules. You get a list of strengths and gaps, sorted by urgency. Our offer is based on it.

3. Delivery with a dedicated lead

An experienced lead guides you through the project. You get clear goals, an open plan for time and cost, and a status every week. All results are written down and belong to you.

4. Running and reviewing

After the project we stay with you. We run systems for you, check them at set times and keep track of open tasks. When new threats or new rules come up, we get in touch.