Corrata, a leading provider of enterprise mobile threat detection and response solutions, today announced its recognition as both a Leader and Fast Mover in the GigaOm Radar for Mobile Threat Defense report.

GigaOm praised Corrata’s comprehensive response capabilities, particularly its ability to instantly restrict compromised devices from accessing enterprise resources, as well as its detailed forensic insights. The report also noted Corrata’s high scores across both core and emerging features, stating:

“Corrata is well-positioned for both SMB and large enterprise deployments, thanks to its scalable architecture that processes security functions directly on devices: without routing traffic through proprietary infrastructure.”

In GigaOM’s rating of twenty MTD solutions Corrata’s achieved the highest overall score confirming its position as a market leader.

With the acceleration of digital transformation and the shift to cloud-based services, mobile devices now serve as primary access points for sensitive enterprise data, often lacking the robust controls found on traditional endpoints. Corrata fills this critical security gap with an enterprise-grade solution that defends against advanced spyware, communication interception, and social engineering attacks: including threats delivered via SMS, WhatsApp, Microsoft Teams, and other messaging platforms.

The GigaOm report underscores the growing importance of mobile threat defense (MTD), stating:

“MTD represents a critical cybersecurity capability in today’s increasingly mobile-first business environment. This technology offers comprehensive protection for mobile devices against sophisticated threats including malware, phishing, network-based attacks, and malicious apps. As organizations expand mobile workflows, MTD has become an essential component of enterprise security architecture.”

Colm Healy, Co-founder and CEO at Corrata, commented:

“This recognition reflects our deep commitment to delivering best-in-class threat detection and response for mobile environments. Today, over 50% of devices accessing enterprise systems are phones and tablets: yet many organizations have virtually no visibility into the threats targeting them. Our research shows up to 22% of threats go undetected by traditional solutions. Corrata closes this visibility gap and significantly reduces mobile’s appeal as an attack vector.”

To be included in the GigaOm Radar, vendors were evaluated based on their product capabilities, strategic roadmap, and market presence.Learn more about Corrata’s mobile threat defense solution here.

SOURCE Corrata Ltd

The post Corrata: Leader & Fast Mover in GigaOm MTD Radar appeared first on Corrata.

DUBLIN, May 21, 2025 — Corrata, the leading mobile endpoint threat detection and response provider, published the Living With ECH Report. The first-of-its-kind report examines the impact of the Encrypted Client Hello (ECH), a new privacy protocol that information security professionals fear could make widely-used security tools blind to large swaths of internet traffic.

ECH is an extension to TLS 1.3, the most recent version of the Transport Layer Security standard used to secure the vast majority of internet communications. ECH proposes to enhance privacy by encrypting key information between devices and Content Delivery Networks (CDNs), preventing network providers from identifying the names of websites that individuals are looking to access. Information security professionals have raised concerns that its implementation may compromise the ability of enterprises to detect and counter cyber threats.

The inaugural report analyzed first-party platform data, billions of connections to web servers made by enterprise employee mobile devices, between January and March 2025. According to the research, more than 9% of the top 1 million domains are ECH-enabled, but less than .01% of TLS connections used the protocol.

However, even though ECH is rarely relied upon in practice, malicious actors are taking advantage of the anonymity the protocol provides: 17% of the total ECH-enabled sites are risky. Chrome users with encrypted DNS enabled are most at risk.

Findings from the Living With ECH Report include:

ECH could degrade, not improve, privacy: Banks and other regulated entities are often required to monitor the internet traffic going into and out of their organization. To date, these enterprises have been able to selectively decrypt traffic without looking at sensitive data like employees’ health records.

But with ECH blocking their filtering, enterprises would have little choice but to decrypt all internet traffic for inspection, drastically degrading employees’ privacy.

Cloudflare is driving ECH adoption: Cloudflare remains the sole tier-one CDN supporting ECH. Almost all of the sites that are ECH-enabled use Cloudflare infrastructure. Major website owners also seem to be wary of adopting the protocol, concerned that users might be blocked from accessing their services by enterprise security infrastructure or by public authorities.

While ECH reduces the visibility of internet service providers (ISPs) and enterprise security teams, CDNs like Cloudfare can still access data under the protocol.

Malicious actors are taking advantage of Cloudflare: Over 90% of phishing detections use Cloudflare infrastructure, according to Corrata’s analysis. In addition to the anonymity provided by ECH, these sites take advantage of other Cloudflare features.

For example, the “captcha” page can be used to direct desktop traffic to the legitimate site while mobile traffic is sent to the fake one. Alternatively, traffic not coming from the targeted country may be redirected to the legitimate site. These are deliberate tactics to avoid detection by security providers.

Barriers to widespread adoption are high: Widespread adoption of ECH would severely curtail the ability of enterprises to identify and block connections to malicious domains, but industry heavyweights who play different roles and have varied motivations must all support ECH before its use can become widespread. While 20% of devices are configured to use encrypted DNS and DNS resolvers which support ECH, the lack of support from browsers such as Safari and operating systems such as Android make such choices moot.

“The extremely low level of ECH adoption suggests that the security community’s fears that enterprise internet traffic would go dark are not yet being realized,” said Matthieu Bentot, CTO of Corrata. “While the potential certainly exists for ECH to become a thorn in the side of defenders, the early signs are that this is the time to prepare rather than panic.”

The Living With ECH Report is available today.

Research Methodology
Corrata analyzed billions of connections made by devices running Corrata’s threat detection and response solution. Corrata’s software is used to protect iOS and Android devices and is representative of that important segment of enterprise internet traffic. Corrata has visibility of DNS query and TLS connection metadata for all of these connections and tracked the number of successful ECH connections created between January and March 2025.

About Corrata
Corrata provides endpoint threat detection and response for mobile. Our pioneering architecture delivers real-time visibility into threats targeting both iOS and Android devices, without compromising performance or privacy. Corrata software detects and disables malware, blocks phishing attacks and ensures compromised devices cannot access sensitive data.

Corrata has customers across multiple verticals including healthcare, logistics, manufacturing and the public sector and is verified for use with FirstNet, the US Government network for first responders. With deployment in less than 24 hours and seamless integration into your existing security infrastructure, Corrata ensures your mobile environment is no longer your weakest link. Corrata is a proud member of the Microsoft Intelligent Security Association and Cyber Ireland. Visit corrata.com.

###

The post Corrata Report Examines Impact of New Privacy Protocol appeared first on Corrata.

Digital transformation, often regarded as a hackneyed phrase, fails to fully express the revolution spurred by the combination of cloud computing, ubiquitous connectivity, and advanced mobile devices. Consider that most banking and e-commerce transactions now occur on mobile devices rather than desktops. Tradespeople, taxi drivers, and delivery personnel commonly use mobile apps for payments, receipts, and order recording. Complex tasks like fault troubleshooting in power plants or completing safety training en route to construction sites are now efficiently managed via mobile technologies. Digital technologies are sweeping across every industry, every business process, and all aspects of our daily lives like a flood.

A pivotal factor enabling these changes is the technologies that ensure devices are secure. Device management, alongside endpoint security, plays a critical role. Device management controls configuration, while endpoint security protects against malware and other threats. A managed device, identifiable to an organization through a unique identifier, shares this identifier with the endpoint security product, allowing signals to be passed to conditional access systems.

The Reluctance to Enroll and the Persistence of BYOD

Despite these advances, we are far from a world where every device used by every employee in every organization is enrolled in a device management system like Intune, Workspace ONE, or Ivanti Neurons. The reasons vary. In some cases, it’s just not seen as a priority, especially in smaller organizations with limited resources and less focus on information security. Even in organizations with high security standards and well-developed information security programs, device enrollment is not always the chosen approach. This is often due to employee resistance, especially where personal devices are involved, as culture and privacy concerns may oppose mandatory enrollment. Thus, while device management options range from complete control to managing a partitioned segment of the device, for some organizations, securely supporting BYOD is essential.

Furthermore, users such as non-executive directors, contractors, freelancers, and consultants, who work with multiple organizations, cannot enroll their devices in a single organization’s system, limiting their flexibility.

Enter Mobile Application Management (MAM)

Mobile Application Management (MAM) has been the preferred solution for managing risk in a BYOD context. MAM secures individual applications rather than the entire device. Features like remote data wipe, restricted copy-paste, and setting access requirements (e.g., password complexity) enhance security. MAM is widely supported by applications such as Microsoft Outlook, OneDrive, SharePoint, and the entire Microsoft 365 suite, as well as Google Workspace, including Gmail and Drive. Additionally, various MDM vendors support open standards for app development, particularly useful for bespoke organizational apps.

Why MAM is Broken

However, the burgeoning use of enterprise SaaS applications has exposed MAM’s limitations, especially in medium and large businesses that use dozens to hundreds of SaaS applications. A recent study by Corrata on Okta’s top 50 enterprise SaaS applications revealed that only 12% support MAM. Major applications like Workday, SAP Concur, HubSpot, and Dropbox lack MAM support, leading organizations to either disallow these apps on BYOD devices or overlook the associated risks – neither approach is satisfactory for security, user experience, or productivity.

Extend of support for MAM across popular enterprise apps

A significant challenge with BYOD devices is browser access. SaaS applications, typically designed for optimal browser use, lead employees to bypass MAM and access apps via browsers. Some organizations respond by blocking browser access or restricting it to managed devices, but this can be overly restrictive.

Furthermore, MAM assumes the underlying platform’s safety, but checks on the operating system’s integrity or jailbreak status are often superficial. MAM alone doesn’t ensure protection from malware or other threats, a gap that only an endpoint security solution can fill.

Endpoint Security to the Rescue

The good news is that these limitations can be addressed by deploying an endpoint security solution alongside MAM on BYOD devices. Mobile Threat Defense (MTD) products, like Corrata, are tailored for mobile security, offering features such as anti-phishing protection, secure communications, and endpoint detection and response. They perform sophisticated security checks to ascertain device safety and, crucially, can block compromised devices from accessing corporate applications. MTD offers superior protection over MAM and covers all applications, not just those MAM-compatible.

However, MTD’s success hinges on privacy-first solutions. Users need assurance that their personal data, from browsing activity to message content, remains private. Fortunately, solutions offering such privacy are gaining acceptance, especially as employees become more aware of personal mobile security risks. A robust mobile security solution benefits both the company and the employees.

Every Employee, Every Device, Many Applications

While there’s a place for corporately managed devices for privileged users and certain high-security applications, BYOD can provide adequate security for many apps. Leveraging MTD, we can now extend appropriate security levels not just to a few apps but to the majority transforming our workplaces.

The post No MAM appeared first on Corrata.