Use case

Device trust that checks every phone at the moment of login

Phones now reach the same sensitive corporate data as laptops, so every login has to establish whether the device itself is safe. Reflex, Corrata’s on-device threat engine, watches each phone for threats as they land, and Identity Gate lets only secure devices, managed or unmanaged, reach your apps.

MDM keeps phones configured, but it cannot see malware or a malicious connection on the device, and unmanaged personal phones give you no view at all.

Corrata gives you full visibility of the security status of every device it protects, so you can grant access from managed and unmanaged phones alike.

How Identity Gate protects your cloud environment

Identity Gate is Corrata’s approach to protecting cloud apps across managed and unmanaged devices. It allows access only when Corrata is installed on the device and its security score is good, and it verifies that status at the exact moment of login. Because Reflex inspects traffic on the device and acts the moment a threat lands, a phone that becomes compromised loses access straight away.

Enabling safe access to your environment from any secure device

Device security status

Every device is monitored continuously.

Reflex scans traffic, devices, and apps for indicators of compromise, and Corrata checks each device for poor configuration, out-of-date operating systems, and other vulnerabilities. The results feed a security score that summarises each device’s security stance, and employees are told about any issue that needs their attention.

Identity Gate

Allow sign-in from any secure employee device.

With Identity Gate, you can extend access to enterprise apps to every secure employee device, whether it is managed or unmanaged. Devices that are unsafe, or whose security status is unknown, are kept out, and personal devices get access only when Corrata is installed and the device has a good security score.

Device quarantine

Cut off data exfiltration the instant a threat is found.

When Reflex detects indicators of compromise, the device is isolated straight away and blocked from enterprise apps. For less severe concerns, you can take a more measured approach and keep access to less sensitive apps open.

Guided remediation

Employees get simple steps to fix issues.

When an issue is found, the employee is alerted and guided through fixing it, and the Corrata app gives a clear summary of any vulnerabilities or misconfigurations.

Frequently asked questions

What is mobile device trust?

Every time an employee connects to your environment, you need to answer two questions: whether the user is who they claim to be, and whether the device they are using is safe. Mobile device trust answers the second question for phones and tablets, using security software running on the device itself.

Why is device trust hard to establish on mobile?

Unlike Windows machines, iOS and Android devices don’t routinely share a unique identifier when they connect to an app or service, so you can’t match signals from a security app on the phone with the access attempt. MDM fills part of this gap with the MDM identifier, but it can be complex to use for conditional access, and unmanaged devices have no way of sharing their identity with an app at all.

How does Identity Gate establish device trust?

Without a reliable way to establish device trust, organisations have to choose between blocking mobile access and accepting an untreated risk. Identity Gate lets you accept access requests from any employee device, on condition that the device is verified as secure at the exact moment of the login attempt.

Can personal phones meet device trust requirements?

Yes. A personal phone qualifies for access once Corrata is installed and the device has a good security score, and employees can enrol by email or SMS. Because Corrata does not track location, read messages, scan files, or record browsing history, employees can protect their own phones without giving up their privacy, an approach we call privacy by architecture.

Does device trust work with our MDM and identity provider?

Yes. Corrata offers proven deployment and integration with leading MDM platforms and integrates with identity providers, so device trust fits into the access policies you already run. Zero-touch deployment options cover both managed and unmanaged devices.

Adversary-in-the-Middle (AiTM) protection that keeps phone traffic private on any network

Most enterprise data now travels over insecure networks. Corrata keeps employee communications private on unsafe cellular and Wi-Fi…
Detect and stop mobile spyware on employee phones

Exploits like Pegasus are no longer limited to nation states. Corrata spots suspicious activity even when nothing shows…
Govern Shadow AI and enforce DLP on employee phones

Unsanctioned AI tools are a new route out for company data. Corrata lets you monitor their use and…

See Corrata on your own devices

A short call, a live look at the product, and a straight answer on whether it fits your estate.

Request a demo