Use case

Vulnerability management for every employee phone

Every out-of-date operating system, missing passcode, or disabled security setting gives attackers an easier way in, and AI is now accelerating and commoditising the exploits that target them. Corrata scores each phone’s security and guides employees to fix what it finds, while Reflex, its on-device threat engine, isolates a device as soon as it detects a compromise.

Phones running out-of-date versions of iOS or Android carry known vulnerabilities that attackers can still exploit after a patch is available.

Sophisticated malware targets exactly these devices to reach critical systems and steal company data, which makes patching and good configuration the baseline.

How Corrata reduces risk from insecure devices

Corrata’s approach to mobile vulnerability management comes in three parts:

Real-time monitoring: Corrata checks each device’s operating system, configuration, and malware status in real time, and Reflex scans traffic, devices, and apps for indicators of compromise. The results feed a security score that summarises each device’s security posture.

Isolation of insecure devices: Devices that fall below your threshold are isolated automatically, and Reflex quarantines a device the moment it detects a compromise.

User alerts: The Corrata app alerts employees to misconfigurations and guides them through fixing them, from updating iOS or Android to changing insecure settings.

Automatic monitoring and remediation of iOS and Android vulnerabilities

Establish a security score for every device

Understand the security posture of each device and your whole fleet at a glance.

Corrata’s security score gives you a simple indicator of each device’s health, based on its operating system status, device configuration, and malware status. Because Reflex checks for indicators of compromise continuously on the device, a compromise shows up in the score as soon as it is detected. Over 95% of devices running Corrata achieve a security score of 100/100.

Isolate insecure devices

Devices below your threshold are quarantined until the issue is fixed.

Denying insecure devices access to business apps contains the impact of poor configuration. When employees update their devices and correct their settings, access is restored automatically, so IT doesn’t need to manage the process.

Guided remediation

Employees get simple steps to fix vulnerabilities.

The Corrata app highlights poor security configuration and guides employees through fixing it, whether that means changing an insecure setting, updating an out-of-date operating system, or removing a potentially harmful app. Gamification encourages employees to keep their score high.

Conditional access policies

Respond in proportion to the risk.

Devices with low-concern issues can keep access to lower-risk apps, while devices with severe vulnerabilities can be fully isolated. Corrata integrates with your identity provider for conditional access, and Identity Gate checks every device at the moment of login.

Mobile vulnerability management FAQs

What is mobile vulnerability management?

Mobile vulnerability management reduces the risk of data breaches by keeping every phone and tablet employees use for work in good security health. It starts by establishing each device’s security posture, such as whether it runs up-to-date software and has a passcode set, and then makes it easy for employees to fix what is found.

What are the most common vulnerabilities on employee phones?

When Corrata is first deployed, the issues found most often are out-of-date operating systems and apps, malware, missing passcodes, and disabled security settings. In rare cases, devices are found to have been jailbroken or rooted.

How does Corrata’s security score work?

Corrata scans the key security settings and establishes a security score for each employee device. The Corrata app provides employees with details of the factors driving the score and guided support in resolving any issues. Admins also have access to this score and can set rules which will quarantine devices with serious unresolved vulnerabilities.

What happens if a vulnerable phone is compromised?

Reflex, Corrata’s on-device threat engine, scans traffic, devices, and apps for indicators of compromise and acts on the spot. Depending on the threat and your policy, it blocks the connection, quarantines the device, or alerts the user in real time. Our page on mobile spyware detection explains how Reflex spots an infected device even when nothing is visible on it.

Does mobile vulnerability management work on personal phones?

Yes. Corrata protects company-owned and personal iOS and Android devices, and employees can enrol by email or SMS. Because Corrata does not track location, read messages, scan files, or record browsing history, employees can keep their own phones secure without giving up their privacy, an approach we call privacy by architecture.

Adversary-in-the-Middle (AiTM) protection that keeps phone traffic private on any network

Most enterprise data now travels over insecure networks. Corrata keeps employee communications private on unsafe cellular and Wi-Fi…
Detect and stop mobile spyware on employee phones

Exploits like Pegasus are no longer limited to nation states. Corrata spots suspicious activity even when nothing shows…
Device trust that checks every phone at the moment of login

Phones can access the same corporate data as laptops. Corrata ensures only devices known to be secure can…

See Corrata on your own devices

A short call, a live look at the product, and a straight answer on whether it fits your estate.

Request a demo