About XFA

XFA checks every work device when someone signs in. It is for companies that want secure devices without running an MDM.

What XFA does

A company needs to know whether the laptops and phones that sign in to its tools are safe. An outdated operating system or a missing screen lock is an easy way in.

XFA checks the device each time someone signs in to an app behind your identity provider. You decide per check whether a problem gets a warning or a block. The person using the device sees what is wrong and fixes it themselves, at sign-in or from the XFA app. XFA checks again and lets them through.

XFA also sends the invites and risk alerts, by email, Slack, or Microsoft Teams, so nobody in IT has to step in or manage anyone’s laptop.

What makes XFA different

No MDM required
XFA is not an MDM. It checks a device without taking control of it.
How XFA works
People fix their own device
When a check finds a problem, the person who uses the device fixes it: with the Fix button at sign-in, a step by step guide, or the XFA app.
Every device, whoever owns it
Company laptops, personal phones, and the laptops of freelancers and contractors. XFA runs on macOS, Windows, Linux, iOS and Android, and can check a browser without the app.
Privacy by design
XFA checks whether a device is secure. It does not collect personal files, messages, browsing history, or location data. XFA is ISO 27001 certified and made in Belgium.
Trust Center (opens in a new tab)
Set up in about 15 minutes
Connect your identity provider, pick the checks and invite your team. People install the app themselves.
Compare plans

Who uses XFA

Companies in many sectors use XFA, often ones with no IT security team or with devices nobody manages centrally.

The team behind XFA

Lars Veelaert and Gijs Van Laer founded XFA in Antwerp, Belgium, in September 2021. Lars had seen companies struggle with device security that was too complex or too invasive. Gijs brought the cryptography to check devices without controlling them.