
In this episode, we had the pleasure of hosting [Niels Hofmans](https://www.linkedin.com/in/nielshofmans/), Head of Security at [Intigriti](https://www.intigriti.com/). Join us as we dive into an inspiring conversation covering the latest topics in cybersecurity. We discuss bug bounty programs and their role in modern cybersecurity, transforming security teams from naysayers to enablers, and how automation is revolutionizing compliance for organizations.


New guides, customer stories and product news, when they’re published.

The XFA blog

madewithlove testimonial for XFA

Andreas Creten on XFA

No devices to enroll. Nothing to roll out.

Sign up and add your organization’s details.

Create your XFA account

As an MFA method or as an external identity provider. You copy 3 values across.

Add XFA to your identity provider

Try it on yourself first

Decide when XFA warns and when it blocks. You can try it without locking anyone out.

Tune your policy

XFA plugs into your sign-in as an MFA method or as an external identity provider. Four steps, and every sign-in gets checked from then on.

Your choice lasts while this page is open. Reload to follow approximate local daylight again.

The photograph follows approximate daylight for your time zone. No location access is needed.

XFA checks a device’s security settings. It does not collect files, messages, or browsing history. Nothing changes without the person’s OK.

Operating system updates, disk encryption, screen lock, and other supported security settings.

XFA checks

XFA never collects

Your organization sees

A new laptop arrives at the door, untouched by IT.

They open a work app, and XFA asks them to install it.

The new colleague signs in, XFA asks to be installed.

The sign-in page finds the XFA app on their computer and checks the device. Then they are in.

One download, one click, installed and ready.

Or they follow the step by step guide in the XFA app.

Something to fix? They press Fix and carry on.

A 30 minute call with our team. We answer your questions and walk you through XFA on your own setup.

Need help choosing?

Verify device security at sign-in, on 4 core checks. Upgrade when you need more checks, or to block unsafe devices from signing in.

Start on XFA Free.

Log in

Mandatory for access to company resources.

These device security checks are shared with {organization}. It requires some of them; the rest are shared as information.

Devices

to continue to {application}

Sign in - Google Accounts

Sign in

Enabling Face ID makes choosing a complex passcode more user friendly. It allows you to easily unlock your phone without always having to enter the complex passcode.

How to enable Face ID

XFA does not collect:

Your privacy stays yours!

Face ID & Passcode

My security status

Before accessing the application, we like to make sure your device is safe and compliant with your organization’s policy.

{organization} only allows secure devices. Click the button below to share the security status of your device.

Your organization only allows secure devices to use its selected application(s). Click the button below to verify and share the security status of your device.

Share your device status and continue signing in.

⚠️ Device Security Alert

XFA might still be installing or starting up.

1 min installation. Verify your device, every time.

XFA helps your organization check device security without collecting personal data or taking control.

XFA Podcast with Niels Hofmans (Intigriti) | Bug Bounties, Automation, & Trust

More in Podcast

XFA Podcast with Stijn Cornelis (Infosentry) | Navigating Device Security, Compliance & Regulations

XFA Podcast with Ayo Akinyele (Bolt Labs) | Digital Asset Security, MPC, & Zero-Knowledge Proofs

XFA Podcast with John Opdenakker (Wolters Kluwer Belgium) | Cybersecurity Culture, Social Media & Password Management