User-driven device security that keeps work moving.

Know every computer and phone your team uses meets your standards, whether company-owned or personal. No IT team needed.

Start for free

A quiet, sunlit workspace with a desktop monitor and a garden outside

Also supports

XFA is performing a device security check

Before accessing the application, we like to make sure your device is safe and compliant with your organization’s policy.

Waiting for the XFA app

XFA is performing a device security check

Before accessing the application, we like to make sure your device is safe and compliant with your organization’s policy.

Your device is blockedFix allFix allDone

Automatic updates are disabled

Resolve manuallyFixFixDone

Screen lock is disabledBlocking. You cannot sign in, until resolved.

Resolve manuallyFixFixDone

Firewall is disabled

Resolve manuallyFixFixDone

XFA is performing a device security check

Before accessing the application, we like to make sure your device is safe and compliant with your organization’s policy.

Device is safe and compliant

The photograph follows approximate daylight for your time zone. No location access is needed.

Every colleague self installs at sign-in.

No IT visit and no rollout. At first sign-in, XFA asks them to install the app. About a minute, and they are set.

A new colleague’s first day

A new laptop arrives at the door, untouched by IT.It is still in its original box.They open a work app, and XFA asks them to install it.The sign-in page finds the XFA app on their computer and checks the device. Then they are in.Or they follow the step by step guide in the XFA app.

The new colleague signs in, XFA asks to be installed.

One download, one click, installed and ready.

Something to fix? They press Fix and carry on.

Unpacking a new laptop at the kitchen counter

web.xfa.techcalendar.example.com

Signing into Calendar

Your company uses XFA to verify your device security

Download & Install XFA1 min installation. Verify your device, every time.

Checking for the XFA app

Installation successful

Taking you to Calendar…

CalendarTodayFri 2 Oct

Standup09:00Design review10:30Customer call14:00

Set up in 15 minutes. No sales call needed.

XFA plugs into your sign-in as an MFA method or as an external identity provider. Four steps, and every sign-in gets checked from then on.

No devices to enroll. Nothing to roll out.

Start for free

Create your XFA account
Sign up and add your organization’s details.
Add XFA to your identity provider
As an MFA method or as an external identity provider. You copy 3 values across.
Try it on yourself first
Then choose who gets checked.
Tune your policy
Decide when XFA warns and when it blocks. You can try it without locking anyone out.

Start free. Upgrade later.

Every plan is priced per person, with every device included.

Free

Free for your whole team.

15 minutesto set up

Every device checked at sign-in
People install XFA themselves at their first sign-in
Warns people when a check fails
4 device security checksOperating system version, disk encryption, screen lock, and antimalware protection. The person also sees the other 5 core checks and the 17 extended checks in their XFA app, as a preview.
One click fixes from the sign-in page, or a step by step guideWhen a check fails, the person clicks Fix on the sign-in page and the XFA app makes the change. A check without a Fix button comes with a step by step guide.
Discover which devices people sign in withXFA finds devices in the sign-in logs of the identity providers you connect, with no network scanning. XFA Free shows how many there are. From Pro, you see who each device belongs to and what is wrong with it.
Built-in Passkey, with no code to typePhishing-resistant MFA. The XFA app answers the second factor on a verified device, so there is no code to type.
Works on macOS, Windows, Linux, iOS, and Android

Start for free

Pro
Verify and warn
€ 4,90per user / month
Everything in Free, plus
- 9 core checksOperating system version, disk encryption, screen lock, and antimalware protection, as on XFA Free. Pro adds automatic updates, recent reboot, firewall status, browser version, and password manager.
- Details on discovered devicesXFA finds devices in the sign-in logs of the identity providers you connect, with no network scanning. You see who the device belongs to, and what is wrong with it.
Max
Verify and block
€ 7,90per user / month
Everything in Pro, plus
- 26 core and extended checksThe 9 core checks, plus 17 extended checks: jailbroken or rooted devices, biometrics, Windows Recall, Find My Device, developer mode, DNS settings, Secure Boot, integrity protection, screen sharing, remote management, remote login, remote scripting, unattended remote access, secrets in environment, autonomous agents present, unguarded elevation, and unsafe AI mode.
- Block insecure devices at sign-in
Enterprise
For organizations with specific requirements
Custom pricing
Everything in Max, plus
- Enterprise checksBrowser settings, such as safe browsing and tracking protection, DNS over HTTPS, and HTTPS-only browsing, plus the antivirus or password manager you choose. Pro and Max run the browser checks as a preview.
- Known vulnerabilities (CVE) on operating systems and browsers