Device security on auto-pilot, even when it's not your only job

XFA discovers and verifies every device used for work, including freelancers working on their own laptops, and enforces your security policy automatically. It respects your team's privacy, needs no invasive MDM, and takes the daily chasing off your plate.

Securing devices for leading organizations like
XFA device security dashboard, discovering managed and BYOD devices from your identity provider

How it works

XFA integrates with your identity provider, discovers all connected devices, checks their security, and enforces compliance-ready access controls.

1

Discovery

Connect your identity provider. XFA reads the access logs and finds every device used for work, in minutes, no agent needed.

2

Awareness

XFA nudges device owners automatically with clear, actionable alerts. They fix issues themselves. No tickets, no chasing, no IT bottleneck.

3

Enforce

Only compliant devices get access. XFA becomes a factor at sign-in and blocks unsafe devices before they touch your data.

Security that does the work, so you don't have to.
Compliance
COMPLIANCE CERTIFICATIONS

Get device security evidence for certifications like ISO 27001, SOC2, Cyber Essentials, NIS2, and more

Every device is checked continuously, your team keeps their privacy, and the evidence is ready when your auditor asks for it.

Get audit-ready device security
GRC
GRC PLATFORM INTEGRATIONS

Share your compliance status with platforms such as Vanta, Drata, Trustcloud and Thoropass.

Become compliant with XFA

Set up in less than 5 minutes

Start today and get full device visibility before your next coffee. Connect your identity provider, invite your team, and let XFA take care of the rest.

1

Connect your identity provider

Microsoft 365, Google Workspace, or Okta. XFA discovers every device used for work in the background. You'll never miss one again.

2

Invite your team

New teammate? Remote freelancer? Everyone self-onboards in a 1-minute setup from their own device, anywhere in the world. No IT tickets, no manual device setup.

3

Enforce secure access

Set your security policy once. XFA verifies every device at sign-in and only lets compliant devices through.

See it in action,

in 30 minutes.

See how much of your device security workload XFA can take over: discovery, awareness nudges, and enforcement run on auto-pilot, without taking control of anyone's device or touching personal data.

Having XFA installed in our organisation provides me, as a company owner, with security. Because I know which devices are logging into our system.

Andreas Creten
Andreas CretenCTO, madewithlove
Results

What XFA takes off your plate,
every day, on auto-pilot.

100% of work devices covered

Including freelancers' own laptops, contractors and unmanaged devices. Nothing slips through.

1-minute self-onboarding

Every teammate gets set up in about a minute, from their own device, anywhere in the world. No IT tickets.

0 admin rights, 0 personal data

XFA runs without admin rights and never collects personal information. Privacy by design, for freelancers and employees alike.

Pay only for what you need

Simple per-user pricing with unlimited devices. Start free, no credit card required.

Essential

Discover & Verify

  • checkDiscover devices used for work
  • checkInvite-based device verification
  • checkSelf-onboarding for users
  • checkUser communication about potential risks
  • crossEnforcement at login

per month (for 1 user, unlimited devices)
Start free trial

*no credit card required; setup in under 5 minutes.

Enterprise

Custom

  • checkAll Essential & Advanced pack features
  • checkGet insights in CVEs on devices
  • checkDiscover devices in multiple IdPs
  • checkMultiple enforcement policies
  • checkAdvanced MFA features

Contact us

Talk to sales

Built for security-first teams

Trusted by organisations that can't afford to compromise on privacy or compliance.

ISO 27001 certified

Your data is protected by certified security practices, the same standard we help you achieve.

EU-built & privacy-first

Built and hosted in the EU. XFA runs without admin rights on user devices.

API & integrations

Connect XFA to your stack: identity providers, GRC platforms, and custom integrations via our documented API.

Every device, verified.

Before sign-in.

Find out how much of your security workload XFA can take over in a 30-minute demo.

Every device, verified.