"We have a bring-your-own-device policy. But those devices still need to comply with our security standards, especially when working with asset managers or banks."
Stephane JansCTO & CPO, DnergyRead the Dnergy story
Device checks at sign-in, sent to Thoropass.
Keep Thoropass. XFA checks each device when someone signs in and sends the results to Thoropass about twice an hour.
What Thoropass does
Thoropass tracks your compliance controls and the evidence your auditor reviews. That stays as it is.
Adds to Thoropass
What XFA adds
- Checks each device at every sign-in
- Covers contractors and personal laptops too
- People fix problems themselves in the XFA app
- Can block sign-in until a problem is fixed
How XFA works with Thoropass
1. Connect XFA to Thoropass
Connect your identity provider to XFA. Then connect XFA to Thoropass and confirm the connection in Thoropass.
2. People check their device at sign-in
On their first sign-in, XFA walks each person through installing the XFA app. When a check fails, they fix it from the app.
3. Results arrive in Thoropass
XFA sends each device’s results to Thoropass about twice an hour. Your audit stays in Thoropass.
Questions about XFA and Thoropass
Do I need a paid plan to send results to Thoropass?
Yes. Sending results to Thoropass is part of every paid plan. XFA is free to start, with no cap on people, four checks at every sign-in, and the Fix button.
See pricingDo XFA’s results count for Thoropass’s device tests?
XFA sends each device’s results to Thoropass about twice an hour. Which Thoropass tests they count for depends on your Thoropass setup. Check that in your account before you remove any other tool.
Which checks does XFA run?
XFA starts with four: the operating system version, disk encryption, screen lock, and antimalware. You can add more as you grow, such as automatic updates, browser version, password manager, firewall, and recent reboot, up to 34 checks in all.
Does XFA block a device that fails a check?
Only if you set it to. You decide per check whether a device that fails gets a warning or is blocked, and after how many days. Either way, the person sees what to fix.
What does XFA see on a contractor’s own laptop?
Only the security settings it checks, such as the operating system version, disk encryption, and screen lock. XFA does not collect browsing history, personal files, or location data. The app installs without admin rights.
How XFA worksDoes XFA work with Vanta and Drata too?
Yes. XFA also sends device results to Vanta, Drata, and TrustCloud.
All integrationsKeep Thoropass. Start checking devices.
Try it on your own laptop first, then bring in the team. Connect Thoropass when you are ready.
