# XFA > XFA checks every device at sign-in and guides people to fix issues themselves. IT security for fast-growing tech companies, without building an IT team. XFA checks each device when someone signs in through your identity provider (Google Workspace, Microsoft Entra ID, Okta, OneLogin, Ping Identity, or Keycloak). When a check fails, the person presses Fix and approves the suggested fix, or follows a step by step guide, and XFA checks again. XFA warns people early and blocks only when you tell it to. It covers company, personal, and contractor laptops and phones alike, with no MDM enrollment, and it reports whether a device meets your rules, not what is on it. Onboarding runs itself: people install the XFA app at their first sign-in, with no admin rights needed. Typical buyers are security and IT leaders at companies with hybrid or BYOD workforces, and teams facing SOC 2, ISO 27001, or NIS2 audits who need device evidence without rolling out MDM to personal machines. This file indexes the marketing site at xfa.tech. Product documentation lives at https://docs.xfa.tech (see https://docs.xfa.tech/llms.txt). ## Start here - [XFA home](https://xfa.tech/): User-driven device security that keeps work moving. XFA checks every device at sign-in and people fix issues themselves, without an IT team. - [How XFA works](https://xfa.tech/how-it-works): XFA checks every device at sign-in, lets people fix issues straight from the XFA app, and follows up without anyone chasing. Each step, from setup to privacy. - [Pricing](https://xfa.tech/pricing): XFA Free verifies devices at sign-in and warns people, with four core device checks, Built-in Passkey, the Fix button and step by step guides, one identity provider, and no user cap. Pro (€4,90 per user per month) runs all nine core checks and adds the dashboard, details on discovered devices, automatic alerts and reminders, unlimited identity providers, the export to your governance tool, and alerts in Slack or Microsoft Teams. Max (€7,90 per user per month) runs all 26 core and extended checks and adds blocking at sign-in. Enterprise is priced on request. Per-user pricing, unlimited devices. - [Device security on autopilot](https://xfa.tech/device-security): Campaign landing page: XFA finds and checks every device used for work, including freelancers' own laptops, against your security policy at sign-in. Privacy-respecting, no MDM. ## Product ## Compliance and integrations - [Compliance overview](https://xfa.tech/compliance): Device evidence for SOC 2, ISO 27001, NIS2, DORA, and GDPR audits, from a check of every device at sign-in. - [Integrations](https://xfa.tech/integrations): The identity providers XFA checks devices in, the compliance platforms it sends device results to, and Slack and Microsoft Teams alerts. - [Vanta](https://xfa.tech/integrations/vanta): Share XFA device data with Vanta. - [Drata](https://xfa.tech/integrations/drata): Share XFA device data with Drata. - [Thoropass](https://xfa.tech/integrations/thoropass): Share XFA device data with Thoropass. - [TrustCloud](https://xfa.tech/integrations/trustcloud): Share XFA device data with TrustCloud. ## Comparisons - [All comparisons](https://xfa.tech/compare): How XFA compares with MDM, Okta, Duo, 1Password, and Beyond Identity. Device checks at sign-in, no MDM or admin rights. - [Okta Device Assurance](https://xfa.tech/okta-comparison): Device checks without enrolling in Okta Verify. - [1Password (formerly Kolide)](https://xfa.tech/1password-comparison): 1Password Device Trust alternative, no admin rights. - [Duo Security](https://xfa.tech/duo-comparison): A Duo alternative people install themselves. - [Beyond Identity](https://xfa.tech/beyond-identity-comparison): A Beyond Identity alternative, no certificates. - [MDM alternatives: Intune, Jamf, JumpCloud, and Iru](https://xfa.tech/mdm-alternative): An MDM alternative with nothing to enroll. - [Do you need an MDM?](https://xfa.tech/mdm-comparison): Checking devices without taking control of them. - [Microsoft Intune](https://xfa.tech/microsoft-comparison): An Intune alternative that leaves devices alone. - [Jamf](https://xfa.tech/jamf-comparison): A Jamf alternative for every device. - [JumpCloud](https://xfa.tech/jumpcloud-comparison): A JumpCloud alternative without the MDM. - [Iru (formerly Kandji)](https://xfa.tech/iru-comparison): An Iru alternative that covers Linux. ## Use cases - [Use cases overview](https://xfa.tech/usecases): XFA by situation (no IT team, devices outside your MDM, BYOD, and contractors) and by industry. Everyone starts on the Free plan. ### By situation - [No IT team](https://xfa.tech/no-it-team): For teams where nobody is the IT team. Every device is checked at sign-in, and onboarding runs itself: people set up the XFA app when they sign in and fix issues with its guides. - [Devices outside your MDM](https://xfa.tech/cover-every-gap): Some laptops are in an MDM, some are not, or there is no MDM at all. XFA checks every device the same way at sign-in. - [BYOD and freelancers](https://xfa.tech/byod-and-freelance): Personal and contractor laptops are checked at sign-in and fixed from the XFA app, with no MDM enrollment. The device stays theirs. ### By industry - [Startups](https://xfa.tech/usecases/startups): For startups with no IT team. Every laptop is checked at sign-in from the first day, so the first customer security questionnaire gets real answers. - [Technology](https://xfa.tech/usecases/technology): For tech teams. Developer laptops are checked at sign-in to GitHub and cloud consoles, contractors included, and developers keep their admin rights. - [Agencies](https://xfa.tech/usecases/agencies): For agencies and creative studios. Staff and freelancer laptops are checked at sign-in, with the agency and its client organizations in one XFA account. - [Healthcare](https://xfa.tech/usecases/healthcare): For health tech companies. Every laptop that reaches patient data is checked at sign-in, with the checks set against what HIPAA, GDPR, and ISO 27001 ask about. - [Fintech](https://xfa.tech/usecases/fintech): For fintech companies. Every laptop that reaches the back office or card data is checked at sign-in, with the checks mapped to PCI DSS and DORA. - [Enterprise](https://xfa.tech/usecases/enterprise): For a team or subsidiary that moves faster than central IT. Laptops are checked at sign-in, beside the company MDM. - [Education](https://xfa.tech/usecases/education): For schools and universities. Staff and student laptops are checked at sign-in, with nothing to enroll. ## Customer stories - [madewithlove](https://xfa.tech/blog/madewithlove-testimonial): With no IT department and a distributed team, madewithlove uses XFA to see every device that signs in and prove device security to customers. - [Gateway.fm](https://xfa.tech/blog/gateway-testimonial): SOC 2 and ISO 27001 preparation for a remote team with many contractors, without giving up their privacy. - [Divbrands](https://xfa.tech/blog/divbrands-testimonial): PCI compliance for a team in more than a dozen countries, on personal and company laptops. - [Filmustage](https://xfa.tech/blog/filmustage-testimonial): SOC 2 and ISO compliance for a fully remote team of contractors on personal laptops, without MDM. - [Stratus Add-ons](https://xfa.tech/blog/stratus-testimonial): Securing personal devices for SOC 2 without the complexity of an MDM. - [Dnergy](https://xfa.tech/blog/dnergy-brings-flexibility-to-their-workforce-while-remaining-secure-with-xfa): Device security for a hybrid, cloud-native workforce on managed and unmanaged devices. - [Byteflies](https://xfa.tech/blog/how-byteflies-enables-flexibility-while-keeping-devices-secure-with-xfa): A medtech company keeps every device secure for ISO 13485 with the flexibility of a start-up. - [SEEN](https://xfa.tech/blog/how-seen-found-an-alternative-to-mdm): Device evidence for ISO 27001 at a video production company, without an MDM. ## Company - [About XFA](https://xfa.tech/about): The company and why it was started. - [Partners](https://xfa.tech/partners): Reseller and technology partnerships. - [Careers](https://xfa.tech/career): Open roles at XFA in Antwerp. - [Insider Program](https://xfa.tech/insider-program): Try upcoming XFA features and prototypes early. Each project has its own waitlist. - [Blog](https://xfa.tech/blog): Articles on BYOD, MDM alternatives, device security, and compliance. - [Privacy](https://xfa.tech/privacy): How XFA handles data. ## Resources - [Talk to us](https://xfa.tech/talk-to-us): Book a 30 minute call about your setup with the XFA team. - [Compare plans](https://xfa.tech/pricing): What each plan includes, from XFA Free to Enterprise, to choose the one that fits your setup. - [Download](https://xfa.tech/download): Get the XFA app. ## Documentation - [Documentation home](https://docs.xfa.tech): Setup and usage guides for admins and end users. - [Documentation index for models](https://docs.xfa.tech/llms.txt): Structured index of the docs site. - [Changelog](https://docs.xfa.tech/changelog): Product updates, newest first.