Device security for teams inside large enterprises.
Leave the company MDM where it is. Your team sets its own rules, and XFA checks every laptop against them each time someone signs in. People fix what is off themselves. No change request.
Free to start for your whole team: 4 device checks at every sign-in, and people are guided to fix issues themselves, automatically or by hand.
Sound familiar?
A new rule in the MDM takes a quarter. The customer’s security review is due next month.
Our contractors were never going to get a laptop from central IT.
Central IT looks after every laptop in the company. We are one small team with our own apps.
Central IT keeps the MDM.
Your team keeps its pace.
The MDM keeps managing the laptops central IT hands out. XFA adds a check at each sign-in to your team’s apps, on every laptop, whoever owns it.
More on devices outside your MDM| Part of the job | Central IT, with the MDM | Your team, with XFA |
|---|---|---|
| Sign-in to your team’s apps | The identity provider, as it runs today | XFA, connected once for your team’s group only |
| Laptops your team works on | The ones central IT issued and enrolled | Company, contractor, and personal laptops, checked against the same rules |
| The rules | The company baseline, set by central IT | Your team’s rules, changed when you decide |
| When something is off | A ticket in central IT’s queue | The person fixes it in the XFA app |
| Proof for a customer or auditor | MDM reports, when central IT can pull them | Your device list, exported as CSV or sent to Vanta or Drata |
Checked before your team’s tools open.
Your team writes the rules. You pick the checks, and for each one whether a failing laptop gets a warning or a block, and after how many days. XFA connects to your team’s group in the identity provider. Nobody outside it is checked.
TeamsXFA AwarenessTheir privacy stays theirs.
XFA checks security settings and nothing else. Nothing on the laptop changes unless its owner says yes.
Visit our Trust Center (opens in a new tab)Your organization sees
- Security check results
- Device name, model, and operating system
- When the device last checked in
- The work email it’s linked to
XFA never collects
- Private messages or emails
- Personal files or content
- Browsing history
- Screen recordings or screenshots
- Passwords or login credentials
- Location data
ISO 27001 certified
GDPR compliant- Made in Belgium
- Encrypted at rest and in transit
Questions to settle before you ask central IT
Compare plans
Does XFA replace our MDM?
No. XFA checks every device that signs in to the apps you connect, including contractor and personal laptops nobody enrolled. The MDM keeps managing the laptops central IT enrolled, and XFA leaves it alone.
Where XFA and an MDM differDo we need central IT to set it up?
Only if central IT runs your identity provider. In that case they connect XFA once, for your team’s group, and that is all you need from them. If your team has its own identity provider, you connect it yourself.
Can we start without involving the whole company?
Yes. XFA checks only the groups you assign in your identity provider. Start with your own laptop, then your team. Everyone outside the group signs in as before.
How XFA worksDo we need a large company contract for this?
No. What you pay depends on your team, not on the size of the company around it. XFA is free to start, and the pricing page shows what you can add.
See pricingOne request to central IT.
The rest is your team’s.
Start with your own laptop. Then ask whoever runs the identity provider to connect XFA for your team’s group.
