With MDM
Integration with existing mobile device management, using its policies and app distribution.
Where the module helps during an attack
Mobile protection plays its primary role in initial access, typically phishing and malicious applications.
| Area | Level |
|---|---|
| Reconnaissance | no direct role |
| Initial access | primary role |
| Execution and persistence | additional protection |
| Escalation and lateral movement | additional protection |
| Impact | context |
| Investigation and recovery | context |
Mobile devices as fully protected endpoints
Phones and tablets access email, business applications and credentials, yet often sit outside normal security management. Singularity Mobile provides mobile threat defence for iOS, Android and ChromeOS, managed through the same platform as other modules.
According to the vendor, iOS, Android and ChromeOS devices are managed through one console with consistent policies, so security teams do not need a separate tool for each platform.
- Blocking phishing links in SMS, messaging apps, email and social networks.
- Assessing apps for risky permissions, suspicious behaviour and privacy concerns.
- Detecting man-in-the-middle attacks and risky Wi-Fi networks.
- Monitoring system versions, jailbreaks, rooting and configuration deviations.
- Restricting access to corporate resources when a device no longer meets policy.
How the module works in practice
The vendor says detection runs on the device, without sending data to the cloud for analysis or depending on connectivity. Users are alerted when they open a malicious link or join a risky network.
The module continually assesses installed apps and can block sideloaded applications on compromised devices.
If a device no longer meets policy, for example because of a jailbreak or risky app, the module can trigger an automated response and restrict corporate access. Specific responses depend on MDM and identity provider integrations.
Without MDM
The vendor also offers standalone deployment without MDM, distributing the app directly to users.
BYOD
Corporate data protection without monitoring personal content, browsing history or location.
Who needs mobile protection
The module suits organisations using mobile devices for email, business systems, approvals or MFA. Attackers may steal credentials there or bypass protections present on computers.
- Phishing outside email, beyond the reach of corporate mail filters.
- Apps containing malware or excessive permissions.
- Public Wi-Fi and spoofed networks while travelling.
- Outdated or modified systems with disabled protections.
Deployment and operation with APPSEC
Inventory
Device numbers and types, corporate and personal ownership, existing MDM and identity provider.
Policies
What is monitored, how users are alerted and when corporate access is restricted.
Pilot
Selected users verify distribution, alerts and everyday work impact.
Rollout
Gradual deployment, employee information and support as agreed.
What to check before buying
- Supported iOS, Android and ChromeOS versions in your device fleet.
- Deployment through existing MDM or as a standalone solution.
- Conditional access integration and authority to restrict access.
- Employee communication and consent for personal devices.
- Who assesses mobile alerts and how the helpdesk is involved.
