Defence & National Security
Defence environments break the assumptions most endpoint products are built on: reliable connectivity, a controlled office, and a support model that can be offshore as long as it is cheap.
The distinguishing constraint is not classification. It is that the device is frequently somewhere the network is not, and the moments that matter most are the moments with the least connectivity. A detection engine that has to reach a cloud service to make a decision is not useful in the field, and a compliance model that only evaluates at check-in has nothing to say about the fortnight in between.
The second constraint is people. Who has standing access to the management platform, where they are, and what vetting they hold is a control in its own right — and it is the one most often waved through in a proposal and discovered later.
The third is that requirements here regularly have no product answer. Capturing operational imagery without it reaching a camera roll, or putting a directory on a handset without exposing the directory, are the sort of problems we ended up building software for because nothing on the market did it.
What we focus on in this sector
Scope is agreed per engagement. These are the areas that consistently carry the most value here.
On-device detection
Threat detection that runs locally and keeps working offline, reporting risk rather than shipping traffic and messages to a service for inspection.
Detection that changes access
A compromised device loses access automatically through conditional access, rather than waiting for a human to read an alert queue.
Controlled field data capture
Operational photography and field data captured inside the organisational boundary — encrypted, delivered to an approved repository, and never written to the device photo library.
Custody across the lifecycle
Devices registered to your organisation at the point of supply, tracked through their service life, and sanitised to a documented standard with evidence at disposal.
Named delivery personnel
Cleared, onshore engineers assigned to the engagement, with the access population documented rather than implied.
What changes once it is running properly
- Protection that holds when the device is off the network
- A documented chain of custody from purchase order to certified erasure
- Field capture that produces an audit trail an assessor will accept
- Applications that meet a requirement no product on the market meets
What usually applies
A few of the organisations we have delivered for
Common questions
Does mobile threat defence work without connectivity?
The detection engine we deploy performs its analysis on the device, so it continues to detect network, device, application and phishing threats offline. Reporting to the console resumes when connectivity does, but the protection does not depend on it.
Does monitoring mean reading users’ traffic?
No, and that distinction is what makes the capability deployable. Analysis happens locally on the handset and what reaches the organisation is a risk signal, not the user’s browsing, messages or traffic.
Can you build to a requirement that has no product answer?
That is most of what our development work is. Both of our security products exist because a customer requirement could not be met by anything available, and the same team builds to requirement where that is the only viable path.
Relevant to this sector
MDM is not mobile security
Device management tells you a handset complies with your policy. It does not tell you the handset is being attacked. That gap matters.
Smishing works because a phone is a worse place to be careful
The same person who spots a phishing email at their desk taps the link on their phone. That is not a training failure — the device is structurally worse at this.
Build or buy: the four questions that actually decide it
Custom software is usually the wrong answer and occasionally the only one. These are the questions that tell you which case you are in.
The pattern travels
Parliamentary & Ministerial
High-profile users, high turnover at election cycles, and a very low tolerance for a device that does not just work.
ExploreState & Territory Government
Jurisdictional agencies balancing frontline mobility against budgets and standards that rarely move together.
ExploreCritical Infrastructure & Utilities
SOCI-regulated operators with dispersed field teams, remote sites and obligations that now have teeth.
ExploreTalk to us about Defence & National Security
Tell us what the environment looks like today. We will tell you honestly whether this is the right place to start.