Skip to content

XFA device security changelog

tech.xfa/xfa

3 changes recorded. MCP Harbor re-reads this listing from the official registry every six hours and asks the live server what it exposes, and keeps what changed between one look and the next.

  • server.json 3 fields changed
    description
    XFA's remote MCP server — query device posture, compliance, policies & CVEs. Read-only. XFA device security, read-only: which devices pass their checks or have known vulnerabilities.
    title
    xfa XFA device security
    version
    0.1.2 0.1.3

  • llms.txt +5 −3

    https://xfa.tech/llms.txt

    − XFA checks each device when someone signs in through your identity provider (Google Workspace, Microsoft Entra ID, Okta, OneLogin, Ping Identity, or Keycloak). When a check fails, the person presses Fix and approves the suggested fix, or follows a step by step guide, and XFA checks again. XFA warns people early and blocks only when you tell it to. It covers company, personal, and contractor laptops and phones alike, with no MDM enrollment, and it reports whether a device meets your rules, not wh− - [How XFA works](https://xfa.tech/how-it-works): XFA checks every device at sign-in, lets people fix issues straight from the XFA app, and follows up without anyone chasing. Each step, from setup to privacy.− - [Compare plans](https://xfa.tech/pricing): What each plan includes, from XFA Free to Enterprise, to choose the one that fits your setup.+ XFA checks each device when someone signs in through your identity provider (Google Workspace in beta, Microsoft Entra ID, Okta, OneLogin, Ping Identity, or Keycloak). When a check fails, the person presses Fix and approves the suggested fix, or follows a step by step guide, and XFA checks again. XFA warns people early and blocks only when you tell it to. It covers company, personal, and contractor laptops and phones alike, with no MDM enrollment, and it reports whether a device meets your rules+ - [How XFA works](https://xfa.tech/how-it-works): You set the device rules once. XFA checks every device at sign-in, people fix what is off themselves, and XFA sends risk alerts until it is fixed.+ - [Sign-in verification](https://xfa.tech/sign-in-verification): XFA checks every device inside the sign-in you already use, on Google Workspace (beta), Microsoft Entra ID, Okta, OneLogin, Ping Identity, or Keycloak.+ - [Device checks](https://xfa.tech/device-checks): The checks XFA runs on macOS, Windows, Linux, iOS and Android, which ones each plan includes, and what the browser can check without the app.+ - [Fix guides](https://xfa.tech/fix-guides): When a check fails, XFA shows the person a clear guide, or a Fix button they approve, then checks again. Fewer tickets, and nobody stuck waiting on IT.

  • llms.txt +54 −44

    https://xfa.tech/llms.txt

    − > XFA is privacy-respecting Zero Trust device security without an MDM. It verifies that any device used for work meets your security policy at sign-in, without installing intrusive device management and without seeing personal data. End users install XFA and fix their own devices themselves, so there is no IT rollout, no imaging and no helpdesk queue. Built for BYOD, contractors, freelancers and any unmanaged device that traditional MDM cannot reach.− XFA works in three stages. **Discovery** finds the devices actually used for work through your identity provider. **Awareness** notifies and guides users to fix risks themselves. **Enforcement** adds a device check at sign-in that warns or blocks based on your policy. It integrates with your existing identity provider (Okta, Microsoft Entra ID, Google Workspace) and applications, uses a lightweight agent with agentless verification where supported, and is privacy-respecting by design: XFA report− Typical buyers are security and IT leaders at companies with hybrid or BYOD workforces, and teams facing SOC 2, ISO 27001 or NIS2 audits who need device evidence without rolling out MDM to personal machines.− - [XFA home](https://xfa.tech/): What XFA does and who it is for. BYOD, solved.− - [How it works](https://xfa.tech/how-it-works): The full picture, from device discovery through to enforcement at sign-in.− - [Pricing](https://xfa.tech/pricing): Plans and pricing, with a 14-day free trial.− - [Book a demo](https://xfa.tech/request-demo): Talk to the XFA team.− ## The problem XFA solves− - [MDM alternative](https://xfa.tech/mdm-alternative): Why device security without MDM, and what changes when you stop trying to manage personal devices.− - [BYOD and freelancers](https://xfa.tech/byod-and-freelance): Securing personal and contractor devices that MDM cannot reach.− - [Device security on auto-pilot](https://xfa.tech/device-security): Campaign landing page: XFA discovers and verifies every device used for work, including freelancers' own laptops, and enforces your security policy automatically. Privacy-respecting, no invasive MDM.− - [Device checks](https://xfa.tech/device-checks): The specific security settings XFA verifies: encryption, screen lock, OS version, antivirus, browser version, remote access.− - [Cover every gap](https://xfa.tech/cover-every-gap): The unmanaged-device blind spot in most security programmes.− - [Discovery](https://xfa.tech/discovery): Find every device accessing your business tools, including ones nobody registered.− - [Awareness](https://xfa.tech/awareness): Automated reminders and verification requests that get users to fix their own devices.− - [Enforcement](https://xfa.tech/enforce): Check devices at sign-in and warn or block based on policy.− - [Agentless](https://xfa.tech/agentless): Verify supported devices without installing an agent.− - [Silent MFA](https://xfa.tech/mfa): Turn a trusted device into phishing-resistant MFA, with no codes and no friction.− - [Phishing Lab](https://xfa.tech/phishing): Forward suspicious email for real-time forensic analysis.− ## Compliance− - [Compliance overview](https://xfa.tech/compliance): Automated device security monitoring and reporting for audit evidence.− - [Integrations](https://xfa.tech/integrations): How XFA connects to the rest of your stack.− - [XFA vs MDM](https://xfa.tech/mdm-comparison): Device security without device management, and where each approach fits.− - [XFA vs Jamf](https://xfa.tech/jamf-comparison): Apple device management compared with cross-platform device trust.− - [XFA vs Microsoft Intune](https://xfa.tech/microsoft-comparison): Intune compared with XFA for unmanaged and BYOD devices.− - [XFA vs JumpCloud](https://xfa.tech/jumpcloud-comparison): Directory-led device management compared with XFA.− - [XFA vs Okta](https://xfa.tech/okta-comparison): XFA checks device posture without agents, enrollment, or MDM overhead — built for teams who want Okta-grade trust signals without Okta-grade setup.− - [XFA vs Duo](https://xfa.tech/duo-comparison): Duo device trust compared with XFA.− - [XFA vs Beyond Identity](https://xfa.tech/beyond-identity-comparison): Passwordless and device trust compared with XFA.− - [XFA vs 1Password](https://xfa.tech/1password-comparison): 1Password device trust compared with XFA.− - [XFA vs IRU](https://xfa.tech/iru-comparison): IRU compared with XFA.− ## By industry− - [Use cases overview](https://xfa.tech/usecases): Where XFA fits by sector.− - [Fintech](https://xfa.tech/usecases/fintech): Device security for regulated financial services.− - [Healthcare](https://xfa.tech/usecases/healthcare): Protecting patient data on unmanaged devices.− - [Technology](https://xfa.tech/usecases/technology): Device security for software companies.− - [Startups](https://xfa.tech/usecases/startups): Security that scales without an IT team.− - [Enterprise](https://xfa.tech/usecases/enterprise): Covering the devices enterprise MDM misses.− - [Agencies](https://xfa.tech/usecases/agencies): Contractor and freelancer device security.− - [Education](https://xfa.tech/usecases/education): Device security across staff and student devices.+ > XFA checks every device at sign-in and guides people to fix issues themselves. IT security for fast-growing tech companies, without building an IT team.+ XFA checks each device when someone signs in through your identity provider (Google Workspace, Microsoft Entra ID, Okta, OneLogin, Ping Identity, or Keycloak). When a check fails, the person presses Fix and approves the suggested fix, or follows a step by step guide, and XFA checks again. XFA warns people early and blocks only when you tell it to. It covers company, personal, and contractor laptops and phones alike, with no MDM enrollment, and it reports whether a device meets your rules, not wh+ Typical buyers are security and IT leaders at companies with hybrid or BYOD workforces, and teams facing SOC 2, ISO 27001, or NIS2 audits who need device evidence without rolling out MDM to personal machines.+ - [XFA home](https://xfa.tech/): User-driven device security that keeps work moving. XFA checks every device at sign-in and people fix issues themselves, without an IT team.+ - [How XFA works](https://xfa.tech/how-it-works): XFA checks every device at sign-in, lets people fix issues straight from the XFA app, and follows up without anyone chasing. Each step, from setup to privacy.+ - [Pricing](https://xfa.tech/pricing): XFA Free verifies devices at sign-in and warns people, with four core device checks, Built-in Passkey, the Fix button and step by step guides, one identity provider, and no user cap. Pro (€4,90 per user per month) runs all nine core checks and adds the dashboard, details on discovered devices, automatic alerts and reminders, unlimited identity providers, the export to your governance tool, and alerts in Slack or Microsoft Teams. Max (€7,90 per user per mont+ - [Device security on autopilot](https://xfa.tech/device-security): Campaign landing page: XFA finds and checks every device used for work, including freelancers' own laptops, against your security policy at sign-in. Privacy-respecting, no MDM.+ <!-- Sign-in verification: /sign-in-verification is listed here while the page is live -->+ <!-- Device checks: /device-checks is listed here while the page is live -->+ <!-- Fix guides: /fix-guides is listed here while the page is live -->+ <!-- Built-in Passkey: /built-in-passkey is listed here while the page is live -->+ <!-- Device discovery: /discovery is listed here while the page is live -->+ ## Compliance and integrations+ - [Compliance overview](https://xfa.tech/compliance): Device evidence for SOC 2, ISO 27001, NIS2, DORA, and GDPR audits, from a check of every device at sign-in.+ - [Integrations](https://xfa.tech/integrations): The identity providers XFA checks devices in, the compliance platforms it sends device results to, and Slack and Microsoft Teams alerts.+ - [All comparisons](https://xfa.tech/compare): How XFA compares with MDM, Okta, Duo, 1Password, and Beyond Identity. Device checks at sign-in, no MDM or admin rights.+ - [Okta Device Assurance](https://xfa.tech/okta-comparison): Device checks without enrolling in Okta Verify.+ - [1Password (formerly Kolide)](https://xfa.tech/1password-comparison): 1Password Device Trust alternative, no admin rights.+ - [Duo Security](https://xfa.tech/duo-comparison): A Duo alternative people install themselves.+ - [Beyond Identity](https://xfa.tech/beyond-identity-comparison): A Beyond Identity alternative, no certificates.+ - [MDM alternatives: Intune, Jamf, JumpCloud, and Iru](https://xfa.tech/mdm-alternative): An MDM alternative with nothing to enroll.+ - [Do you need an MDM?](https://xfa.tech/mdm-comparison): Checking devices without taking control of them.+ - [Microsoft Intune](https://xfa.tech/microsoft-comparison): An Intune alternative that leaves devices alone.+ - [Jamf](https://xfa.tech/jamf-comparison): A Jamf alternative for every device.+ - [JumpCloud](https://xfa.tech/jumpcloud-comparison): A JumpCloud alternative without the MDM.+ - [Iru (formerly Kandji)](https://xfa.tech/iru-comparison): An Iru alternative that covers Linux.+ ## Use cases+ - [Use cases overview](https://xfa.tech/usecases): XFA by situation (no IT team, devices outside your MDM, BYOD, and contractors) and by industry. Everyone starts on the Free plan.+ ### By situation+ - [No IT team](https://xfa.tech/no-it-team): For teams where nobody is the IT team. Every device is checked at sign-in, and onboarding runs itself: people set up the XFA app when they sign in and fix issues with its guides.+ - [Devices outside your MDM](https://xfa.tech/cover-every-gap): Some laptops are in an MDM, some are not, or there is no MDM at all. XFA checks every device the same way at sign-in.+ - [BYOD and freelancers](https://xfa.tech/byod-and-freelance): Personal and contractor laptops are checked at sign-in and fixed from the XFA app, with no MDM enrollment. The device stays theirs.+ ### By industry+ - [Startups](https://xfa.tech/usecases/startups): For startups with no IT team. Every laptop is checked at sign-in from the first day, so the first customer security questionnaire gets real answers.+ - [Technology](https://xfa.tech/usecases/technology): For tech teams. Developer laptops are checked at sign-in to GitHub and cloud consoles, contractors included, and developers keep their admin rights.+ - [Agencies](https://xfa.tech/usecases/agencies): For agencies and creative studios. Staff and freelancer laptops are checked at sign-in, with the agency and its client organizations in one XFA account.+ - [Healthcare](https://xfa.tech/usecases/healthcare): For health tech companies. Every laptop that reaches patient data is checked at sign-in, with the checks set against what HIPAA, GDPR, and ISO 27001 ask about.+ - [Fintech](https://xfa.tech/usecases/fintech): For fintech companies. Every laptop that reaches the back office or card data is checked at sign-in, with the checks mapped to PCI DSS and DORA.+ - [Enterprise](https://xfa.tech/usecases/enterprise): For a team or subsidiary that moves faster than central IT. Laptops are checked at sign-in, beside the company MDM.+ - [Education](https://xfa.tech/usecases/education): For schools and universities. Staff and student laptops are checked at sign-in, with nothing to enroll.

    Showing the first 40 of each.