BlackBerry, iVerify, Lookout and NowSecure

About iVerify

Real-time threat telemetry from iVerify flows into SIEM, SOAR, and XDR platforms via open APIs. iVerify provides a mobile endpoint detection and response layer that operates independently of patch status and identifies active exploitation at the OS level regardless of OS version or compliance state. Device risk signals from iVerify flow into identity management systems such as Okta or Entra ID, which lets an organization enforce conditional access and restrict access to sensitive systems if a personal device is determined to be compromised.^[12][13][14]

The iVerify Mobile EDR agent deploys fleet-wide across iOS and Android. The iVerify Mobile EDR agent integrates with an existing MDM or MAM solution, or can be deployed standalone. iVerify deploys with MDM, with MAM, or completely standalone without requiring full device management. iVerify collects only the security telemetry needed to assess device integrity and does not monitor personal activity.^[3][12][14]

SmishGuard is a core component of the iVerify Enterprise Mobile EDR platform and is a mobile-native social engineering defense platform. SmishGuard detects and neutralizes smishing and social engineering attacks. SmishGuard deploys as a mobile-native extension of the iVerify Mobile EDR platform.^{[1][2][3][5][6][7][8][9][10][11][12][14][15][16]}

About Lookout

Lookout sells mobile security products, including mobile endpoint detection and response and Social Engineering Protection, that protect employee identities and corporate data. Lookout describes a two-pronged defense that combines Social Engineering Protection with mobile Endpoint Detection and Response (EDR).^[1][11]

Lookout says mobile devices now sit at the convergence of identity, access, and sensitive data, while most enterprise security tools were built for desktops, servers, and corporate networks rather than iOS and Android. Lookout says 93% of employees spend significant time away from their desks and rely on mobile devices as their primary interface for communication, data access, and decision-making. Lookout says 52% of generative AI activity now occurs on smartphones and 83% of phishing sites are designed to target mobile users. Lookout says EDR does not run on iOS and that email gateways do not see SMS, WhatsApp, or iMessage. Lookout describes a modular, mobile-native security platform backed by more than 15 years of focused mobile intelligence.

Lookout Mobile AI Security delivers continuous, real-time security across apps, devices, operating systems, networks, and content, without requiring VPN backhaul. Lookout says Mobile AI Security detects known and unseen threats, monitors posture, and integrates risk signals into the customer's stack. Its listed capabilities include App Security, which stops malicious apps, malware, trojans, and spyware, and Device and OS Integrity, which detects rooting, jailbreaking, and OS tampering. Lookout lists Network Security that detects rogue Wi-Fi and MITM attacks, and Phishing Protection that blocks malicious links across browsers, apps, and SMS. Lookout also lists Secure DNS, which encrypts and secures DNS traffic to prevent exfiltration, and App Risk Reputation, which scores behavioral risk across 420+ million apps.

The Social Engineering Protection module covers phishing, smishing, vishing, executive impersonation, QR code attacks, and malicious messaging across every channel, including WhatsApp, iMessage, Signal, and voice calls. Lookout analyzes incoming SMS, MMS, and RCS messages on iOS and Android to detect malicious links, phishing attempts, and suspicious intent. Lookout analyzes audio and voicemail to detect AI-generated voice clones and deepfakes. Lookout uses mobile identity signals and phone-number attributes to distinguish legitimate callers from suspicious numbers, and organizations can centrally block known or suspicious numbers.^[8]

The Advanced SOC (Mobile EDR) module extends true endpoint detection and response to iOS and Android, giving SOC teams access to raw mobile telemetry for proactive threat hunting. Advanced SOC (Mobile EDR) supports forensic analysis, bidirectional threat intel sharing, and integration with existing SIEM, SOAR, and XDR platforms. Lookout extracts a Software Bill of Materials directly from compiled app binaries and correlates it against CVE and CISA KEV data to show which apps, devices, and users are exposed. The AI Visibility & Governance module gives a security team an inventory of every AI app touching corporate data across corporate-owned and BYOD devices, and enables policy enforcement before sensitive data leaves the device.^[5]

Lookout publishes pages for specific industries. For financial services, Lookout protects the modern financial workforce across both corporate-owned and unmanaged (BYOD) devices, and streams mobile device posture signals into IAM and IdP frameworks such as Okta and Entra ID. For state and local government, Lookout Mobile EDR unites mobile threat data with the state's unified security architecture. For critical infrastructure, Lookout Mobile AI Security is designed to protect critical infrastructure organizations from cyber-physical risk. Lookout describes one deployment as detection and response for over 90,000 managed and unmanaged iOS and Android devices, with rapid deployment across thousands of devices through Microsoft Intune, and says it integrates with existing SIEM, SSO, and EMM platforms.^[14][15]

Lookout lists an office at 11130 Sunrise Valley Dr Suite 205, Reston, VA 20191. Lookout says its products have been certified as ISO/IEC 27001, 27017, and 27018 compliant since 2017. Lookout maintains a FedRAMP Moderate accreditation that is renewed on an annual cadence. The Lookout business continuity and disaster recovery program is aligned to ISO, SOC2 Type2 and FedRAMP standards.^{[1][6][7][9][14][15][16]}

About NowSecure

NowSecure sells mobile application risk management software that analyzes compiled iOS and Android app binaries on real devices to find hidden AI, risky SDKs, vulnerabilities and data flows. NowSecure says it helps organizations secure and govern mobile app risk, from code and dependencies to runtime behavior and data flows.

NowSecure says more than half of the 50,000+ mobile apps it analyzes each month contain undisclosed AI. NowSecure says most AI governance programs cover SaaS, cloud, and employee AI tools. NowSecure says it builds the mobile app record those programs are missing: which apps contain AI, what data it touches, where that data goes, and who owns the risk.

NowSecure analyzes the shipped mobile binary to identify AI models, SDKs, dependencies, APIs, and indicators of AI-generated code. NowSecure runs the app on real devices to observe live behavior, permissions, connections, and data movement. NowSecure says the result is a Dynamic SBOM showing every component and where its data lands. NowSecure says it fills the gap with binary and runtime truth, not source, SBOM, or SCA assumptions.

Mobile Application Risk Management brings four risk domains into one operating model. NowSecure says Mobile Application Risk Management exists to close visibility gaps before they become business events. NowSecure gives enterprises continuous, evidence-based visibility into the security, privacy, compliance, and AI risk inside the mobile apps they build, use, and manage. NowSecure says the new shape of mobile app risk management is continuous, evidence-based, and proportioned to business impact, governing security, privacy, safety, compliance, and AI risk in one program. NowSecure describes a living catalog of apps, SDKs, APIs, AI components, data destinations, and ownership across the mobile estate. NowSecure says it gives every accountable function the evidence to find hidden AI, govern data flows, and reduce risk across the apps an organization builds and uses.^[5]

NowSecure tests the compiled iOS and Android app on real devices, logged in, with every SDK and AI feature inside it. NowSecure says AI-Navigator logs in so dynamic testing reaches every post-login screen. NowSecure research found that authenticated mobile app security testing finds 78% more sensitive data risk. Customers can upload an IPA or APK, or trigger tests automatically from GitHub Actions, GitLab, Azure DevOps, Jenkins, CircleCI, or Bitrise. NowSecure maps findings to OWASP MASVS and sends them to the customer's tracker with remediation guidance. NowSecure adds Guided Testing or Pen Testing as a Service when an app needs an analyst to work through MFA. NowSecure identifies every component inside the compiled app and watches what each one does at runtime. NowSecure identifies the AI inside an app and shows what data reaches it.^[5][6]

NowSecure inspects compiled iOS, Android, and hybrid apps to identify every dependency, framework, and SDK actually present. NowSecure generates SBOMs for each build, storing version history and provenance. A signed, machine-readable SBOM in CycloneDX or SPDX is generated and versioned. NowSecure produces SBOMs automatically at each merge or release, within GitHub Actions, GitLab, Jenkins, and Azure DevOps. NowSecure correlates SBOM data with live CVE, CWE, and license feeds for immediate risk visibility. NowSecure says organizations using Dynamic Mobile SBOM transition from reactive audits to proactive risk governance.^[7]

NowSecure Privacy protects sensitive data, minimizes compliance exposure, and maintains trust. NowSecure tests for the OWASP MASVS throughout the mobile app security testing software and services. NowSecure supports organizations looking to comply with ISO 27001 by implementing mobile app security controls. NowSecure says it helps write the mobile security standards auditors rely on and maintains the open-source tools that power runtime analysis worldwide. Carlos Holguera, a NowSecure principal research engineer, co-leads the OWASP Mobile Application Security project that maintains MASVS and MASTG.^[6][8][9]

For mobile banking apps, NowSecure says new regulatory standards demand a real-time Mobile App BOM and continuous runtime validation. NowSecure says financial institutions are fully accountable for every component shipped to production, including software their internal engineers never wrote. NowSecure says it generates an audit-ready Mobile Application Bill of Materials through automated binary analysis on every build. NowSecure helps federal, local and state agencies, including AirForce’s BESPIN software factory, deliver secure mobile apps. NowSecure Platform performs static, dynamic, interactive and API security analysis across the mobile apps in an organization's environment.^[2][10][11]

NowSecure cites NIAP, ISO 17025, and Google MASA lab credentials. Independent auditor Coalfire completed its review of NowSecure and issued an attestation report finding zero deficiencies. NowSecure provides a SOC 2 report to requesters who first execute an NDA.^[6][8][12]