Sold by: XFA
Deployed on AWS
Free Trial
AWS Free Tier
User-driven device security that keeps work moving.
4.9
Overview
Every phone and laptop checked at sign-in, no IT team needed.
Most device security was built for companies with an IT department that owns every laptop. Fast-growing tech companies usually have neither. Security lands on the CTO's desk, and people work on their own laptops or as contractors.
XFA is a modern IT security platform made for these companies. Everyone keeps working on the device they already use. XFA checks it is secure at sign-in and takes no control of it.
When something needs fixing, the person using the device takes action from the XFA app. You get full visibility from day one, and onboarding new colleagues runs automatically, without hiring IT.
Why fast-growing tech companies use XFA?
Use the devices you already have: company-issued, personal and contractor laptops and phones. No new hardware to buy.
No IT hire needed: people fix issues themselves with step-by-step guides, so security work stays off the CTO's desk.
Privacy people accept: XFA takes no control of the device and needs no admin rights on it. Personal devices stay personal.
Ready for audits: device evidence for ISO 27001, NIS2 and customer security reviews, exported automatically to compliance platforms like Vanta.
Set up in 15 minutes, in three steps:
- Create your XFA account. Sign up and add your organization's details.
- Add XFA to your identity provider. Connect it as an MFA method or as an external identity provider in Google Workspace, Microsoft Entra ID, Okta, OneLogin, Ping Identity or Keycloak. You copy three values across.
- Tune your policy. Decide when XFA warns and when it blocks. You can test it without locking anyone out.
From then on, every sign-in gets checked. People install the XFA app the first time they sign in, with no admin rights needed. If a check fails, they fix it themselves in one click or by following the step-by-step guide.
Highlights
- Every device covered: company-issued, personal and contractor laptops and phones, in one platform.
- Live in about 15 minutes: connect your identity provider and people onboard themselves.
- Takes no control of the device: no admin rights needed, so personal devices stay personal.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free according to the free trial terms set by the vendor.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Free | Every device checked at sign-in. People install XFA themselves at their first sign-in. Warns people when a check fails. 4 device security checks. One click fixes from the sign-in page, or a step by step guide Dashboard with a list of device issues. Built-in Passkey, with no code to type Works on macOS, Windows, Linux, iOS, and Android. | $0.00 |
Pro | Everything in Free, plus: 9 core checks. Monthly alerts and reminders. Details on discovered devices. Unlimited identity providers, governance export, and Slack or Teams alerts. | $59.00 |
Max | Everything in Pro, plus: 26 core and extended checks. Block insecure devices at sign-in. Stop people from skipping verification. Sign in without installing the app. | $89.00 |
Dimensions summary
XFA Device Trust offers three tiers priced per person, with every device for that person included. The tiers build on each other. Free runs 4 device checks at sign-in and warns people when a check fails. Pro adds 9 core checks, device details, unlimited identity providers, governance export, and chat alerts. Max adds 26 core and extended checks, blocks insecure devices at sign-in, and lets people sign in without installing the app. You pick a tier based on how many checks you need and whether you want to block devices.
Top-of-mind questions for buyers
One unit is one person. Each person's price covers every device they sign in with, whether company-owned, personal, or contractor. There is no cap on devices per person, so adding a laptop and a phone for the same person does not raise the count.
You can move up when you need more. Free gives 4 checks at sign-in. Move to Pro for 9 core checks and chat alerts, or to Max for 26 checks and the ability to block insecure devices. Each tier includes everything in the one below it.
Only Max blocks devices. On Free and Pro, a person who fails a check is warned but can still sign in. On Max, you choose per check whether a failed device is refused sign-in until fixed. Max also stops people from skipping the verification step.
xfa.tech
Helpful?
Vendor refund policy
Please contact us at support@xfa.tech .
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
For support with any part of the XFA product, please contact us at support@xfa.tech or through the integrated chat on our website or dashboard.
Support is available during business hours, extended support can be added to the contract.
Buyers can expect help via email or through the integrated chat in the dashboard for general inquiries, troubleshooting, and product guidance.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
1Password Device Trust Core enforces device health and compliance policies in real time by blocking unhealthy devices from accessing web apps via the browser extension. Device Trust Core walks users through resolving issues at the moment of access, enabling previously unattainable levels of compliance amid an ever-changing security environment.
KeyScaler™ addresses the challenges of Identity and Access Management for the Internet of Things (IoT) without human intervention. It dramatically simplifies the process of establishing trust for the IoT, enabling end-to-end security architecture and scale for the IoT.
1Password Device Trust Connect requires a device to be known, trusted, and compliant before granting access to protected applications, whether managed or unmanaged. Enforce custom compliance Checks, discover AI tools running on endpoints, and let employees self-remediate, all via an IdP integration and the 1Password browser extension.
Browse Bravely with Prisma Browser. Allow employees to work securely on any device, managed and unmanaged, while delivering a familiar user experience. Stop AI-generated phishing, advanced malware and data exposure. Safely enable access to any web, SaaS, GenAI and private application.
To speak with a sales rep, please use: https://www.paloaltonetworks.com/company/contact-sales
Customer reviews
Hristo I.
XFA - Simple to deploy, keeps our BYOD fleet compliant
Reviewed on Jul 07, 2026
Review provided by G2
What do you like best about the product?
XFA offers a simple, user-friendly UI. It's easy for admins to deploy and install, and end users can self-onboard with minimal effort. It also respects user privacy in BYOD environments.
What do you dislike about the product?
So far I haven't run into any significant drawbacks.
What problems is the product solving and how is that benefiting you?
XFA ensures that all of our BYOD devices stay compliant, and it helps us discover new devices accessing our SaaS tools.
Loïc P.
Easy to Use with Seamless Vanta Integration
Reviewed on Jun 16, 2026
Review provided by G2
What do you like best about the product?
Easy to use product, perfect integration with tools like Vanta
What do you dislike about the product?
Nothing at all, no remarks to make here.
What problems is the product solving and how is that benefiting you?
It makes sure that all our mobile devices are compliant
Computer Software
Simple, Clear Explainers That Make Getting Things Done Easy.
Reviewed on Apr 22, 2026
Review provided by G2
What do you like best about the product?
Simplicity. Explainers on how to get things done.
What do you dislike about the product?
Not a problem (in fact, it is the opposite), they update the app too often.
What problems is the product solving and how is that benefiting you?
1 Keep track of security issues with the devices linked to my organization. 2 Have an updated list of hardware assets.
Jim S.
XFA Makes Elementary Device Security Easy, Clear and Fast
Reviewed on Apr 10, 2026
Review provided by G2
What do you like best about the product?
In a few points: ease of use, clear dashboards, fast and efficient support (by email or through appointments) that’s always delivered with a friendly attitude, fair pricing, and non-invasive security.
We started using XFA last year, and it has been a very useful companion for our IT team when managing high-level device security. It’s given us a lot of insight, and it has also saved us time on support thanks to the clear tutorials our colleagues can follow.
The app itself, whether on computer or mobile, is very easy for our coworkers to install and use. It’s lightweight and respects the privacy of BYOD users, which is especially important for us.
We started using XFA last year, and it has been a very useful companion for our IT team when managing high-level device security. It’s given us a lot of insight, and it has also saved us time on support thanks to the clear tutorials our colleagues can follow.
The app itself, whether on computer or mobile, is very easy for our coworkers to install and use. It’s lightweight and respects the privacy of BYOD users, which is especially important for us.
What do you dislike about the product?
A key feature that is missing is the possibility to create user groups and allow us to apply policy to them.
A dream scenario would be that, through the office integration, XFA would automatically fetch Office groups, and allow us to apply specific policies to them. So that the onboarding of new colleagues from various departments is as automated as possible.
A dream scenario would be that, through the office integration, XFA would automatically fetch Office groups, and allow us to apply specific policies to them. So that the onboarding of new colleagues from various departments is as automated as possible.
What problems is the product solving and how is that benefiting you?
XFA saves us time in support, but also in hardware hygiene and a company culture.
Thibaut D.
Efficient MDM with Exceptional Support
Reviewed on Apr 03, 2026
Review provided by G2
What do you like best about the product?
I like XFA's good UI and clear interface, which provides a positive user experience. I also appreciate the nice team at XFA who are always helpful and constructive, especially when addressing issues and fixing bugs as soon as possible. The initial setup of XFA was very easy, and overall, everything works fine.
What do you dislike about the product?
/
What problems is the product solving and how is that benefiting you?
I use XFA for up-to-date devices and security checks without breaching privacy on personal devices.