Verify every device, secure any user: Privacy-respecting Zero Trust alternative to traditional MDM for securing BYOD, freelancer, contractor, personal, and unmanaged devices.
The Privacy-Respecting Alternative to MDM that Secures 100% of Devices.
In the future, the only difference between devices used for work will be preference and who paid for them — not how they are secured. But today, most organizations are facing a massive visibility gap.
The Gap: Traditional tools typically secure only 40% of devices used for work.
The Unknown Risk: The remaining 60% are unknown or ignored, often because employees refuse IT management due to privacy concerns, or because they are personal/freelance devices (BYOD).
The Consequence? The average unmanaged device is 350 days behind on
security updates. This leaves your organization exposed to data breaches, while
IT teams struggle with manual tracking and user friction.
Why It Matters & How It Works
Solving real-world security challenges:
BYOD & External Access: Secure personal devices without adding complexity.
Simplified Compliance: Automated evidence for ISO 27001, NIS2, and more.
Zero Trust: Continuous health verification at every login.
Low Overhead: Automate security checks and remediation, freeing up your team.
Automate your device security in 3 steps:
Discovery: Automatically discover every device accessing your business tools. Gain full visibility into unknown and ignored devices without requiring any software or hardware installation.
Awareness: Automatically notify users about security issues. XFA provides a personalized guidance so users can fix issues themselves, reducing IT overhead.
Enforcement: The Flagship Feature. Implement Zero Trust by adding device security as an authentication factor. XFA checks key settings during sign-in and automatically blocks unsafe or non-compliant devices.
Highlights
100% Coverage: Secure corporate, BYOD, personal, and freelance devices with a single solution.
Zero Friction: ~15-minute setup with rapid, full company coverage.
Privacy-First: Security verification without intrusive MDM software.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Discover & Enforce (500 users included): All Essential pack features. Discover devices used for work. Enforcement at login. Risk-based device security policies. Automated export to GRC tool.
$44,500.00
Enterprise
Custom (500 users included): All Essential & Advanced pack features. Get insights in CVEs on devices. Discover devices in multiple IdPs. Multiple enforcement policies. Advanced MFA features.
$49,500.00
Essentials
Discover & Verify (500 users included): Discover devices used for work. Invite-based device verification. Self-onboarding for users. User communication about potential risks.
You choose one of three packs, each sold as a contract that includes 500 users. The packs build on each other. Essentials covers device discovery and invite-based verification with user self-onboarding. Advanced adds everything in Essentials, plus enforcement at login, risk-based policies, and automated export to your governance tool. Enterprise adds everything in Essentials and Advanced, plus device vulnerability insights, discovery across multiple identity providers, multiple enforcement policies, and added multi-factor authentication controls. Pricing scales as you move from discovery-focused to enforcement and custom compliance needs. Each pack covers unlimited devices per user.
Top-of-mind questions for buyers
What counts as one user for billing, and are personal or extra devices charged separately?
Each pack includes 500 users. A user is one person accessing your systems, not a device. Every user can connect unlimited devices at no extra charge. XFA discovers both company-managed and personal devices tied to each user without adding per-device fees.
How do I move from Essentials to Advanced or Enterprise as my needs grow?
Each pack builds on the one below it. Essentials covers discovery and verification. Advanced adds login enforcement and policies. Enterprise adds CVE insights, multiple identity provider discovery, multiple policies, and added MFA controls. To gain those capabilities, you select the higher pack. Enterprise pricing is custom, so contact XFA.
What device connection points does each pack cover, and does Enterprise change this?
Essentials and Advanced discover devices through a single identity provider connection. Enterprise discovers devices across multiple identity providers at once. XFA reads authentication logs from providers like your directory or workspace platform to find every device, whether managed or personal.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
For support with any part of the XFA product, please contact us at support@xfa.tech or through the integrated chat on our website or dashboard.
Support is available during business hours, extended support can be added to the contract.
Buyers can expect help via email or through the integrated chat in the dashboard for general inquiries, troubleshooting, and product guidance.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
iText Suite BYOL provides broad functionality for manipulating and processing PDFs using the acclaimed iText Core PDF library, plus additional features enabled by iText add-ons. Automate your document workflows using a scalable and cost-effective RESTful API.
pdfRest API Toolkit delivers powerful, secure, and scalable PDF processing, developed by the document experts at Datalogics.
With dozens of flexible API endpoints, it supports document conversion, editing, security controls, data extraction, redaction, XFA forms and Acroform handling, PDF to Office exports, and more. Easily integrate into any application or workflow to automate bulk, batch, and real-time document processing with full control via a dedicated EC2-based REST API.
Built on the Adobe® PDF Library™ - the same core technology that powers Adobe Acrobat - pdfRest offers the gold-standard solution for high-quality, customizable PDF automation trusted by developers and enterprises worldwide.
Run the full pdfRest PDF processing API as a self-hosted container in your own AWS account - 40+ REST API endpoints, entirely inside your VPC. Bring your own pdfRest license.
XFA - Simple to deploy, keeps our BYOD fleet compliant
Reviewed on Jul 07, 2026
Review provided by G2
What do you like best about the product?
XFA offers a simple, user-friendly UI. It's easy for admins to deploy and install, and end users can self-onboard with minimal effort. It also respects user privacy in BYOD environments.
What do you dislike about the product?
So far I haven't run into any significant drawbacks.
What problems is the product solving and how is that benefiting you?
XFA ensures that all of our BYOD devices stay compliant, and it helps us discover new devices accessing our SaaS tools.
Loïc P.
Easy to Use with Seamless Vanta Integration
Reviewed on Jun 16, 2026
Review provided by G2
What do you like best about the product?
Easy to use product, perfect integration with tools like Vanta
What do you dislike about the product?
Nothing at all, no remarks to make here.
What problems is the product solving and how is that benefiting you?
It makes sure that all our mobile devices are compliant
Computer Software
Simple, Clear Explainers That Make Getting Things Done Easy.
Reviewed on Apr 22, 2026
Review provided by G2
What do you like best about the product?
Simplicity. Explainers on how to get things done.
What do you dislike about the product?
Not a problem (in fact, it is the opposite), they update the app too often.
What problems is the product solving and how is that benefiting you?
1 Keep track of security issues with the devices linked to my organization. 2 Have an updated list of hardware assets.
Jim S.
XFA Makes Elementary Device Security Easy, Clear and Fast
Reviewed on Apr 10, 2026
Review provided by G2
What do you like best about the product?
In a few points: ease of use, clear dashboards, fast and efficient support (by email or through appointments) that’s always delivered with a friendly attitude, fair pricing, and non-invasive security.
We started using XFA last year, and it has been a very useful companion for our IT team when managing high-level device security. It’s given us a lot of insight, and it has also saved us time on support thanks to the clear tutorials our colleagues can follow.
The app itself, whether on computer or mobile, is very easy for our coworkers to install and use. It’s lightweight and respects the privacy of BYOD users, which is especially important for us.
What do you dislike about the product?
A key feature that is missing is the possibility to create user groups and allow us to apply policy to them.
A dream scenario would be that, through the office integration, XFA would automatically fetch Office groups, and allow us to apply specific policies to them. So that the onboarding of new colleagues from various departments is as automated as possible.
What problems is the product solving and how is that benefiting you?
XFA saves us time in support, but also in hardware hygiene and a company culture.
Thibaut D.
Efficient MDM with Exceptional Support
Reviewed on Apr 03, 2026
Review provided by G2
What do you like best about the product?
I like XFA's good UI and clear interface, which provides a positive user experience. I also appreciate the nice team at XFA who are always helpful and constructive, especially when addressing issues and fixing bugs as soon as possible. The initial setup of XFA was very easy, and overall, everything works fine.
What do you dislike about the product?
/
What problems is the product solving and how is that benefiting you?
I use XFA for up-to-date devices and security checks without breaching privacy on personal devices.