Skip to main content

Glossary

Mobile security

Mobile security covers the protection of smartphones and tablets, and the data on them, against loss, theft, malicious apps, phishing and network attacks. For an IT team it's a layered problem: OS controls enforced by an MDM handle most of it, a mobile threat defense tool handles the rest, and user habits decide how well either works.

How it works

Start with what actually goes wrong. Phones get lost or stolen, far more often than they get hacked. Users tap links in text messages (smishing is the most common phishing vector on mobile, according to every annual report since 2022). Apps ask for permissions they don't need. And devices run OS versions with known vulnerabilities because nobody made them update.

The operating systems answer with hardware-backed encryption, app sandboxing, signed updates and, since 2024, theft-specific features: Apple's Stolen Device Protection in iOS 17.3 and Google's Theft Detection Lock in Android 15 both make a snatched, unlocked phone harder to exploit. Those controls exist on every device. Whether they're turned on is a management question.

That's where the layers come in. An MDM enforces the basics: passcode, encryption, OS version floor, jailbreak and root detection, app allowlists, remote wipe, lost mode. A mobile threat defense (MTD) product such as Lookout, Zimperium or Microsoft Defender for Endpoint adds detection: malicious apps, phishing URLs, rogue Wi-Fi, exploit attempts, and reports the risk back to the MDM so a compromised device loses access. Identity closes the loop with conditional access, where a non-compliant device can't reach mail or files.

What none of this replaces is the update. Apple and Google now publish security bulletins monthly and ship Rapid Security Responses between releases; a fleet stuck two versions back carries every published vulnerability.

Why it matters for a fleet

The phone is the second factor for almost every login in the company. Compromise it and the MFA code, the mail, the Teams messages and the VPN certificate come with it.

Europe adds regulatory pressure. NIS2, applied in the EU member states since October 2024, expects entities in scope to prove they manage mobile risk, and GDPR breach notification applies to a lost, unencrypted phone holding customer data.

The pragmatic order of priorities: encryption and passcode enforced everywhere, an OS version floor with compliance rules, remote wipe tested at least once, then MTD for populations that handle sensitive data or travel a lot. Most incidents are stopped by the first three.

How Appaloosa handles it

Appaloosa enforces the MDM layer of mobile security on iOS, iPadOS, Android, Windows and macOS: passcode and encryption rules, restrictions, compliance policies evaluated continuously (OS version, jailbreak or root detection, required apps, last check-in), lost mode on company-managed devices, remote wipe and selective wipe. Non-compliant devices can be notified, lose their managed apps or be wiped, and the compliance state can feed your identity provider's access decisions. Hosting in France on SecNumCloud-qualified infrastructure keeps the fleet inventory itself in the EU. The policy set is on the mobile device management page.

Explore

See the full platform

Enrollment, apps, security, remote support: all in one place.

Explore Appaloosa →

See Appaloosa run on your fleet Book a demo

Frequently asked questions

Is an MDM enough for mobile security?
For most fleets, an MDM enforcing encryption, passcode, OS updates and remote wipe covers the majority of real incidents, which are lost and stolen devices. It doesn't detect phishing or malicious apps at runtime; that's the job of a mobile threat defense tool, worth adding for users handling sensitive data.
Do I need antivirus on iPhones and Android phones?
Not in the desktop sense. iOS doesn't allow traditional antivirus, and Android's sandbox plus Google Play Protect handle most malware. What adds value is mobile threat defense: phishing URL detection, rogue Wi-Fi alerts and app risk analysis, integrated with the MDM so a risky device is blocked automatically.
What's the first thing to do when a company phone is stolen?
Put it in lost mode from the MDM console, which locks the screen with a message and, on company-managed devices, can report its location. Then revoke the user's sessions in the identity provider. If the device doesn't turn up within a day, wipe it remotely; on an ADE-enrolled iPhone or a zero-touch Android device, the wipe doesn't remove management.