Banyan Security vs Am I Secure? Endpoint Security

The Banyan Security App enables you to securely access your corporate applications from any network, using any device, without a VPN. Please note that the Banyan Security App is not a VPN Client that intercepts your network traffic nor an MDM Client that manages your device settings. Instead, the Banyan Secure Remote Access App provides the following features: - Device Registration - a lightweight yet secure way to register your device with your corporate IT team - Device TrustScore - collect essential device information to ensure a healthy device posture - Services List - list the corporate applications you can access The Banyan Secure Remote Access App is built following these core product philosophy elements that emphasize data privacy and security: - Read Only - only reports on device status and does not change any device settings - User Visible - runs as a regular non-privileged application with a user interface - Low Overhead - does not continuously monitor or silently analyze behavior on the device and so has essentially no impact on device performance. - Report When Needed - only collects essential device information from the device and reports at relatively low frequency. 1. What is the main purpose of using VPN in the app? The app provides secure access to enterprise resources using a Zero Trust Network Access (ZTNA) model. It establishes a secure, encrypted tunnel (based on the WireGuard protocol) between the user’s device and the organization’s infrastructure. This tunnel is used to: Enforce administrator-defined access policies Protect network traffic when accessing internal services Ensure only authenticated and authorized users can reach protected resources The VPN functionality is not a general-purpose consumer VPN, but is limited to accessing specific enterprise services configured by the organization’s administrator. 2. What user information is the app collecting using VPN? The VPN tunnel itself is not used to collect or sell user data. However, like any enterprise VPN or secure access solution, the system processes minimal operational metadata required to establish and maintain the connection, such as: Device and session identifiers Connection timestamps Assigned IP address within the private network Authentication status (e.g., token/session validation) This information is not used for tracking, profiling, or advertising, and is limited strictly to enabling secure connectivity and enforcing access policies. 3. For what purposes is this information collected? The limited connection-related information described above is used solely for: Establishing and maintaining the secure tunnel Authenticating the user and validating session state Enforcing Zero Trust access policies configured by the organization Troubleshooting connectivity issues and ensuring service reliability No data is used for analytics unrelated to app functionality, marketing, or user tracking. 4. Will the data be shared with any third parties? No user data is sold or shared with third parties for advertising or marketing purposes. Connection-related metadata may be processed and stored by: The organization’s configured backend infrastructure (e.g., Banyan/SonicWall services) Secure cloud infrastructure providers used to operate the service This data is used exclusively for: Secure access control Session management Operational monitoring and troubleshooting All data handling follows enterprise security and privacy standards, and access is restricted to authorized systems and administrators.

Note: This version of Am I Secure? is for enterprise or government use. Your organization must provision your account — the app is non-functional without an existing account. For the personal edition, please search for “Am I Secure?” on the App Store. If an advanced nation-state level cyber attacker were to compromise the mobile device of even just one of your key employees, imagine the level of damage they could do to your entire organization’s network, cloud assets and sensitive information. Not just passwords copied but 2FA/MFA prompts silently accepted on the mobile device by the attacker without any user input or knowledge followed by the attacker using the device’s VPN access to relay into your network. It’s even more damaging than a laptop being compromised. The attacker would be able to fully impersonate the legitimate owner of the compromised device with no way for you to distinguish the difference. Am I Secure? Endpoint Security is the most comprehensive security solution for iOS. It is the only solution that performs daily forensic analysis of iOS system diagnostic "sysdiagnose" data, which is necessary to successfully detect the malware and spyware of the most advanced nation-state level cyber attackers and commercial spyware companies that sell to authoritarian regimes. To perform an advanced security scan that can detect malware and spyware, users first initiate the system diagnostic functionality built-in to iOS. This collects detailed data on the operating system (iOS), information such as what processes and threads are actively running. This level of data is not available to MDM/MTD solutions, without the user generating and sharing it no iOS solution can access it. The user then shares this data with the Am I Secure? Endpoint Security app which uploads it to our analysis servers. A combination of automated analysis powered by artificial intelligence and machine learning (AI/ML), along with targeted manual review, is used to identify compromised devices. Results are delivered back to the app for the user and also shared with your organization, managed security provider, or SIEM. Mobile Device Management (MDM) that employees do not trust and do not want on their devices is NOT required, especially important for BYOD organizations. Am I Secure? Endpoint Security does not require or request access to any personal data. Additional features include: • Routine auditing and compliance checks that run in the background to compare a device against your organization's mobile device security policy, e.g. iOS up to date, passcode enabled, Lockdown Mode enabled, no 3rd party keyboards/keyloggers installed, etc. • Prompting your users to rectify any compliance issues and reporting back if they do not do so in a timely manner, less user management costs and wasted time for your team reminding employees. Go from near zero visibility of your organization’s mobile device security policy compliance to a full picture of all of your iOS mobile devices. It's like having a dedicated mobile device forensic team and a mobile threat hunting team on staff checking all of your organization's devices, all through one easy to use solution. Fill the gaps in your cyber security and meet your regulatory audit and compliance requirements. Terms of Use: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/