Am I Secure? Endpoint Security vs TENEBRAE Mobile SOC

Note: This version of Am I Secure? is for enterprise or government use. Your organization must provision your account — the app is non-functional without an existing account. For the personal edition, please search for “Am I Secure?” on the App Store. If an advanced nation-state level cyber attacker were to compromise the mobile device of even just one of your key employees, imagine the level of damage they could do to your entire organization’s network, cloud assets and sensitive information. Not just passwords copied but 2FA/MFA prompts silently accepted on the mobile device by the attacker without any user input or knowledge followed by the attacker using the device’s VPN access to relay into your network. It’s even more damaging than a laptop being compromised. The attacker would be able to fully impersonate the legitimate owner of the compromised device with no way for you to distinguish the difference. Am I Secure? Endpoint Security is the most comprehensive security solution for iOS. It is the only solution that performs daily forensic analysis of iOS system diagnostic "sysdiagnose" data, which is necessary to successfully detect the malware and spyware of the most advanced nation-state level cyber attackers and commercial spyware companies that sell to authoritarian regimes. To perform an advanced security scan that can detect malware and spyware, users first initiate the system diagnostic functionality built-in to iOS. This collects detailed data on the operating system (iOS), information such as what processes and threads are actively running. This level of data is not available to MDM/MTD solutions, without the user generating and sharing it no iOS solution can access it. The user then shares this data with the Am I Secure? Endpoint Security app which uploads it to our analysis servers. A combination of automated analysis powered by artificial intelligence and machine learning (AI/ML), along with targeted manual review, is used to identify compromised devices. Results are delivered back to the app for the user and also shared with your organization, managed security provider, or SIEM. Mobile Device Management (MDM) that employees do not trust and do not want on their devices is NOT required, especially important for BYOD organizations. Am I Secure? Endpoint Security does not require or request access to any personal data. Additional features include: • Routine auditing and compliance checks that run in the background to compare a device against your organization's mobile device security policy, e.g. iOS up to date, passcode enabled, Lockdown Mode enabled, no 3rd party keyboards/keyloggers installed, etc. • Prompting your users to rectify any compliance issues and reporting back if they do not do so in a timely manner, less user management costs and wasted time for your team reminding employees. Go from near zero visibility of your organization’s mobile device security policy compliance to a full picture of all of your iOS mobile devices. It's like having a dedicated mobile device forensic team and a mobile threat hunting team on staff checking all of your organization's devices, all through one easy to use solution. Fill the gaps in your cyber security and meet your regulatory audit and compliance requirements. Terms of Use: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/

Thank you for reviewing TENEBRAE. TENEBRAE is an enterprise Security Operations Center (SOC) platform. Customers deploy it via Apple Business Manager and their MDM (Jamf, Intune, Mosyle, Workspace ONE), which provisions each device against the customer's tenant. End users do not sign in, so there is no usernamd, use the built-in App Review demo mode: 1. Launch the app. 2. On the sign-in screen, tap the TENEBRAE shield logo 5 times within ~1.5 seconds. 3. A button appears: "Apple App Review use oode". 4. Tap it. A sample SOC dashboard loads (one device, one phishing threat, one alert). This gesture is compiled only into the review build; customers never see it. NETWORK EXTENSION The binary includes three providers under conetworkextension: a DNS Proxy(NEDNSProxyProvider), a Content Filter Data provider (NEFilterDataProvider), and a Content Filter Control provider (NEFilterControlProvider). They enforce the e: the DNS Proxy answers NXDOMAIN forblocklisted hostnames; the Content Filter drops blocked flows (matched on TLS SNI / destination IP) so the connection simply fails. They do NOT decrypt TLS, read s, inject certificates, or proxy through anyTenebrae relay. Non-matching traffic is forwarded unchanged and not logged. Block events go to the customer's own SOC backend. Full disclosure: https://www.tenebrn 3. WHY FILTERING IS NOT OBSERVABLE ON A STANDARtform requirement, not an app limitation): - The Content Filter activates only on a SUPERVISED device. On a non-supervised device, iOS rejects the configuration ("permission denied") before any prompt. - The DNS Proxy requires Automated Device Enrollment via MDM (Apple's docs: the payload "requires a device management service to install"). In production, the customer's MDM pushes a profile that pre-approves the providers and they activate silently. ATTACHED VIDEO (~1:35, captioned, recorded on a supervised device) shows, in one take: 1. The populated SOC dashboard. 2. Protection ON: Safari fails to open phishing-test.tenebraesecurity.com ("cannot open the page") because the Content Filter drops the connection - no redirect, n 3. Kill-switch: turning Protection OFF lets the SAME URL load, proving the block was4. Protection back ON: blocked again. 5. The block recorded as a threat (phishing, MITRE Initial Access). TEST HOST: phishing-test.tenebraesecurity.com is permanent production infrastructurePolicy 3.8). With filtering OFF - or from aning yours - it loads a controlled page; thatis the "filtering off" signal shown by the kill-switch. Verify it is live: curl -sI https://phishing-test.tenebraesecurity.com/ -canary: phishing-test"). This mirrors public test URLs from AdGuard, NextDNS, and Cisco Umbrella. The full app UI is reviewable on any device via demo mode. If anything does not behave as described, please contact us before rejecting - we respond same-day, incla supervised device. Contact: contact@tenebraesecurity.com J & M International Group LLC, d/b/a Tenebrae Security Team ID: J6FW6FW8BY Bundle ID: com.tenebrae