CITT

    Scan results

    iVerify EDR

    iOS

    iVerify Enterprise is a comprehensive endpoint detection and response (EDR) solution for iOS devices. It provides real-time threat detection, device security monitoring, forensic scanning, and compliance checking. Designed for enterprise security teams to monitor device health, detect threats, and c

    CITT SCORE
    96
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Enterprise users who prioritize device security

    What It Means For You

    Device data stays private, with no advertising networks or data brokers involved. Diagnostic telemetry is sent to Datadog and Firebase to keep the service running, but personal information is not shared with third parties for marketing. Users are in control of their data.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (15)

    Data Security

    5 total
    2 Medium
    3 Info

    Network Security

    1 total
    1 Info

    Code Security

    4 total
    2 High
    2 Info

    Privacy

    4 total
    4 Info

    Third-Party Risk

    1 total
    1 Info

    Third-Party Services

    Datadog, Firebase, Lottie, SnapKit, KeychainSwift, FBLPromises, Down, Resolver

    Security Strengths

    • ✓Hardware-backed Keychain encryption
    • ✓HTTPS-only communication
    • ✓Firebase Analytics/AdMob disabled
    • ✓No IDFA collection
    • ✓Jailbreak and debugger detection
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    enterprise
    security
    threat detection
    privacy focused
    mdm
    forensics

    Package

    com.trailofbits.iverify.enterprise

    Version

    65.0 (Build 3)

    Analysis Date

    Mar 28, 2026

    Classes Analyzed

    43

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on App Store

    Recommendation: Very Secure

    Key Findings

    Data Security - 5 findings (2 medium, 3 info)

    Network Security - 1 finding (1 info)

    Code Safety - 0 findings

    Privacy - 4 findings (4 info)

    Privacy Concerns

    What Data is Collected

    Operational and diagnostic data is collected to support reliable service delivery. No behavioral profiles are built from user activity and no advertising-related data collection is present. Collection is limited to what is necessary for performance monitoring and keeping the app functioning correctly.

    Third-Party Data Sharing

    Diagnostic data is shared with Datadog and Firebase for service monitoring and operational reliability. No data is shared with advertising networks, data brokers, or marketing companies. The following third-party services are present in the app:

    • Datadog - service monitoring and diagnostics
    • Firebase - operational performance reporting
    • Lottie, SnapKit, KeychainSwift, FBLPromises, Down, Resolver - functional libraries with no data collection role

    Understanding the Scores

    CategoryScore
    Security95/100
    Privacy100/100
    Data Security96/100
    Network Security100/100
    Code Safety100/100
    Data Collection100/100
    Data Sharing100/100
    User Control100/100

    Positive Security Features

    • All network communications are protected and no unencrypted data transmission was detected
    • No advertising or tracking networks have access to user information
    • Code structure is clean with no dangerous patterns identified
    • Data collection is minimal and strictly limited to operational needs
    • User data is not shared with any third party for marketing or profiling purposes

    Areas for Improvement

    • Some data stored on-device could benefit from stronger protection to reduce risk if the device is physically accessed by another person.
    • A small number of configuration values are stored in a way that could be hardened further to improve resilience against direct device access.
    • Transparency around diagnostic data sent to Datadog and Firebase could be improved to give users clearer visibility into exactly what operational information is reported.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration files. Scores reflect practices observed at the time of the scan and may change as the app is updated.

    App Details

    • Package ID: com.trailofbits.iverify.enterprise
    • Version: 65.0 (Build 3)
    • Scan Date: March 28, 2026

    Right of Reply

    Developer not yet contacted