Mobile
The phone is the
unmanaged endpoint.
It holds the second factor, the banking app and the messages the attacker actually sends — and in most organisations nobody manages it. Cyber Defense for mobile is built for that reality: useful on its own, honest about what the platform allows, and free in the part that matters.
Free
Everything the device can actually do, without paying.
The free application is not a demonstration with the useful parts removed. It carries every security capability that runs on the device and costs us nothing per use — which, on a phone, is nearly all of them. A security product that disables protection because a subscription lapsed leaves someone exposed for a reason that has nothing to do with their security.
Device security posture
Passcode and biometric availability, OS version currency, jailbreak or root indicators with the signals that produced them, debugger attachment, and the configuration weaknesses that make the rest of it moot.
Link and QR analysis
Paste, share or scan a link and get a verdict: punycode and homograph tricks, brand impersonation in the hostname, identity-trap patterns, and reputation against our own indicator set.
Scam and message analysis
Paste a suspicious message and get a category, the evidence behind the verdict, and what to do next. Turkish and English scam patterns are first-class, not translated afterthoughts.
Breach exposure
Check an address against known breach corpora using k-anonymity — the full address never leaves the device.
Caller screening
On iOS, a Call Directory extension flags known-bad numbers at the system level. On Android, the equivalent runs within the permissions the platform grants.
Share-sheet analysis
Send a link from any app into Cyber Defense and have it examined without leaving what you were doing.
Premium — the AI surface
What is paid for is judgement, not access.
Premium is the layer that interprets rather than detects — and the layer that costs something to run, which is the whole basis of the split. The detection you rely on happens on the device and stays free; what you pay for is the reasoning written over it and the intelligence behind it. What leaves the phone is what you choose to send for analysis.
An explanation, not just a score
A verdict arrives immediately from the analysis running on the device; the premium layer then has Corxor's AI write out why, in the language you are reading. If that service is unreachable the verdict still stands on its own.
Threat-intelligence enrichment
Hosts and links are checked against our indicator corpus rather than heuristics alone, so a domain we have already seen used against someone else is recognised the first time you meet it.
Community context
How many times a pattern has been reported recently across everyone using the product — the signal that separates a one-off from a campaign running this week.
Continuous corpus updates
Indicators and scam patterns improve on the server, so the application gets sharper without waiting for a store release.
What a phone will not let anyone do
The sandbox is the product's boundary. We state it rather than work around it.
No system-wide interception, on either platform
iOS and Android both forbid an application reading what you type into other applications. Cyber Defense analyses what you hand it — through the share sheet, a paste, a scan or its own interface. Any vendor claiming to read every prompt on an unmodified phone is describing something the operating system does not permit.
iOS cannot scan other applications
There is no on-device file or application scanning on iOS, for us or for anyone. The sandbox makes it impossible, and a product claiming otherwise is selling a placebo.
Android is broader, but bounded
Package-level indicators are available within the permissions the platform grants and the policies Google enforces. We use what is permitted and we do not ask for accessibility access to do work that does not need it.
Install it and judge the free version.
If it is not useful without paying, we have built the wrong thing.
Managing phones across an organisation rather than protecting your own? That is part of a Managed Defence engagement.