Report | Market Radar – Mobile Security Management Solutions, 2021

This report from Omdia explores the evolving Mobile Security Management (MSM) market, analyzing top vendors and key trends shaping enterprise mobile security. Discover how businesses are adapting to a hybrid workforce, mitigating mobile threats, and integrating zero-trust security strategies. Gain insights into MSM solutions, vendor comparisons, and best practices to secure your mobile workforce. Download the report now to stay ahead in mobile security.

/live_board/v2/downloads?uid=0f86e310-0c1e-4879-bb32-f450fb765ae6&redirect=true

Brought to you by Informa Tech

Publication date: 16 Jun 2021

Author: Adam Holtby, Principal Analyst, Mobile Workspace

Market Radar – Mobile Security Management Solutions

Table of Contents : Summary ......................................................................................................................................2 Recommendations .......................................................................................................................3 Defining the mobile security management market ....................................................................4 Market landscape and participants .............................................................................................9 Vendors on Omdia’s market radar for mobile security management solutions.......................11 Appendix ....................................................................................................................................33

Table of Figures : 1. Figure 1: The hybrid workforce .....................................................................................................5 2. Figure 2: Attack vectors across mobile ..........................................................................................6 3. Figure 3: MSM market radar capabilities ......................................................................................7 4. Figure 4: Omdia heatmap for MSM solutions ...............................................................................8 5. Figure 5: Omdia Market Radar recommendation—Check Point .................................................11 6. Figure 6: The Check Point security ecosystem.............................................................................12 7. Figure 7: Omdia Market Radar recommendation—ESET.............................................................14 8. Figure 8: ESET PROTECT Enterprise .............................................................................................14 9. Figure 9: Omdia Market Radar recommendation—Lookout .......................................................16 10. Figure 10: Lookout security graph .............................................................................................17 11. Figure 11: Omdia Market Radar recommendation—Pradeo.....................................................19 12. Figure 12: Pradeo’s MSM solution ............................................................................................20 13. Figure 13: Omdia market radar recommendation—Sophos......................................................22 14. Figure 14: Sophos Adaptive Cybersecurity Ecosystem...............................................................22 15. Figure 15: Omdia Market Radar recommendation—Wandera .................................................24 16. Figure 16: Wandera Unified Security Platform and Admin Experience......................................25 17. Figure 17: Omdia Market Radar recommendation—Zimperium ...............................................27 18. Figure 18: Zimperium’s approach to enterprise mobile security ...............................................28

Market Radar – Mobile Security Management Solutions

Summary

Catalyst In this Market Radar report, Omdia explores the market for mobile security management (MSM) solutions and their growing importance to securing and enabling hybrid and mobile-first work styles. Omdia compares seven solutions that offer MSM capabilities, with the goal of understanding not only the differing technical capabilities offered by these solutions and vendors, but also their visions and strategies, partner ecosystems, and breadth of integration capabilities offered.

Omdia view The pandemic has made mobile working the new normal for millions of employees across the world. This change in work style will, for many knowledge workers, be a permanent change in the post-pandemic world, with the events of 2020 highlighting how embracing modern approaches to securing a more mobile and hybrid workforce is vital. Businesses across the globe have come to realize that security practices and models need to be developed with the mobile worker as a priority, and not just as an afterthought. Mobile working is happening at great scale, and businesses need solutions, services, and new security practices that can help them mitigate any associated risks.

In Omdia’s 2020 Future of Work survey, we asked business leaders from around the world what was driving and influencing their organization’s investment in new workplace capabilities. Helping employees work in a more mobile fashion was identified as the top priority. The speed and scale of transitioning to a remote and hybrid style of working has also made mobile a prime target for cyberattacks. In the Securing the mobile workforce state of the union report, Omdia and Google identified that just under 50% of businesses had experienced a mobile-related security incident in the previous 12 months, and two-thirds of these organizations advised that this security compromise had a serious or moderate impact on business operations.

The MSM market is growing MSM solutions (also commonly known as mobile threat defense (MTD) tools) have an important role to play in helping businesses evolve their approach to mobile security and in better enabling mobile workers. MSM capabilities are also an important element of broader zero-trust security approaches that many organizations are now exploring. Interest in and adoption of zero-trust and conditional access capabilities are growing as businesses look to strengthen security in line with changing employee behaviors and the new risks they present, but in a way that does not result in a negative user experience.

These trends and others are fueling huge growth in interest in and adoption of MSM solutions, with Omdia estimating the market to currently be worth around $400m, with large growth potential. A key factor in the growth of uptake of MSM solutions is a change in buyer patterns and priorities. As mobility management and security have become vital digital initiatives due to the pandemic, the adoption of solutions that can support workplace mobility efforts, including MSM and unified endpoint management (UEM) tools, have become an even greater investment priority. And it is not only the traditional workplace mobility teams that are attaching value to these capabilities—MSM solutions are now on the radar of chief information security officers (CISOs) and other business and IT stakeholders that hold budget around employee productivity and end-user computing. The criticality of mobility to employee productivity and enterprise security is resulting

Market Radar – Mobile Security Management Solutions

in these new stakeholders becoming important buyers of MSM solutions. This, coupled with new business needs around mobile security and zero trust, will fuel continued growth in this market going forward.

Note: please reference the appendix section at the end of this report for a list of security acronyms and descriptions used in this report.

Key messages  The sudden shift in work styles brought about by the pandemic is resulting in businesses across

the globe making long-term infrastructure and operational changes to support greater levels of hybrid work.

 Hybrid working is here to stay and mitigating mobile working threats has become a vitally important enterprise security practice.

 The number of attacks and data breaches associated with mobility has increased significantly in line with the rapid rise in remote and mobile working over the past year. To counter this threat, businesses must adopt a robust approach to mobile security supported by mobile threat prevention, detection, response, and remediation capabilities.

 Technology and service provider partners that provide security solutions which combine best-of- breed capabilities, threat intelligence engines, and cybersecurity educational resources and services will be best placed to support enterprises going forward.

Recommendations

Recommendations for enterprises  Mobile security must not be managed in isolation. Mobile security must be considered and

managed as part of a broader business approach and cybersecurity strategy, guided by the CISO where possible.

 Mobile security is about much more than just mobile devices. Businesses must be attentive to the range of threats that extend across devices, applications, the network, and the web when it comes to strengthening how a mobile workforce is secured.

 Mobile security management capabilities should be viewed as a foundational element of broader zero-trust access (ZTA) approaches. ZTA technologies have emerged as a more efficient potential replacement for traditional virtual private network (VPN) technologies, and the work- from-home paradigm that expanded dramatically during the coronavirus pandemic had thrown a spotlight onto such alternative approaches.

Recommendations for technology vendors  The MSM market is growing as investment in mobile security capabilities becomes a greater

business priority. As organizations continue to recover from the sudden change in work styles and the widespread adoption of remote work, technologies that enable secure remote access to work resources and data will be an investment priority for IT and security teams. Technology vendors should look to effectively market the value of their capabilities here.

Market Radar – Mobile Security Management Solutions

 Technology vendors must support businesses in managing and securing mobile devices in a similar fashion to other platforms. On the whole, MSM platforms are still largely focused on securing Android and iOS mobile devices. However, as employees increasingly access work data and resources via multiple devices, both mobile and desktop, there is an increased need from organizations to secure mobile devices in the same way that desktop and server platforms have been secured, and via the same console/platform.

 Develop strong integrations and partner ecosystems. Ensuring MSM solutions can be easily integrated with a diverse range of complimentary mobile security and productivity technologies (with UEM, IDP, EDR, etc.) is important in reducing complexities and in avoiding administrative overheads.

 Mobility is about more than just Android and iOS. It used to be that “mobile” referred specifically to smartphone (i.e., Android and iOS) platforms, but the ubiquitous nature of laptops and WFH makes “mobile security” extend security to any form of device being used remotely. It is important that vendors cater for this demand, either through native capabilities or via rich integrations with other security solutions.

Recommendations for communication service providers (CSPs)  Offer solutions aligned with the needs of the remote workforce. CSPs should look to advance

their enterprise mobility offerings, delivering scalable solutions that support connectivity, management, mobile security, and employee productivity.

 Businesses need help getting their house in order when it comes to security. The sudden transition from office-based to remote working meant that businesses needed to quickly get employees working offsite productively. This resulted in businesses making some security exceptions. Enterprises will need experienced partners and advanced security technologies such as zero-trust to secure a more mobile workforce and deliver better employee experiences.

 Ensure mobile security management capabilities are an important component of broader enterprise security, managed mobility, and digital workplace services. Mobile security management capabilities are an important element for CSPs looking to deliver robust security services for enterprises that embrace hybrid/remote working at scale.

Defining the mobile security management market

Definition and characteristics Omdia defines mobile security management (MSM) solutions as those that support businesses in preventing, detecting, and remediating security threats targeted at the mobile workforce. Solutions that fit into this product category are also commonly referred to as MTD tools. Omdia believes the mobile security management definition is a more inclusive representation of the broader value these solutions now offer. Commonly, MSM tools help protect employees against a diverse range of mobile endpoint, application, and network attacks. In developing this report, Omdia has identified that the MSM market is undergoing

Market Radar – Mobile Security Management Solutions

significant growth, largely as enterprises across all industries need to better secure and enable a more hybrid workforce.

Whilst the pandemic has certainly brought mobile security into greater focus, the reality is that it has been an important business initiative for some time. This is largely due to how the increased adoption of mobile devices and applications, plus a greater interest in more flexible work styles has challenged traditional approaches to cybersecurity. The traditional premises-based security perimeter is breaking down as an increasing number of employees carry out more work away from the office environment. Additionally, businesses are investing more in cloud-based applications that move data further away from the corporate data center, and make it accessible across a range of different endpoints.

A hybrid workforce is one that needs to feel empowered, connected to company resources and other colleagues, valued, informed, and able to work securely across any device or application:

1. Figure 1: The hybrid workforce

Source: Omdia

New security practices and technologies are needed to secure these new ways of working. A more modern and mobilized workforce that is engaged and empowered to do its best work must be secured and enabled to work from any location, with any device, and with no compromise to productivity. As mobility has become central to the way that many people now work, and as mobile ecosystems grow in complexity (more devices, mobile apps, increased threats, cost management considerations, etc.) businesses are faced with new security challenges that they need to overcome, including:

 the prevention of theft of user credentials on iOS, Android, or ChromeOS devices leading to the theft of corporate data

 preventing the loss of important data from business apps accessed by unsecured mobile devices

 the need to comply with industry regulations that mandate how corporate data can be accessed

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily002.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily002.png

Market Radar – Mobile Security Management Solutions

 combatting device, app, and network threats and embrace zero-trust initiatives

 protecting both managed and unmanaged mobile devices used for work purposes.

 rapid detection of and prevention from malicious mobile apps that violate corporate policies, or that could present additional security risks.

It is important to remember, however, that security challenges around mobility extend beyond just mobile endpoints. For example, the popularity of mobile applications means that important and potentially sensitive company and personal information needs to be secured beyond just the endpoint and into the cloud. In addition to security policies and considerations around devices, businesses need to consider the vulnerabilities associated with mobile apps, web apps, and browsing on mobile devices, as well as the networks that the mobile workforce relies on.

2. Figure 2: Attack vectors across mobile

Source: Omdia

MSM solutions have emerged to support businesses in overcoming these threats and in delivering more modern and mobile-first security approaches. They differ from UEM solutions as they protect employees in real-time against an ever-increasing and diverse range of mobile cyberthreats. UEM capabilies help organizations resolve and manage the threats and incidents that MSM tools detect and protect against. MSM and UEM solutions are increasingly adopted by organizations looking to embrace zero-trust security approaches as MSMs deliver important data and insights to inform policies that can be enforced and managed by UEM solutions. MSM solutions also gather threat intelligence from devices and other sources to help prevent, detect, and remediate threats targeted at the mobile app, device (OS), and network level. The range of threats across these vectors that target mobile workers is becoming more diverse and includes things such as:

 connecting to unsecured networks

 downloading applications with malicious code, or

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily003.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily003.png

Market Radar – Mobile Security Management Solutions

 clicking links received via emails, SMS, and other messaging programs.

It is behaviors and attack vectors such as these that MSM solutions help protect businesses against. Finally, MSM solutions commonly offer an additional set of compelling capabilities, including ML (to help structure threat intelligence and data), behavioral analysis (that provides visibility into how employees interact with apps and when behaviors veer from the norm), and features that help ensure the security of not just managed iOS and Android devices, but also unmanaged bring-your-own (BYO) devices.

Key capabilities and vendor landscape Omdia’s assessment of MSM solutions is based on the responses each vendor gave to a detailed matrix that explored a range of technical and organizational capabilities. In addition, vendor briefings, information from vendor websites, and input from customers derived from TrustRadius were also used to inform the research and solution assessments. Omdia assessed the different MSM/MTD solutions and vendor capabilities across the criteria shown in Figure 3.

3. Figure 3: MSM market radar capabilities

Source: Omdia

Figure 4 illustrates the capabilities delivered by competing MSM offerings that Omdia analyzed for this research. All vendors covered in this report offer a robust set of features and a balanced portfolio of capabilities that can be customized to the requirements of the enterprise sector.

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily004.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily004.png

Market Radar – Mobile Security Management Solutions

4. Figure 4: Omdia heatmap for MSM solutions

Source: Omdia

The Omdia Heatmap for MSM solutions is colored as follows:

 Advanced capability: The solution demonstrates very strong capabilities and functionality in alignment with what Omdia explored as part of this research.

 Broad capability: The solution offers better-than-expected capabilities well-suited to the needs of most businesses.

 Partial capability: The solution provides expected functionality but lacks some of the advanced capabilities assessed as part of this research.

The categorization of each vendor is as follows:

 Market leader: This category represents the leading solutions that provide advanced capabilities across six or more areas explored, have broad capabilities across most other areas, and which we believe are worthy of a place on most technology selection shortlists.

 Market challenger: The solutions in this category offer some advanced capabilities, have appropriate functionality across other areas, and should be considered as part of a technology selection process.

 Market specialist: Solutions in this category offer a good set of capabilities but lack some of the more advanced features and/or capabilities offered by some competitive offerings.

Business value and applications At the heart of any workplace mobility strategy is the business need to better secure, manage, and improve visibility into the vast array of different mobile devices and applications employees rely on. Whilst security has always been a theme at the heart of workplace mobility, the priority businesses are attaching to this need and the security of a mobile workforce has significantly increased due to the COVID-19 pandemic.

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily005.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily005.png

Market Radar – Mobile Security Management Solutions

More advanced and proactive methods of mobile security are no longer “a nice to have” for businesses: they are a must-have.

The growing adoption, at scale, of mobile technologies, plus the mass migration of applications from the corporate data center into the cloud, challenges businesses to re-think their security approach. Consequently, new security paradigms and practices are being adopted, particularly ZTA, of which mobile technologies and security management will be an important enabler.

VPN technology remains the dominant way of enabling secure remote access to corporate assets, with estimates for the size of the VPN market varying between $20bn and $35bn, depending on whether the calculation includes Layer-2 and -3 and whether both self-managed and carrier-managed VPNs are considered, for instance. However, the widescale migration of enterprise applications to the cloud represents a challenge to VPN architectures, particularly those that rely on a VPN concentrator residing in the corporate data center. New cloud-based alternatives, collectively referred to as ZTA technologies, have emerged as a more secure and efficient replacement, and the need to work from home during the coronavirus pandemic threw an unexpected spotlight onto such alternative approaches.

Market landscape and participants

Market origin and dynamics Mobility has not only transformed the way people work, but also the threat landscape that businesses now face. A flexible and mobile workforce, equipped with mobile devices and applications, is reliant on working with data that is often in the cloud and away from the traditional on-premises perimeter. In an environment where new risks emerge daily, a key mobility challenge for businesses is how to mitigate these risks by keeping enterprise data and assets secure, but in a fashion that does not negatively impact the employee experience. This need is accelerating interest in mobility management and security solutions, and MSM tools are becoming an important product category in the broader enterprise security ecosystem.

The majority of vendors profiled in this report have highlighted increased interest and adoption of their respective solutions since the pandemic began—further evidence of the priority businesses attach to managing and securing a more hybrid workforce. In addition to just technology, some MSM vendors are also delivering mobile security services to further support some customers in the adoption of new capabilities. In the context of a broader business security posture, mobile security has specific and unique complexities that require new skills, and best practices and technologies. To help businesses address these needs and to plug the skills gap, MSM vendors offer dedicated services both directly and via partners. These services differ across providers, but delivering security expertise and dedicated resources over both the short and long term is a common element.

Key trends in the MSM market  Businesses are looking to providers for help in overcoming security complexities.

Unquestionably, the pandemic and the huge shift to mobile and remote work styles has increased interest in solutions that can help businesses better secure more mobile and hybrid work patterns. Businesses are increasingly aware of what they want to achieve when it comes to workplace mobility and broader digital workplace initiatives, but they need help in understanding the ecosystem of different capabilities that support their objectives. Interest is accelerating in services that bring different mobility management and security capabilities

Market Radar – Mobile Security Management Solutions

together with professional services that help businesses realize long-term value from these solutions. Businesses will look to partners that can help them innovate faster, align their business and IT strategies, and select the most appropriate IT architecture and technologies for their digital journey.

 There is potential for CSPs in this emerging market. In addition to managed service providers, these services are something that an increasing number of CSPs are looking to deliver. The objective for CSPs is to build out on their legacy connectivity offerings by working more strategically with larger enterprises. Mobile security will be a vital element in the broader enterprise security solutions that CSPs deliver.

 BYO is back in the limelight. The rapid and at-scale shift to remote work meant businesses had to be agile in providing employees with the technology they needed to work productively. For many businesses, corporate-provided hardware was in short supply or could not be provided fast enough, so many allowed employees to use their own devices for work purposes. This activity has brought the BYO trend back into the limelight, but at the expense of security in many instances. Interest in mobile security solutions will accelerate as businesses look to better secure BYO environments and hybrid working, alongside more traditional corporate-owned management models.

 Mobilizing the frontline workforce. Frontline workers are those that are often interacting directly with customers. They are best described as workers that are very close to those that consume the services and/or products that a business delivers. These workers often have close and direct interactions with customers and the general public, and, as such, are important representatives of a business’s brand. Frontline workers span roles across different industries, including warehouse operatives and workers, paramedics, sales and customer service reps, leisure attendants, and community workers, to name a few. Mobility is a key common feature because frontline workers are often on the move and do not typically work at a single location. These workers are increasingly being enabled with new solutions that have mobility at the core, accessing work resources and data via a variety of corporate and personally provisioned mobile apps and devices. As is the case with any mobile worker, frontline workers, who may use a combination of personally and corporate-owned apps and devices, will need to work in a secure way. Consequently, frontline workers are a section of the workforce that MSM vendors should look to capitalize on as an entrée into the broader enterprise.

 Mobile and traditional security practices and teams are coming closer together. The increased emphasis and priority businesses are attaching to managing and securing mobile devices so as to support hybrid workstyles is also bringing about a shift in the way that infrastructure and operations management teams are structured and organized. Increasingly, businesses are looking to secure and manage the diverse set of devices and policies these organizations rely on in a more unified way and via a more rationalized portfolio of solutions. This trend is driving investment in mobile security management solutions, whilst also causing businesses to reorganize internal support and operational teams. Those responsible for managing and securing traditional endpoints are working more closely with those that have traditionally managed mobility within organizations.

Future market development The MSM market will grow over the next few years as interest in these capabilities increases from businesses looking to secure the hybrid workforce. Other security initiatives such as zero-trust security will

Market Radar – Mobile Security Management Solutions

also drive interest in this product category and contribute to the overall market growth. Direct routes to market will remain important, but partnerships with service providers that bundle MSM capabilities as part of broader enterprise security solutions will also be an important driver of growth.

Vendors on Omdia’s market radar for mobile security management solutions

On the radar: Check Point 5. Figure 5: Omdia Market Radar recommendation—Check Point

Source: Omdia

Why put Check Point on your radar? Check Point Harmony Mobile (formerly known as SandBlast Mobile) is a solution that is a good fit for organizations looking to mature mobile security approaches as part of a wider enterprise security strategy. Enterprises looking to secure mobile and hybrid working that may already have invested in another of Check Point’s enterprise security solutions would be wise to also explore its mobile security capabilities. Check Point offers its mobile security management capabilities as part of its broader Harmony product suite. Check Point delivers a comprehensive set of capabilities that help businesses protect data across application, network, and device attack vectors. Features include a behavioral risk engine, anti-phishing, safe browsing, and man-in-the-middle protection in addition to protection against OS vulnerabilities and device-level exploits. Harmony Mobile integrates with all the major enterprise mobility management (EMM)/UEM solutions in the market, including Microsoft Endpoint Manager, VMware Workspace One, MobileIron Cloud and Core, BlackBerry UEM, IBM MaaS360, Citrix XenMobile, and Jamf. Additionally, Check Point offers an API for any other third-party UEM vendors to integrate their solutions with Harmony Mobile.

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily006.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily006.png

Market Radar – Mobile Security Management Solutions

6. Figure 6: The Check Point security ecosystem

Source: Check Point

Check Point’s mobile security capabilities are part of the vendor’s broader cloud-based security stack and architecture, with Harmony Mobile being a service-as-a solution (SaaS) offering with an agent running on the mobile device. Although a cloud solution, Harmony Mobile offers personally identifiable information (PII) protection on-premises, meaning all PII is encrypted using an on-premises key owned by the customer and no PII or other sensitive data is uploaded to the cloud. The solution supports protection for all Android Enterprise deployment use cases meaning customers can secure employees working across both corporate- owned and/or personal devices. By utilizing a Work Profile with UEM, businesses can install and launch the app automatically via zero-touch deployment. However, on an unmanaged personal profile, employees must install a client manually. That said, Harmony Mobile supports a mechanism for auto registration if a work profile is already installed with Harmony Mobile client. Beyond capabilities that secure mobile, Check Point’s cloud-delivered Harmony Suite includes endpoint security, VPN remote access, clientless connectivity, and email security capabilities.

 Harmony Mobile delivers protection for different Android device deployment use-cases, including personal and corporate-owned devices.

 The mobile security capabilities are part of Check Point’s Harmony Product Suite which also includes datacenter, IoT, and cloud security capabilities.

 Check Point also has a threat research division that delivers intelligence into new mobile threats. This research data, along with real-time threat intelligence via other sources, is delivered via ThreatCloud in securing mobile workers.

 Harmony Mobile’s cloud-based management console delivers visibility into mobile threats and an organizations mobile risk posture.

 In addition to offering a strong set of MSM technological capabilities, Check Point also has a research and threat intelligence entity that identifies new and dangerous mobile threats across multiple vectors including hardware and apps. The vendor’s MSM solutions are adopted by a range of different-sized businesses across multiple geographies.

 Whilst Check Point does not offer its own UEM solution, an extensive range of integrations exists with leading UEM providers.

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily007.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily007.png

Market Radar – Mobile Security Management Solutions

Background Check Point, founded in 1993, has a strong heritage in providing IT security solutions. The vendor offers a platform of capabilities—of which Harmony Mobile is one element—that collectively help customers secure networks, clouds, users, mobile, endpoint, and IoT devices. Check Point “Infinity” combines complimentary security capabilities with advanced threat prevention. Check Point works with over 100,000 customers worldwide, spanning enterprises in addition to small- and mid-sized businesses. Its Mobile Security Management product (Harmony Mobile), is offered by way of Check Point’s acquisition of Lacoon in 2016. In addition to partnerships with system integrators and IT service providers, Check Point also has a wide network of partnerships with telcos and carriers including: Orange, Telefónica, Vodafone, and Sprint amongst others. A large proportion of Check Point’s business is via telcos and carriers, with the vendor leveraging these relationships to expand its sales capabilities as well as to expedite products and services deployment with customers. Moreover, Check Point’s telco and carriers partnerships enable customers to buy additional connectivity, productivity, and security services from these channels.

Strategy and roadmap One of Check Point’s key strengths is in how the vendor supports mobile security as part of a broader approach and set of enterprise security capabilities. Check Point recently released a new service mobile app analysis and rating service (MARS). MARS is a service that can be used to analyze apps without customers needing to load the app to mobile devices. This analysis can take place either before the distribution of the app to the wider enterprise, or as part of the development process.

Going forward, Check Point is planning to introduce a range of new features that will further enhance its mobile threat management capability, enabling customers to reduce operational efforts associated with managing mobile security. Another future product enhancement is to further develop Harmony Mobile’s integrations with other solutions in the enterprise mobile ecosystem. Additionally, Check Point is developing its own extended detection and response (XDR) solution that will integrate with Harmony Mobile. Check Point’s XDR offering is set to launch later in 2021. Harmony Mobile is already connected with Check Point's Data Lake service.

Market impact Check Point has experienced significant traction of its mobile security offering, with impressive revenue and growth associated with its solution. Its mobile security management solutions are adopted by businesses across all industries, with strong traction in government, ICT and media, financial services, and healthcare. Harmony Mobile is a cloud-based solution that is sold predominantly via partner channels, including communication service providers and managed service providers. The vendor also has customers across all major geographies. Like its peers in this product category, Check Point has experienced good adoption growth in its mobile security management solution this past year, largely driven by the need to better secure and enable a more mobile-first workforce.

Market Radar – Mobile Security Management Solutions

On the radar: ESET 7. Figure 7: Omdia Market Radar recommendation—ESET

Source: Omdia

Why put ESET Endpoint Security on your radar? Whilst ESET may not have the large market presence of some other solutions in this product category it does offer a good set of mobile security management features capable of supporting SMBs in improving mobile security. The change in work styles brought about by the pandemic will influence long-term business approaches to more hybrid working and mobile security is becoming a key focus for businesses in response. Solutions that support enterprise needs and challenges here will be in increased demand over the next 18 months. This trend is a major factor that will influence the growth in the adoption of mobile security management solutions over the next few years. ESET delivers mobile security capabilities that support SMBs and enterprise organizations in managing and securing mobile operating systems across the diverse range of endpoints they typically support. In addition to being available as a standalone product, ESET’s mobile security solution is also available as part of the vendor’s broader endpoint protection platform (EPP).

8. Figure 8: ESET PROTECT Enterprise

Source: ESET

Via a single cloud management console, security admins have visibility and control into the security of smartphones, in addition to servers and desktops. This management console provides real-time visibility for on-premises and off-premises endpoints as well as reporting for ESET enterprise solutions both on-premises or in the cloud.

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily008.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily009.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily008.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily009.png

Market Radar – Mobile Security Management Solutions

 ESET’s security solution can help secure Windows, Mac, Linux, and Android devices. Mobile device management features for Android and iOS are also available.

 A threat intelligence engine is included as part of ESET’s mobile security offering, and the vendor also offers threat intelligence services.

 ESET’s device management features enable admins to remotely carry out tasks including defining password and screen lock policies, lock devices, prompt employees to encrypt devices, and block hardware capabilities and features such as cameras, Bluetooth, and Wi-Fi.

 ESET Protect provides a single pane of glass view and security console across smartphones, servers, and desktops.

 ESET endpoint protection solutions use machine learning (ML) as part of its multilayered approach to prevent and protect against malware threats across different devices and operating systems.

 ESET has partnered with a number of telco companies and their local subsidiaries, including Deutsche Telekom, T-Systems, and Orange.

 Currently, ESET’s mobile security capabilities are predominantly adopted by SMBs based in Europe.

Background For more than 30 years, ESET has been developing industry-leading IT security software and services to protect businesses, critical infrastructure, and consumers worldwide from increasingly sophisticated digital threat: From endpoint and mobile security to endpoint detection and response, as well as encryption and multifactor authentication.

Strategy and roadmap The pandemic and subsequent change in work styles has resulted in mobile security becoming a greater priority for the organizations that ESET engages with. This growing demand and adoption of mobile security solutions is also driven by mobile devices being targeted as a primary vector for attackers. Helping enterprises with this challenge is driving ESET’s innovation and future investment in its mobile protection solution. ESET plans to grow its customer base on SaaS platforms and to grow adoption within the SMB segment. Currently, the majority of ESET’s customers favor an on-premises deployment model, so moving more business towards a SaaS deployment method represents a big strategic shift for the vendor.

Market impact The vast majority of ESET’s customers are SMBs based in Europe, making the Americas and Asia and Oceana geographies of potential growth for the vendor. Across the market, there has been good growth in both interest and adoption of mobile security management solutions over the past year, so ESET should continue to innovate by introducing new capabilities that will help the vendor grow appeal and adoption of its solution across different geographies. ESET has customers across all the major verticals, with adoption amongst manufacturing and professional services organizations being especially strong. ESET’s route to market is largely through a healthy partner ecosystem, with only a small amount of its business being made via more direct channels. ESET offers five different types of partnership programs: a reseller program, a managed service provider program, an ISP and Telco offering, a software development kit (SDK), and a technology alliance initiative that enables ESET’s capabilities to be richly integrated with other best-of-breed

Market Radar – Mobile Security Management Solutions

business technologies. ESET also engages in joint go-to-market activities with wireless carriers including Deutsche Telekom, Orange, T-Systems, MegaFon, Beeline, MTS, Tele2, and Rostelecom.

On the radar: Lookout 9. Figure 9: Omdia Market Radar recommendation—Lookout

Source: Omdia

Why put Lookout Mobile Endpoint Security on your radar? Lookout is an established name in the mobile security management market, and the vendor offers a strong and comprehensive set of features that enable businesses to strengthen security across endpoint, application, network, and phishing attack vectors. As mobile threats increase, Lookout continues to develop its capabilities in building on its strong mobile security heritage by offering features that help protect businesses against malicious apps, device-level threats, phishing attacks, suspicious Wi-fi and network connections, and the full spectrum of mobile malware for iOS and Android devices. The foundation of the Lookout security platform is its Security Graph, which enables the vendor to automatically detect both known and unknown threats. The Lookout Security Graph uses ML to analyze telemetry from nearly 200 million devices, more than 145 million new and updated apps, and millions of URLs daily. The security graph enables security teams to understand if an active attack involves mobile devices, where an attacker may be, and what they are doing.

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily010.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily010.png

Market Radar – Mobile Security Management Solutions

10. Figure 10: Lookout security graph

Source: Lookout

The pandemic has resulted in a resurgence of bring-your-own-device activity as businesses looked to ensure employees could work productively when away from the office. As businesses increasingly embrace a combination of both bring your own and corporate-owned mobile device ownership models, features that help secure both these approaches are important. Lookout provides visibility into device risk across both company-owned and personally-owned (and managed and unmanaged) endpoints.

As businesses continue to embrace more cloud applications, securing work beyond just the endpoint and at the app and network-level is also vital. In addressing these challenges, and to secure a range of diversely deployed applications, Lookout offers capabilities such as App Defense which helps app developers detect and protect against mobile app threats. Via the Lookout SDK, apps can be secured and admins can check the health of user devices in real-time. This capability means that only secure devices have access to business apps and data. Lookout boasts a large data set for mobile app threats—with the company advising it has, at the time of writing, analyzed more than 145 million mobile app binaries.

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily011.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily011.png

Market Radar – Mobile Security Management Solutions

In protecting against network threats, Lookout can detect If an employee connects to a rogue Wi-Fi network or other access points and alert the user to disconnect immediately before the attacker has a chance to decrypt the traffic.

 Lookout delivers a cloud-based security solution that helps ensure business continuity with minimal device resource consumption.

 In addition to its business offerings, Lookout also offers a security app that can be downloaded by consumers via popular app stores or added as part of a carrier rate plan.

 Lookout helps businesses secure all devices from endpoint to the cloud by integrating mobile endpoint security features, ZTA, and cloud access security brokerage (CASB) across an entire organization with consistent security policies.

 Lookout’s security intelligence is based on the analysis of telemetry data from more than 200 million mobile devices and 145 million mobile apps.

 Lookout enables businesses to dynamically apply and adjust access policies based on the continuous assessment of the risk profile of the device. This includes vulnerable app versions that need to be updated, out of date OSs, risky network connections, and malicious content on the device.

Background Founded in 2007, Lookout has focused on protecting data from the mobile endpoint to the cloud—a critical security objective considering how much work is now undertaken across mobile and cloud apps. In addition to its enterprise presence, Lookout also offers an application directly to consumers for download via popular mobile app stores. The Lookout mobile security app has been downloaded to more than 200 million devices worldwide and Lookout has analyzed more than 145 million apps.

In early 2021, Lookout acquired CipherCloud, a cloud security company that offers a secure access service edge platform that delivers zero-trust security, CASB capability, data protection, and secure web proxy functionality. The acquisition is significant as the cloud-first security capabilities Lookout now offers strengthens the vendor's overall capabilities and appeal beyond just the core of mobile endpoint security and into cloud-first security. Lookout is also a founding member of the Google App Defense Alliance. The vendor inspects and provides Google with guidance on all apps that are submitted to Google Play.

Strategy and roadmap Lookout advises that an increasing number of customers it engages with are expecting mobile endpoint security solutions to offer more than just mobile endpoint threat detection and response capabilities, and this business need is driving the company’s product development strategy going forward. Lookout is developing XDR capabilities with the combined telemetry data of its mobile endpoint security, ZTA, and CASB solutions. The integrated set of threat detection and response capabilities across endpoints, networks, and cloud computing ecosystems delivered by Lookout will help raise the appeal of the vendor with businesses looking to strengthen security beyond just the mobile endpoint core security use-case.

In early April 2021, Lookout announced a new global channel partner program to help meet the growing demand for modern security solutions built around the needs of a more mobile workforce. This new simplified program has been introduced to grow the scale and success of Lookout’s global channel partner community through new education, sales, and marketing resources.

Market Radar – Mobile Security Management Solutions

Market impact As has been the case with many other mobile security vendors over the past year, Lookout has also experienced an increase in interest and traction in the Lookout Mobile Endpoint Security solution as businesses continue to explore new tools to help them manage and secure the rise in mobile employee work styles. Lookout delivers solutions to organizations across all industries, with particularly strong traction amongst financial services, government, and manufacturing organizations. Additionally, Lookout has strong adoption across different geographies, with its customer base including hundreds of organizations that have over 1,000 Lookout seats. The vendor has a strong partnership network and works with other enterprise technology providers, carrier partners (including AT&T and Verizon), in addition to other channel partners and managed service providers.

On the radar: Pradeo 11. Figure 11: Omdia Market Radar recommendation—Pradeo

Source: Omdia

Why put Pradeo on your radar? Pradeo has a strong heritage in providing mobile security solutions, and the vendor offers a comprehensive set of features capable of supporting businesses of all sizes in maturing mobile security approaches. Pradeo delivers an MSM solution that provides a 360-degree approach to protecting mobile workers through a combination of network, mobile operating system, and mobile app security.

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily012.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily012.png

Market Radar – Mobile Security Management Solutions

12. Figure 12: Pradeo’s MSM solution

Source: Pradeo

Pradeo’s MSM solution is a core offering from the vendor that is developed on top of its cyberthreat intelligence platform—a platform that collects data on mobile threats via a network of millions of sensors across the world. AI is then used to make sense of this information, providing Pradeo’s customers with actionable insights they can use in strengthening their mobile security posture. Pradeo offers good mobile app security capabilities, with its solution capable of analyzing and scanning both Android and iOS apps quickly to identify and contextualize behavioral and vulnerabilities; consequently, this enables customers to create policies that only block applications that represent a real threat. Pradeo can also detect mobile threats across both professional and personal data on iOS and Android devices, regardless of whether the device is personally owned or corporately provisioned. Personal devices can be protected with administrators unable to see personal data, including the personal apps users may have installed on BYO devices. Additionally, and instead of a blanket block of uncompliant or malicious apps detected, Pradeo allows customers to only block access until the user remediates the threat. The distribution of mobile apps on unmanaged devices is also possible through Pradeo’s secure private app store. Businesses can customize this store in line with their corporate branding and manage content that can be downloaded from it, including apps from public stores that are approved, native private apps, plus other business files and resources.

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily013.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily013.png

Market Radar – Mobile Security Management Solutions

Highlights  Pradeo provides a solution that delivers enterprises a 360-degree view of the mobile threat

landscape, covering endpoint, app, and the network.

 Pradeo can be deployed as a standalone solution, or through integrations that exist across numerous UEM tools.

 Additional mobile app security capabilities are provided by two additional Pradeo products in Mobile App Security Testing and In-App Protection.

 Pradeo’s solution can prevent man-in-the-middle attacks across unsecured networks by screen network configurations in real-time.

 Security posture can be continuously monitored via an admin portal using real-time and on- device security audits.

 Pradeo ensures the security of mobile devices accessing work data and resources through monitoring aspects such as whether a device is jailbroken, abnormal battery usage detection, or if the OS is outdated.

Background Pradeo was founded in 2010 by co-founders Vivian Raoul (CTO), Clément Saad (president & CEO), and Stéphane Saad (CSO). The company was created on the vision that as mobility and mobile apps became more important to businesses, traditional security and antivirus approaches would need to evolve to protect organizations. In 2013, post its research and development process, Pradeo released its first security solution to market. Pradeo solutions help businesses detect mobile threats in real-time, and in the testing and protection of mobile apps and mobile endpoints. Pradeo is a private company headquartered in France.

Strategy and roadmap Since the pandemic and the sudden mass shift to remote working began in early 2020, Pradeo has experienced an exponential increase in interest and adoption of its mobile security solutions from organizations. In addition to acquiring several large and important new customers over this period, Pradeo also reports that the number of channel and OEM partners it is working with has also increased. To strengthen how it enables its partners, Pradeo launched a new program and strategy dedicated to improving support for channel partners in early 2021. In addition to its mobile security capabilities, Pradeo also delivers additional security solutions including a secure app store to help businesses protect non- managed devices; mobile application security testing to test and validate the development of mobile apps; and an in-app protection solution to protect users of sensitive apps against fraud and data leakage.

Market impact Pradeo has experienced significant revenue growth adoption of its mobile security solution over the past twelve months, largely driven by the increased demand enterprises have for new mobile security capabilities in response to the pandemic. Pradeo has good traction amongst European organizations, with the adoption of its solutions across North America also being quite strong. The majority of Pradeo’s sales are currently made via its channel partners, validating that its approach to strengthening support of its channel partner program and ecosystem is an important strategic move. A small percentage of sales are currently made via CSPs, indicating that mobile carriers could be an area of potential growth for Pradeo, especially as more CSPs look to advance and introduce new workplace mobility and digital workplace

Market Radar – Mobile Security Management Solutions

services. Pradeo’s solution is adopted by businesses across different industries, with traction amongst regulated industries, including financial services and healthcare businesses, being especially strong.

On the radar: Sophos 13. Figure 13: Omdia market radar recommendation—Sophos

Source: Omdia

Why put Sophos on your radar? Sophos is well renowned for its enterprise security solutions, not just in protecting mobile endpoints, but in delivering a set of capabilities as part of a broader security ecosystem that supports business security threat detection and response objectives. Sophos positions its mobile security management capabilities as a critical component of its comprehensive Sophos Adaptive Cybersecurity Ecosystem, as shown in Figure 14.

14. Figure 14: Sophos Adaptive Cybersecurity Ecosystem

Source: Sophos

Enabling businesses to manage and protect mobile devices alongside other platforms and service capabilities is key for Sophos. Sophos’s mobile security solution, Intercept X for Mobile, can be managed and administered alongside the other security solutions available in Sophos Central—the vendor’s enterprise security platform. Collectively, these capabilities help businesses secure things such as endpoints, servers, the network, cloud workloads, email, and wireless access points. These enterprise solutions and the additional services Sophos delivers are developed on top of the threat intelligence capabilities the vendor

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily014.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily015.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily014.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily015.png

Market Radar – Mobile Security Management Solutions

has. Mobile threat events also hydrate Sophos’s XDR data lake, enabling businesses with the visibility to conduct threat hunting across platforms and events to help admins in quickly identifying and resolving issues. Sophos also delivers a very capable and well-renowned unified endpoint management solution that is integrated with its mobile security capabilities as part of the Sophos Central platform. This combined offering enables businesses to manage and protect mobile devices via a single pane of glass and a unified set of security policies.

Highlights  Sophos boasts a comprehensive ecosystem of well-integrated enterprise security solutions that

help businesses protect, detect, and respond to a variety of different cyberthreats.

 Sophos’s mobile security management capabilities are an integral component of the vendor’s broader endpoint protection strategy and Sophos Central ecosystem. These capabilities help businesses secure and protect mobile devices alongside desktop and server platforms.

 The Sophos XDR data lake enables granular cross-platform threat investigation and response. This allows customers to correlate threat events across the network, irrespective of where they were identified, enabling further visibility into the root cause and impact of threat events.

 Sophos Intercept X for Mobile utilizes ML to detect both known and unknown threats across networks, devices, and mobile apps. This capability is powered by the same deep learning (DL) technology that is used in Sophos’s desktop and server products.

 Sophos Central delivers an integrated UEM and MTD solution, enabling admins to manage and protect devices through a single pane of glass.

 The Sophos MTD app can be deployed to corporate or personally owned devices. The functionality is the same irrespective of where the app is installed, except for web filtering on iOS (which requires iOS supervised mode).

 Sophos has a dedicated data science division that focuses on developing new edge ML technology. This knowledge powers Sophos’ MTD solution.

Background Sophos, headquartered in the UK, provides cybersecurity solutions to businesses across the globe to help them guard against attacks at the endpoint, network, and cloud layer. Mobile security is a key component of Sophos’s endpoint protection offering and is richly integrated with the suite of products offered as part of the Sophos Central Cybersecurity platform, especially its UEM products. After its acquisition of Dialogs in 2011, Sophos introduced the first version of its mobile threat defense product for Android in 2012, as both a free solution and a licensed component of its MDM products.

Strategy and roadmap The sudden and at-scale shift to remote working has led to an increased focus on mobility and security. This is evolving into a long-term focus for many organizations that are looking to embrace hybrid working models. Sophos believes that these trends, combined with the rise of zero trust access practices, will see business adoption and demand for its mobile security capabilities increase. In further developing its mobile security capabilities, Sophos’s key focus will be on enhancing its threat correlation capabilities, using its XDR data lake to allow cross-product investigation and threat hunting. Another upcoming capability is the “User Activity Verification” feature, which leverages the MTD app installed on a device to add context to potentially suspicious events taking place elsewhere in a customer's environment. Going forward, Sophos is

Market Radar – Mobile Security Management Solutions

looking to help deliver greater insight into historical mobile events and actions—something it aims to better support through the upcoming Sophos Data Lake capability. Additionally, further enhancing zero trust access features is an area the vendor continues to monitor in identifying any additional capability enhancements that could be made on top of its current offering.

Market impact Sophos, like with many of its mobile security management vendor peers, is experiencing a high-level adoption and revenue growth associated with its solution. This growth is being driven by business needs to better secure hybrid workstyles and the increased focus organizations are placing on zero trust access practices and technologies. Sophos is a channel-first company and virtually 100% of its business is conducted through channel partnerships. Sophos’s partner ecosystem totals over 65,000 active partners and ranges from traditional two-tier channel partners to MSP, MSSP, telcos, and OEMs. Sophos’s strongest presence is in Europe, followed by the Americas. Its MSM solutions are adopted by businesses across multiple different verticals, with adoption amongst professional services, manufacturing, and healthcare organizations being especially strong.

On the radar: Wandera 15. Figure 15: Omdia Market Radar recommendation—Wandera

Source: Omdia

Why put Wandera on your radar? Wandera is an established name in the realms of mobile security, and the vendor offers a feature-rich solution that can help businesses of all sizes and different maturity levels improve how their mobile workforce is secured and managed. Wandera's offering includes four key components: the Wandera client application; a globally distributed network service; a mobile threat intelligence engine; and integration points that allow the service to interface with other security and enterprise management tools, including MDM/UEM, EPP/EDR, and SIEM platforms. Wandera’s security suite enables administrators and endpoint management teams to assess, in real-time, the overall health of their mobile device fleet and to implement policies, such as those that prevent phishing attacks, from impacting worker productivity. In BYO scenarios, workers themselves can run security scans and remediate threats using in-app guidance. The on-device app monitors and collects usage statistics for analysis, in addition to monitoring configuration changes and other user-driven events that may occur. The combination of capabilities delivered by Wandera, both on and away from the device itself, helps ensure employees remain secured even when disconnected from a network. In addition to features that secure Android and iOS platforms, Wandera’s solution also supports devices running macOS and Windows 10 operating systems.

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily016.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily016.png

Market Radar – Mobile Security Management Solutions

16. Figure 16: Wandera Unified Security Platform and Admin Experience

Source: Wandera

Wandera’s capabilities are available through different cloud providers, including Amazon Web Services, Google Cloud Platform, IBM Cloud, Microsoft Azure, Rackspace, and others. Wandera does not offer native UEM and device management functionality outside the core of its mobile security capabilities, but the vendor does partner and integrate with all the major UEM providers and its deepest technical integrations are with UEM vendors.

Highlights  Wandera offers a single solution that secures different endpoint management approaches,

including BYO, corporate owned personally enabled (COPE), or corporate owned-business only (COBO).

 Wandera has a strong relationship with mobile operators, including the likes of AT&T, Vodafone, Verizon, and Telstra.

 Wandera's cloud platform is provider-agnostic and can be deployed into multiple cloud service provider's ecosystems.

 The Wandera zero trust access solution—available as standalone or via the MTD security suite— protects access to any business applications by restricting access only to protected endpoints.

 Wandera provides businesses with real-time visibility and analytics into mobile threats, enables zero-trust access to enterprise applications, and inspection and content filtering at the network level.

 The solution provides businesses with a single unified analytics and policy engine that enables customers to configure once and apply everywhere.

 Whilst Wandera does integrate with leading UEM solutions, the solution is not dependent on a UEM to enforce some mobile security policies. Policy controls are available in the network, in apps, and via third-party signaling.

 Wandera’s security capabilities are powered by insights delivered via its mobile intelligence: real-time insights and analytics machine (MI:RIAM) threat intelligence engine. MI:RIAM ingests information from 425 million mobile sensors daily to deliver protection against known and zero- day threats, spanning endpoint, network, and content security.

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily017.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily017.png

Market Radar – Mobile Security Management Solutions

Background Whilst this report was in development, Jamf, a technology vendor that provides Apple enterprise management software, announced it signed a definitive agreement to acquire Wandera. This acquisition will bring mobile security management and endpoint management capabilities closer together, enabling customers to manage and secure an Apple enterprise ecosystem in a more unified and consistent way. The acquisition will enable Jamf to secure Apple devices and other modern operating systems. Additionally, Wandera’s zero trust access capabilities will mean Jamf can extend its security capabilities deeper into the application stack.

Wandera was founded in 2012 and currently serves over 2,500 enterprise customers. The company now has over 240 employees, with 70% of its workforce employed in R&D roles. Its customers include Mastercard, Deloitte, Santander, and PayPal. Wandera boasts a diverse partner ecosystem that spans other enterprise technology partners and service providers. The vendor counts over 150 active channel partners globally. Its leading service integrator partner is IBM, which has entered an exclusive relationship to resell and integrate Wandera into its solutions. IBM uses Wandera as its embedded threat defense solution for its MaaS360 UEM customers. Wandera also works closely with Cybereason that white-labels Wandera for the mobile component of its global EDR product. Apple and Telstra have also partnered with Wandera in Asia and Oceana to offer an exclusive bundle for the iPhone 12 launch for enterprise customers. The mobility-as-a- service (MaaS) offering delivers a device from Apple, connectivity from Telstra, and a made-for-Apple security product from Wandera.

Strategy and roadmap Wandera is investing heavily in extending its ZTA offering that enables businesses to secure access to applications regardless of where they are hosted (public cloud, private cloud, on-premises). Wandera is also committing to using data science and ML to counter emerging threats. The company continues to invest in zero-day threat prevention, with particular emphasis on native mobile applications. Wandera's MTD solution already supports the majority of mobile OS’s adopted by organizations, and the vendor is actively expanding support for additional platforms, including MacOS and new IoT platforms. Wandera recently expanded its Identity Provider integrations to directly onboard new users using SSO for broader BYOD support. Wandera has been expanding workflow integrations (e.g., through its Mobile EDR offering with EPP/EDR Leader Cybereason) and the vendor plans to further expand its ecosystem integrations to ensure its solution is not being used in isolation and is fully integrated into a broader enterprise security operations stack and approach.

Market impact The majority of Wandera’s sales are made through its CSP/telco partners and the company has quite an equal distribution of enterprise customers across both North America and Europe. Wandera also works with major mobile operators across multiple geographies, including AT&T, BT, Deutsche Telekom, Telstra, Optus, Singtel, O2, Orange, Three, T-Mobile, T-Systems, Verizon, and Vodafone. Encouragingly, the majority of Wandera’s Mobile Operator partners adopt a solution-focused approach as an important element of their core mobile offerings, rather than delivering a mere reseller model. For example, business customers can add Wandera to individual lines of service they subscribe to from a mobile operator and receive consolidated enterprise billing through this arrangement. Wandera reports that it has experienced especially strong customer growth and expansion through their mobile operator channel over the past twelve months. From an industry perspective, the adoption of Wandera’s mobile security capabilities is especially strong amongst financial services, healthcare, professional services, and manufacturing organizations. Wandera, like some of its vendor peers in this space, has experienced significant revenue

Market Radar – Mobile Security Management Solutions

growth over the past twelve months, highlighting the increased interest and adoption around these capabilities—growth driven by the business need to better secure and manage a more mobile workforce.

On the radar: Zimperium 17. Figure 17: Omdia Market Radar recommendation—Zimperium

Source: Omdia

Why put Zimperium on your radar? As the workforce becomes more geographically dispersed and empowered by mobile technologies, the traditional office perimeter is eroding. It is not just the locations employees are working from that are changing—the way employees access and work with important business data and resources is also changing. Zimperium provides capabilities that help enterprises extend existing IT security and threat prevention practices to the mobile workforce and delivers a feature-rich mobile security solution that has strong adoption and market recognition amongst enterprises. Zimperium offers capabilities that protect a mobile workforce against a range of different device, network, and app-level security threats. Specifically, Zimperium can detect device compromises, malicious network attacks, phishing attacks, and risky apps including zero-day malware and other variants. The solution achieves this on-device using its z9 detection engine that uses ML to quickly detect both known and unknown malicious applications, along with their malware family regardless of whether the malware has been seen before or not.

Zimperium’s mobile security solutions span multiple products that collectively help businesses protect against a diverse set of mobile risks. Zimperium’s mobile device security solution, zIPS, has been purpose- built for the enterprise and enables businesses to secure work across both corporate and personally owned devices running either Android, ChromeOS, or iOS. The Zimperium app is installed locally on devices and does not require an internet connection or cloud-based sandbox to protect against mobile threats. To provide visibility across the diverse range of threats faced and in supporting how such threats can be managed, Zimperium provides a dashboard, zConsole, where admins can quickly view a summary of threats that have occurred. Additionally, zConsole provides information on attack types, location of attacks, and the top networks attacked, along with other metrics such as device types, and overall security posture of devices. Forensic information on attacks can also be shown by either a report or through automatically exporting the insights to a SIEM system.

In addition to providing a strong set of standalone mobile security capabilities, Zimperium also partners with numerous enterprise technology vendors that deliver complimentary mobile and security solutions. For example, Zimperium has a longstanding partnership with unified endpoint management vendor MobileIron (acquired by Ivanti in 2020) to deliver an integrated mobility management and security solution. Zimperium also partners with Ping Identity in offering a solution that helps businesses extend zero-trust architectures and approaches to the mobile endpoint.

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily018.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily018.png

Market Radar – Mobile Security Management Solutions

18. Figure 18: Zimperium’s approach to enterprise mobile security

Source: Zimperium

 One of Zimperium’s on-device protection key features is its z9 ML engine that references billions of data points in identifying mobile-related risks. The ML engine is trained in the cloud against the billions of data points to generate the models, but the actual detection uses those models without needing to be connected to the cloud.

 Zimperium boasts a strong partner ecosystem, in addition to rich integrations with UEM and zero-trust solutions provided by the likes of MobileIron (Ivanti), Microsoft, VMware, and Ping Identity.

 Zimperium’s mobile security solution can be integrated into SIEM, UEM, and XDR platforms, enabling administrators with unified access to important security data and insights.

 In addition to notifying security teams of mobile threats, Zimperium can also notify mobile workers themselves and advise them on recommendations and contextual actions they can take to remediate issues.

 Zimperium can detect and alert employees and security admins to threats across corporate and personally owned devices, even when these devices are not connected to the internet.

https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily019.png https://omdia.tech.informa.com//-/media/tech/omdia/assetfamily/2021/04/14/market-radar--mobile-security-management-solutions/assetfamily019.png

Market Radar – Mobile Security Management Solutions

 zLabs is Zimperium’s mobile security research group, responsible for discovering and analyzing cyberattacks.

Background Zimperium was founded in 2010 and the company is headquartered in Dallas, Texas. Zimperium supports both SaaS and on-premises deployment models, and whilst its commercial cloud leverages AWS in accordance with NIST 800-53 standards, the solution is cloud-agnostic and can be installed across Azure, Google Cloud, Oracle, or a private cloud.

Strategy and roadmap An important enterprise mobility initiative going forward for businesses will be in optimizing workflows and tasks to help make mobile working more productive and a better experience for employees. How richly mobile security and management solutions integrate with digital workflow automation platforms will be important in building these new, mobile-first ways of working. In supporting businesses on this journey to modernize, mobilize, and automate important workflows, Zimperium provides a full suite of REST API's that can be leveraged by systems like ServiceNow. Additionally, customers can develop additional automated mobile workflows by leveraging Zimperium's integration with UEM solutions.

Market impact Zimperium has strong adoption amongst North American and European organizations, with the vendor boasting a very healthy share of the overall mobile security management market. Whilst Zimperium has good traction across all industries, it is particularly well adopted amongst public sector businesses. Zimperium has strategic partnerships and relationships with mobile operators. All of these are either direct OEM partnerships with Zimperium or via other OEM relationships in place, such as with SMB opportunities with AT&T via Ivanti, or Verizon via BlackBerry Cylance. Whilst Zimperium’s solution and management console can be deployed on-premise and as SaaS, many businesses the vendor currently works with opting for the latter deployment method. As the need for new approaches to secure and manage the mobile workforce increases due to the workstyle changes brought about by the pandemic, the market for mobile security management solutions is growing. Like many of its peers in this category, Zimperium is also experiencing healthy growth rates associated with the adoption of its mobile security solutions.

Honourable mentions MobileIron/Ivanti Acquired by Ivanti in December 2020, MobileIron first entered the mobile device management (MDM) space in space in 2007. The company developed a strong reputation in this product category and later expanded its offering through support for Windows and macOS endpoints, making it a true UEM solution. Recognizing the need for mobile device security beyond the capabilities offered in UEM alone, MobileIron entered into an OEM agreement with Zimperium in October 2017. The result was the introduction of MobileIron Threat Defense which offers protection and remediation against mobile threats that occur at the device, network, and application-level—as well as phishing attacks for Android and iOS devices. VPN- based anti-phishing capabilities were introduced in July 2020. At the time of writing, Ivanti is currently working to rebrand the former MobileIron solutions as Ivanti.

MobileIron is a vendor with a very strong heritage in enterprise mobile technology. MobileIron’s success has been built on its UEM solution that is widely adopted and offers market-leading capabilities in that

Market Radar – Mobile Security Management Solutions

product category. In addition to the MobileIron acquisition, Ivanti also acquired Pulse Secure to strengthen its zero-trust and broader enterprise security capabilities. In early 2021, Ivanti then acquired Cherwell in strengthening its enterprise service management and workflow automation capabilities. These collective capabilities are important as together they help support organizations looking to secure, manage, and enable a more hybrid workforce. The capabilities Ivanti now offers through its acquisition of MobileIron are particularly important as businesses are attaching greater priority and budget in adopting capabilities that can help improve how an increasingly mobile and hybrid workforce is managed and secured. MSM capabilities can be integrated directly into its UEM client supporting a more unified admin experience for creating and rolling out mobile security and management policies. This rich integration between mobile security and UEM can benefit overall security posture by making administrative tasks more streamlined, unifying policy development and enforcement across management and security, whilst deliver protection, detections, and remediation at the endpoint, network, and application level.

BlackBerry Protect Mobile Omdia invited BlackBerry to formally participate in this research, but the vendor declined the invitation; consequently, its mobile security capabilities are not assessed alongside other vendors in the comparative section of this report. Omdia recognizes that, in addition to its enterprise mobility heritage, BlackBerry has developed a strong reputation around enterprise security over recent years.

In late 2020, BlackBerry launched its new AI-powered mobile threat defense solution in BlackBerry Protect Mobile. The solution provides security admins with visibility and security controls across mobile, desktop, and server endpoints via a single administrator portal and security console. Protect Mobile is part of the broader BlackBerry Cyber Suite that also includes detection and response capabilities, behavioral analysis, continuous authentication, and AI-powered endpoint protection. The security capabilities can be deeply integrated with BlackBerry’s UEM solution in providing a greater level of mobility management and security controls. Although we were unable to accurately compare BlackBerry’s mobile security management capabilities alongside its vendor peers in this report, Omdia believes its solution provides a comprehensive set of mobile security features that should be explored by enterprises looking to better enable and secure a mobile workforce.

Kaspersky Kaspersky offers a range of different business security products, with mobile security capabilities being an important element of its Endpoint Security of Business suite. Kaspersky helps businesses secure devices and the mobile workforce through a combination of different features, including VPN, URL filtering, password and data protection, and anti-malware features.

Broadcom Mobile Threat Defense Broadcom offers mobile security management capabilities that help customers predict, detect, and prevent mobile attacks. In detecting mobile threats, Broadcom leverages ML elements both in the cloud and on- device. Broadcom’s solution protects across different mobile attack vectors including the device, app, and network. The solution can restrict connectivity to unsafe networks and detect malicious processes and apps, restricting the installation of the latter. In addition to integration with native Symantec security offerings, Broadcom’s solution can also be integrated with other third-party UEM and SIEM systems.

Security acronyms CASB: cloud access security broker

Market Radar – Mobile Security Management Solutions

By the end of the first decade of this century, adoption rates for the SaaS mode of delivering cloud- computing were skyrocketing, often without the knowledge of corporate IT departments. SaaS adoption was so easy that a veritable “shadow IT” could mushroom, such that CASBs first came into existence to restore the IT department’s visibility into exactly what SaaS service was being used. Soon thereafter, however, customers required a next step (i.e., the ability to enforce control of what could and could not be used), as well as what could be done on the SaaS platforms that were sanctioned (e.g., upload/download data; only upload in encrypted form; read-only access etc). The first wave of CASBs were proxy servers that could reside on customer premises or in the cloud, then a second wave added an API-based approach to viewing traffic to and from SaaS services.

While an essential security capability, CASB was destined not to survive as a standalone market. The vast majority of CASB vendors have now been acquired by broader security players, their technology being offered as part of a wider portfolio of capabilities.

EDR: endpoint detection and response

EDR is a technology that emerged in the early 2010s as it was becoming clear that the previous approach to endpoint security, which was based on identifying incoming malware by comparison with “signatures,” was failing to keep up with the rate at which new viruses were being created. EDR monitors incoming code to detect anomalies and respond to them in real-time, either by quarantining or blocking it outright, as defined by the customer. The previous approach is often referred to as Endpoint Protection Platform (EPP) technology, and while the two camps competed for customers’ attention a couple of years, they have now merged, with EDR vendors adding EPP capabilities and vice versa.

MDR: managed detection and response

The evolution of the XDR spectrum of technologies can be seen as a reaction by tech vendors to the waning efficacy of signature-based security. Detection and response is a more reactive approach to security, forced upon the industry by its inability to remain preventive with its signatures, and as such, XDR technologies tend to require the involvement of an organization’s security team, analyzing the alerts and determining the best response.

For companies that lack such in-house expertise, MDR has emerged, delivering XDR platforms as a service. There is considerable inconsistency in the market, however, with some MDR services really being no more than managed EDR (MEDR, as it were). Omdia advises potential customers to study the full scope of any MDR service they are considering. Check whether it covers endpoint, network, and cloud, and the degree to which it offers a range of response options, from recommended actions, through a Yes/No option to take remedial action on the customer’s behalf, to fully automated remediation once the customer is comfortable with the service’s capabilities. There are a lot of MEDR and MDr services masquerading as MDR.

MFA: multi-factor authentication

MFA is sometimes known as two-factor authentication (2FA). As usernames and passwords have proven increasingly insufficient for guaranteeing secure and appropriate access to IT systems and applications, the addition of a further “factor” or factors is required for greater security. Taking the username and password as a single factor, we can regard the additional one as a second, hence the 2FA acronym. On the other hand, MFA is a broader term that can involve the inclusion of one or more extra factors such as one-time passwords (OTP) sent over a different channel, knowledge-based answers (KBA) such as a mother’s maiden name or the name of a childhood pet, or biometric factors such as fingerprint, voice, or iris.

MSM: mobile security management—also known as mobile threat defense (MTD)

Market Radar – Mobile Security Management Solutions

Solutions that support enterprises in securing work across mobile devices and applications. MSM tools— also commonly referred to as mobile threat defense (MTD) solutions—leverage a range of different capabilities in securing mobile work, including threat detection and remediation across devices, applications, and the network. These solutions also offer advanced capabilities in securing and enabling the mobile workforce, including conditional access, ML, threat intelligence services, and user behavioral analysis features.

MSSP: managed security service providers

As IT functionality becomes more universally adopted, it increasingly lends itself to delivery as a service and a market emerges for managed service providers (MSPs). Security is a case in point, but given its complexity and the rate at which new types of security requirements emerge, some vendors specialize in security services alone, making it a full-time focus of their activities and employing large numbers of security professionals for the purpose. These are MSSPs, which generally serve larger enterprise customers with the most complex security needs. SMBs will often be served by more generalist MSPs with some degree of security capabilities such as firewall management.

NDR: network detection and response

After EDR garnered significant attention in the mid-decade, the same approach to detecting and responding to threat was applied to traffic on corporate networks. Many of the early NDR vendors came from a background of network traffic analysis (NTA), which is a technology that sits on a network to determine how well it is performing and enable improvements by removing bottlenecks etc. NTA vendors were well- positioned to expand into a security role by adding a response capability and rebranding as NDR. More recently, several start-ups came into existence to deliver NDR technology.

SIEM: security incident and event management

SIEMs are a core part of the security operations of many larger organizations, particularly those that take full responsibility for their own security rather than outsourcing it to an MSP or MSSP. SIEM, in which the “I” can refer to “incident” or “information,” is a technology that initially came into existence to centralize all the logs coming from IT systems, whether they be applications, servers, storage, or network devices. Starting out as log repositories, SIEMs were a natural place in which to analyze an organization’s attack surface and improve its security posture.

As time has gone on, more requirements have emerged for the SIEM. Firstly, there was a need to incorporate additional information sources such as NetFlow data from routers and switches. Then came the need to analyze the behavior of end-users and systems within the infrastructure (e.g., Why is that printer asking to access the customer database?), so several SIEM vendors acquired user and entity behavior analysis (UEBA) platforms. Most recently, there has been a need for SIEM users to go straight from determining what response is required to a threat they have identified to actually responding from within the same console, and SIEM vendors have incorporated security orchestration, automation, and response (SOAR) technology, often again through acquisition.

UEM: unified endpoint management

Solutions that help improve the management and visibility organizations have over a diverse endpoint estate. UEM solutions enable businesses to define and enforce policies across a range of different devices and operating systems, in addition to helping organizations improve and modernize an end-user computing ecosystem.

XDR

Market Radar – Mobile Security Management Solutions

As acronyms ending in DR began to proliferate, at the beginning of 2018, Omdia coined the term XDR, where the X referred to the fact that a spectrum of technologies was emerging to detect and respond on the endpoint (EDR), network (NDR), and even in the cloud (though CDR is not a widely used acronym). An analogous situation is the use of XaaS to cover the spectrum of cloud computing delivery models (IaaS, PaaS, and SaaS).

Nowadays the term is commonly explained as “extended detection and response” (i.e., gathering data from EDR, NDR, cloud security tools, and even email security platforms, bringing it into a common back end for analysis and the determination of remedial actions that can and do span a company’s entire IT infrastructure).

ZTA: zero trust access

Virtual private network (VPN) technology remains the dominant way of enabling secure remote access to corporate assets, with estimates for the size of the VPN market varying between $20bn and $35bn. However, the widescale migration of enterprise applications to the cloud represents a challenge to VPN architectures, particularly those that rely on a VPN concentrator residing in the corporate data center. New cloud-based alternatives, collectively referred to as ZTA technologies, have emerged as a more efficient potential replacement, and the working-from-home paradigm that expanded dramatically during the coronavirus pandemic threw an unexpected spotlight onto such alternative approaches.

ZTA platforms adopt one of two architectures. The first is software-defined perimeter (SDP), which places a Controller on the control plane of a connection and a Gateway on the data plane. A piece of client software on the user’s device requests permission from the Controller to access corporate assets, and if authorized, an encrypted tunnel is set up by the Gateway between the endpoint and the asset. The Gateway itself then goes into a pass-through mode, such that SDP adds no latency to the connection. Such technology is often marketed as licensed software for the customer to deploy on whatever network they prefer.

The second ZTA architecture is identity-aware proxy (IAP), where a proxy sits on both the control and data planes and brokers the connection, again over encrypted tunnels. Clearly, this route has the potential to add latency, so IAP is always offered as a service, with the provider carrying the customer’s traffic over a network that it operates, such that it can mitigate any latency via networking functions such as path optimization, deduplication, and so on.

Appendix

Methodology This report utilizes findings from extensive briefings with the participating vendors. This was accompanied by literature reviews and secondary research and supported by data from Omdia’s 2020 Future of Work survey.

Further reading How COVID-19 Has Forever Changed the Way People Work (October 2020)

Securing the mobile workforce state of the union report (October 2020)

https://omdia.tech.informa.com/OM012955/How-COVID-19-Has-Forever-Changed-the-Way-People-Work https://omdia.tech.informa.com/OM014295/Securing-the-mobile-workforce-state-of-the-union

Market Radar – Mobile Security Management Solutions

Author Adam Holtby, Principal Analyst, Digital Workplace

askananalyst@omdia.com

Citation policy Request external citation and usage of Omdia research and data via citations@omdia.com.

Omdia consulting We hope that this analysis will help you make informed and imaginative business decisions. If you have further requirements, Omdia’s consulting team may be able to help you. For more information about Omdia’s consulting capabilities, please contact us directly at consulting@omdia.com.

Copyright notice and disclaimer The Omdia research, data and information referenced herein (the “Omdia Materials”) are the copyrighted property of Informa Tech and its subsidiaries or affiliates (together “Informa Tech”) and represent data, research, opinions or viewpoints published by Informa Tech, and are not representations of fact.

The Omdia Materials reflect information and opinions from the original publication date and not from the date of this document. The information and opinions expressed in the Omdia Materials are subject to change without notice and Informa Tech does not have any duty or responsibility to update the Omdia Materials or this publication as a result.

Omdia Materials are delivered on an “as-is” and “as-available” basis. No representation or warranty, express or implied, is made as to the fairness, accuracy, completeness or correctness of the information, opinions and conclusions contained in Omdia Materials.

To the maximum extent permitted by law, Informa Tech and its affiliates, officers, directors, employees and agents, disclaim any liability (including, without limitation, any liability arising from fault or negligence) as to the accuracy or completeness or use of the Omdia Materials. Informa Tech will not, under any circumstance whatsoever, be liable for any trading, investment, commercial or other decisions based on or made in reliance of the Omdia Materials.

omdia.com

askananalyst@omdia.com

mailto:askananalyst@omdia.com mailto:citations@omdia.com mailto:consulting@omdia.com https://omdia.tech.informa.com/ mailto:askananalyst@omdia.com

Market Radar – Mobile Security Management Solutions

Citation policy Request external citation and usage of Omdia research and data via citations@omdia.com.

Copyright notice and disclaimer The Omdia research, data and information referenced herein (the “Omdia Materials”) are the copyrighted property of Informa Tech and its subsidiaries or affiliates (together “Informa Tech”) or its third party data providers and represent data, research, opinions, or viewpoints published by Informa Tech, and are not representations of fact.

Omdia Materials are delivered on an “as-is” and “as-available” basis. No representation or warranty, express or implied, is made as to the fairness, accuracy, completeness, or correctness of the information, opinions, and conclusions contained in Omdia Materials.

To the maximum extent permitted by law, Informa Tech and its affiliates, officers, directors, employees, agents, and third party data providers disclaim any liability (including, without limitation, any liability arising from fault or negligence) as to the accuracy or completeness or use of the Omdia Materials. Informa Tech will not, under any circumstance whatsoever, be liable for any trading, investment, commercial, or other decisions based on or made in reliance of the Omdia Materials.

askananalyst@omdia.com

mailto:citations@omdia.com mailto:consulting@omdia.com https://omdia.tech.informa.com/ mailto:askananalyst@omdia.com

Report | Market Radar – Mobile Security Management Solutions, 2021

Item Type: pdf