Read in place
Files are opened read-only where they are stored. Nothing is copied into the product.
Every statement here is dated and checked. See what is live on the Trust page.
Illustrative chart of three ways to look at a device, from left to right: app-store security apps, the SectraTEK device scan and a full forensic examination. Block height suggests relative cost per device: lowest on the left, in the middle for the SectraTEK device scan, highest on the right. The SectraTEK device scan sits in the middle and is the highlighted block.
Automated self-checks with a quick, low-cost result
Are there indicators of compromise? How exposed is it? Answered with facts.
Recovery of deleted and concealed evidence, detailed reporting and expert testimony
For matters where findings must hold up in court
Scroll to follow one case from the first question to the report.
SectraTEK compares what is on the device with SectraTEK Intelligence, our dated and curated corpus, and grades each match. Every match tells you where to look next.

See which apps could read which kinds of data, so the answer to "what could they see" rests on the evidence, not on a guess.

The AI-Dossier opens with a readable cover that names the evidence examined, what it can and cannot establish and the key figures of the case.

Every figure carries the date it was measured. SectraTEK Intelligence is our own curated corpus, built by SectraTEK Research, and rated before it ships.
About 648,000 indicators, as of October 6, 2026.
See the corpus by indicator type| Category | Indicators | As of |
|---|---|---|
| Spyware | 5,288 | October 6, 2026 |
| Exploit kits | 258 | October 6, 2026 |
| Stalkerware | 6,073 | October 6, 2026 |
Counts by category, each with the date it was measured.
In SectraTEK Full the examiner confirms or rejects each one, and the decision travels with the finding into the AI-Dossier.

Six steps on a synthetic case. Keyboard friendly. Nothing is sent anywhere.
SectraTEK reads evidence in place, records what it read, and keeps an audit ledger you can check.
Files are opened read-only where they are stored. Nothing is copied into the product.
A SHA-256 hash of the evidence is recorded in the case before analysis starts, and a final check near the end confirms the evidence still matches.
9f86d081 884c7d65 9a2feaa0 c55ad015 (sample)Case actions, including examiner decisions, go into the application audit ledger, so you can show who did what and when.
The report names the evidence it covers, so the work can be followed from evidence to conclusion.
Findings you can explain to a client, and device checks you can deliver as a service.
Triage a device before deciding whether a full examination is justified.
Evidence handling and procurement answers in one place.
A dossier that asks for a report readers who are not examiners can follow.
What the Lab makes of the attacks in the news and of the evidence a phone keeps. Every article names its sources.
Threat Research
At a two-day offensive-security conference in Paris, researchers showed an iPhone restarting into a root shell and a run of Android and boot-level research. Almost none of it has been released, and that gap is the story.
No functional difference: the same detection engines, the same intelligence, the same verified results. The difference is the workspace around them.


From $2,500 a year, one seat


From $1,500 a year, one seat
Annual licenses, US dollars, taxes excluded. A ruggedized tablet and Enterprise terms are on the pricing page.
Schedule a demo, or request a quote. Your SectraTEK contact takes care of the rest, including payment.