Mobile threat detection and intelligence platform

Examine a phone. Explain the result.

One workflow from the first file to the finished report. Every finding is graded, explained in plain language and ready for your decision. Choose SectraTEK Full to keep the whole case, or SectraTEK Lite to go from case creation to results at speed.

Overview

The two questions an examiner is asked.

Has this device been compromised, and what was within reach? SectraTEK answers both from the evidence and shows you how it got there.

Compromise

Compares the evidence with SectraTEK Intelligence, our dated and curated corpus. Each match is graded and arrives with a plain-language explanation.

Exposure

Shows which apps and services could reach which kinds of data, so the answer to what could have been seen rests on the evidence.

SectraTEK Full
Insight screen of a demonstration case: 45 correlated leads weighted by severity, 44 of them awaiting corroboration, under the reminder that every lead is a starting point, never a verdict.Insight screen of a demonstration case: 45 correlated leads weighted by severity, 44 of them awaiting corroboration, under the reminder that every lead is a starting point, never a verdict.
Demonstration case. Insight in SectraTEK Full: correlated leads weighted by severity, each one waiting for you to corroborate.
How it works

From intake to a reviewed report.

Intake

Add the extraction. SectraTEK reads it where it is stored, read-only, and records a SHA-256 hash of it before analysis starts.

Extraction review

See what was found and what was read, category by category.

Findings

Findings are graded red, amber or green, each with a plain-language explanation and a clear way to read it.

Report

In SectraTEK Full you build the report from the case itself: choose the sections to include, add the case information and a title, and export it.

The complete AI dossier is built from the same verified results in both editions, ready for the AI tool or analyst you choose.

Walk through each step on a sample case

Take the tour

The app, one screen at a time.

Four guided examinations and the Quick Capture collector, step by step on demonstration cases. The red numbers in each picture are named in the list under it. Use the step list, or the Previous and Next buttons.

iPhone full file system

From a full file system image to an AI dossier an examiner approves, one screen at a time.

SectraTEK Full screens

Create the examinationStep 1 of 14

Start an examination

Open the iOS Examination card on the home screen. It covers sysdiagnose, backup and full file system evidence.

SectraTEK Full
Start an examination. Open the iOS Examination card on the home screen. It covers sysdiagnose, backup and full file system evidence. 1 red numbered mark points to: Choose iOS Examination.
Demonstration case. The red numbers in the picture match the list below.
  1. Choose iOS Examination
Step 1 of 14: Start an examination

Every picture is a screenshot of the running application on a demonstration case, with identifiers blurred. Nothing here is a customer result.

Findings and reports

Hand the whole examination to your own AI.

The AI-Dossier asks for an executive report that a senior executive, general counsel or board member can read in minutes, with the technical depth placed behind it in appendices.

The whole examination

The AI-Dossier carries the whole examination to the AI tool you choose: the findings with the examiner's dispositions, Insight leads, threat intelligence matches, exposure and security configuration results, permission correlation, the processing record and the evidence integrity history.

A prompt that is ready to use

The AI-Dossier includes a ready-to-use prompt written for the type of evidence examined, so the AI tool you choose knows how to read it and what to write.

Evidence references that stay

Evidence references stay with the AI-Dossier: every file in it is listed with its hash, and its instructions ask the report to tie each material statement to the records behind it.

Honest about its limits

The AI-Dossier's instructions ask the report to separate evidence from inference, weigh benign explanations, keep contradictions and limitations in view, and never treat a result with no findings as proof that a device is clean.

Built around your client's concern

When a client complaint is attached to the case, the AI-Dossier carries it and the instructions ask for the report to be built around the client's concern; without one, the report is framed as a general device compromise assessment.

Stays on your computer

SectraTEK prepares the AI-Dossier on your computer and does not send it anywhere; case data leaves your machine only if you choose to give the dossier to an AI tool or an analyst.

SectraTEK Lite
SectraTEK Lite AI dossier screen: take this case to your own AI, with the package contents and the step that prepares the dossier. Nothing is pressed.
Demonstration case. The AI dossier screen: take the case to your own AI, with the package contents and the prompt.

Read the product sheet

Evidence integrity

Read in place. Hashed. Logged. Reported.

Read in place

Files are opened read-only where they are stored. Nothing is copied into the product.

Hash before analysis

A SHA-256 hash of the evidence is recorded in the case before analysis starts, and a final check near the end confirms the evidence still matches.

9f86d081 884c7d65 9a2feaa0 c55ad015 (sample)

Decisions are logged

Case actions, including examiner decisions, go into the application audit ledger, so you can show who did what and when.

The report carries it

The report names the evidence it covers, so the work can be followed from evidence to conclusion.

Editions

SectraTEK Full and SectraTEK Lite.

There is no functional difference between them: the same detection engines, the same intelligence, the same verified results. What differs is the workspace around the results. Lite keeps the results. Full keeps the case.

SectraTEK Full

Full keeps the case. The complete workspace for the case. You work the case inside SectraTEK.

  • Browse analyzed data and processing logs, where the evidence type provides them
  • Findings with examiner review, Insight, and permission and access correlation
  • Threat intelligence pages, file explorer and tags
  • The integrated AI assistant, multiple user accounts and collaboration
  • A report builder: choose the sections and the case information of your own report

From $2,500 a year, one seat

SectraTEK Lite

Lite keeps the results. The fast lane from case creation to report.

  • Create a case, run the examination and read your results in one clear overview
  • Summaries and excerpts of findings, Insight, permissions and threat intelligence
  • The complete AI dossier, ready for your own AI tool or analyst
  • No workspace to manage and less to learn

From $1,500 a year, one seat

SectraTEK Full
Analyzed data screen of a demonstration case: the first categories of examiner-ready observations with their counts.
Demonstration case. SectraTEK Full keeps the case: the analyzed data sits in the workspace, in categories you can open.
SectraTEK Lite
SectraTEK Lite overview of a demonstration Android case: the device and build, the security patch level, the evidence and the AI dossier, print summary and processing actions.SectraTEK Lite overview of a demonstration Android case: the device and build, the security patch level, the evidence and the AI dossier, print summary and processing actions.
Demonstration case. SectraTEK Lite keeps the results: the case overview, with the AI dossier as the deliverable.
SectraTEK Lite compared with SectraTEK Full
FeatureSectraTEK LiteSectraTEK Full
The same in both editions
Detection enginesAll eight enginesAll eight engines
SectraTEK IntelligenceIncludedIncluded
Evidence handlingReferenced in place, read-onlyReferenced in place, read-only
Graded results with plain-language explanationsIncludedIncluded
Complete AI dossierIncludedIncluded
SupportAll support is priorityAll support is priority
The workspace around the results
Case overviewSummaries and excerpts, in one clear overviewOverview and full workspace
FindingsIncluded in the report and overviewFull workspace, with examiner review
InsightIncluded in the report and overviewFull workspace
Permission and access correlationIncluded in the report and overviewFull workspace
Threat intelligence pagesIncluded in the report and overviewFull workspace
Analyzed data and processing logsIncluded in the report and overviewFull workspace
File explorer and tagsIncluded in the report and overviewFull workspace
Integrated AI assistantYour complete AI dossier, for the AI tool you chooseFull workspace
Report builderThe complete AI dossier is your deliverableChoose the sections and the case information of your own report
Multiple user accounts and collaborationOne examiner, in and out quicklyFull workspace

Choose Lite when speed matters

  • Fast-moving teams that go from case creation to results in a few focused screens
  • Field work and high case volume: processing carries on while you step away
  • Labs that prefer to deliver the report and move on
  • The same trusted results and the same intelligence as Full

Choose Full when you work the case

  • Examiners who investigate inside SectraTEK and keep the whole case
  • Teams that review together, with accounts and roles for each person
  • Cases revisited, re-checked and extended over time
  • The same engines and intelligence as Lite, with the workspace around them

SectraTEK Lite, in the app

From case creation to results in a few focused screens. These are its own screens.

SectraTEK Lite
SectraTEK Lite examinations list: demonstration examinations with their status and the overview and delete actions.
Demonstration case. The examinations list, with the status of each examination.
SectraTEK Lite
SectraTEK Lite processing screen of a demonstration mobile traffic case: completed in seventeen seconds, each step of the examination checked off, and the processing steps for the case.
Demonstration case. Processing: each step of the examination checked off as it completes.
SectraTEK Lite
SectraTEK Lite overview of a demonstration Android case: six apps deserve a closer look, with the permissions each requested and the leads for corroboration.SectraTEK Lite overview of a demonstration Android case: six apps deserve a closer look, with the permissions each requested and the leads for corroboration.
Demonstration case. The overview: the apps that deserve a closer look, with the permissions each requested.
SectraTEK Lite
SectraTEK Lite AI dossier screen: take this case to your own AI, with the package contents and the step that prepares the dossier. Nothing is pressed.
Demonstration case. The AI dossier: take the case to your own AI.
Findings on a demonstration case, on the tablet: the first finding with its severity and reliability and the disposition the examiner sets.
Demonstration case. Findings on the tablet frame.
Ruggedized tablet

Take the examination to the field.

A pre-configured, ruggedized tablet that arrives ready to use. $5,500, hardware plus the first-year license, with SectraTEK Full.

  • SectraTEK Lite, or both editions, arranged with sales
  • After year one the seat renews at the Professional one-seat price for its edition
  • Tablet model, warranty and support terms agreed with your SectraTEK contact
Specifications

What it reads, what it writes, what it connects to.

Evidence it reads

  • iOS file system extractionsConfirm
  • Android file system extractionsConfirm
  • Device backupsConfirm
  • Mobile network traffic capturesConfirm

What it produces

  • Report builder, in SectraTEK FullConfirm
  • AI dossierConfirm
  • Hash manifest and audit ledgerConfirm

What it connects to

  • My Sectra, for licenses and updatesConfirm
  • Your own workstation, where the examination runsConfirm

SectraTEK works from files you already have, and your evidence stays with you.

See it on your own cases.

Schedule a demo, or request a quote. Your SectraTEK contact takes care of the rest, including payment.

Read the Cookie Statement