Device evidence
SectraTEK reads iOS file system extractions, Android file system extractions and device backups, and it analyzes captures of mobile network traffic.
Specifications
What it reads, what it writes, what it connects to.
The evidence types SectraTEK reads, the deliverables it produces, what your workstation needs and a one-page product sheet.
Evidence
What SectraTEK reads.
Network captures
For a mobile traffic examination an existing capture file is chosen in the evidence browser (Select a capture file), referenced where it is stored, and analyzed without any network setup. SectraTEK does not upload or copy it.
Quick Capture
Collect from the phone, step by step.
A guided collector
SectraTEK Quick Capture guides you step by step through collecting the files from an iPhone, an iPad or an Android phone.
iPhone and iPad
Quick Capture for iPhone needs iOS 17 or later, checks that Developer Mode is on and shows the steps if it is not. The network capture is optional: skipping it still produces the file.
Android
Quick Capture for Android lists the five steps to turn on USB debugging and then detects the phone.
Deliverables
What SectraTEK produces and connects to.
Report
In SectraTEK Full you build the report from the case itself: choose the sections to include, add the case information and a title, and export it.
AI dossier and audit ledger
The complete AI dossier is built from the same verified results in both editions, ready for the AI tool or analyst you choose.
The application audit ledger records who did what and when, and verification shows a changed record.
My Sectra
My Sectra is where you manage your licenses and updates.
SectraTEK analyzes evidence on your own workstation; evidence is referenced in place.
System requirements
What your workstation needs.
SectraTEK runs on your own workstation, next to the evidence it examines.
Your workstation
SectraTEK analyzes evidence on your own workstation; evidence is referenced in place.
The SectraTEK installer is for 64-bit Windows 10 and Windows 11.
Because evidence is read where it is stored, keep it on storage the workstation can reach quickly, and leave room beside it for the case files.
Your phones
SectraTEK reads iOS file system extractions, Android file system extractions and device backups, and it analyzes captures of mobile network traffic.
Quick Capture for iPhone needs iOS 17 or later, checks that Developer Mode is on and shows the steps if it is not. The network capture is optional: skipping it still produces the file.
Your connection
An examination makes no outside contact, which keeps results reproducible.
Examinations run offline. A connection is needed to activate and renew a license, to update intelligence and for the optional online features.
Intelligence stays current through updates you control. If an update cannot be applied, your previous intelligence stays active.
OSINT checks run when you start them, and SectraTEK confirms an Internet connection first, so a missed connection is never mistaken for a negative result.
Sized to your volume
Extractions are large, and a busy lab needs more room than a single examiner. Tell us how many devices you examine in a year and we will recommend a workstation to match.
Product sheet
SectraTEK on one page.
The product and SectraTEK Intelligence at a glance. Print this page to keep the sheet.
SectraTEK
by Prudential Associates
SectraTEK is the Mobile threat detection and intelligence platform.
What it is
SectraTEK sits between the security apps you install on your own device and a comprehensive digital forensic examination: a more thorough, better check for compromise than an on-device scan, without the cost of a full examination.
Who it is for
SectraTEK is for individuals and organizations who want a more thorough check of a phone for compromise than an on-device scan can give, and who cannot justify a full digital forensic examination.
Service providers, consultancies and labs can use SectraTEK to deliver device-check services to their own customers.
Two editions
SectraTEK Full and SectraTEK Lite run the same detection engines on the same intelligence and deliver the same verified results; the difference is the workspace around them.
Lite keeps the results. Full keeps the case.
The detection engines
SectraTEK has eight detection engines: threat intelligence, findings, insight, permission and access correlation, mobile traffic analysis, vulnerability exposure, security posture and OSINT.
Evidence it reads
SectraTEK reads iOS file system extractions, Android file system extractions and device backups, and it analyzes captures of mobile network traffic.
SectraTEK Quick Capture guides you step by step through collecting the files from an iPhone, an iPad or an Android phone.
What you get
In SectraTEK Full you build the report from the case itself: choose the sections to include, add the case information and a title, and export it.
The complete AI dossier is built from the same verified results in both editions, ready for the AI tool or analyst you choose.
Evidence handling
SectraTEK analyzes evidence on your own workstation; evidence is referenced in place.
A SHA-256 hash of the evidence is recorded in the case before analysis starts, and a final check near the end confirms the evidence still matches.
The application audit ledger records who did what and when, and verification shows a changed record.
SectraTEK Intelligence
SectraTEK Intelligence, our curated corpus, holds about 648,000 indicators, as of October 6, 2026.
SectraTEK Intelligence carries 976 malware and spyware family labels.
Support
All support is priority. There are no support tiers and no paid support tier.
Support is available 8 am to 5 pm Eastern Time.
My Sectra
My Sectra is where you manage your licenses and updates.
Prices are on the Pricing page.
See it on your own cases.
Schedule a demo, or request a quote. Your SectraTEK contact takes care of the rest, including payment.