Security overview
We do not currently hold SOC 2, ISO 27001, FedRAMP or CJIS certifications; security questionnaires are available on request.
Procurement pack and reports
What a buyer asks for, in one place.
The procurement pack: security overview, evidence handling, accessibility, license terms, pricing and how to request a quote. Sample reports follow.
Procurement pack
Everything a buyer asks for.
Security, evidence handling, accessibility, license and buying answers. Each one is on its own page, and this is where they come together.
Evidence handling
Evidence is referenced where it is stored. SectraTEK opens it read-only and does not copy it into the product; if the source changed after it was added, the examination is refused.
The audit ledger is tamper-evident: it shows when a record changes. It cannot prevent a change by someone with access to the machine.
License and pricing
SectraTEK Full Professional: $2,500 a year, one seat. SectraTEK Lite Professional: $1,500 a year, one seat.
Prices are in US dollars, billed annually, and exclude taxes. Enterprise or Agency is by quote; more than 5 seats goes to Enterprise. Quotes, volume and multi-year arrangements are available.
Quote and payment
Quotes are prepared by the SectraTEK sales team and carry a validity date; your SectraTEK contact arranges payment by the method you use; payment is never taken on this website.
SectraTEK is currently available to customers in the United States.
Procurement Q&A
Walk through your questions with us. Schedule a demo and choose Procurement Q&A as the session type.
Support
All support is priority. There are no support tiers and no paid support tier.
Support is available 8 am to 5 pm Eastern Time.
Support requests go to support@sectratek.com.
Sales, demo and quote requests go to sales@sectratek.com.
Also available: the license terms and the accessibility statement.
Sample reports
See what a report looks like.
Threat briefs and release notes describe topics and outcomes, not method.
Sample report
Sample report written from an AI-Dossier by a fictional client
Seven pages from an invented case, marked Sample, fictional data. Read it here or download the PDF. The full sample dossier needs a short form.
Sample report Short form
Full sample dossier
The complete AI dossier of the same invented case: the examination data behind every finding, with the evidence integrity record. Marked Sample, fictional data.
Read a sample
A report from a case that does not exist.
An invented phone, invented apps and invented findings, laid out as a finished report can read when it is written from an AI-Dossier.
Mobile device compromise assessment
General device compromise assessment of one iPhone. SAMPLE-0001, Harbor Lane Advisory (fictional). Examiner: Sam Rivera (fictional), Examiner.
Executive summary
The examination found no exact match between the device evidence and any known threat indicator.
It did find one app, RelayLink Companion, that was installed outside the app store, presents a developer identity that does not match its name, and holds microphone, location and background access. A configuration profile from an unfamiliar organization was added to the device on the same day. Together these are a pattern that monitoring software can produce, and that some legitimate remote-support tools produce as well.
Nothing in this report is a verdict. Each finding is a lead for corroboration, shown with the evidence behind it, the benign explanations that were considered, and what to do next.
Assessment results at a glance
- Analyzed data48,213examiner-ready observations
- Threat intelligence0exact matches against about 648,000 indicators
- Findings51 High, 2 Moderate, 1 Low, 1 Informational
- Insight7leads, 4 awaiting corroboration
- Technical exposureModeratesoftware is behind the current release
- Security configuration79%of settings could be established
Findings
| Ref | Finding | Rating |
|---|---|---|
| F-01 | RelayLink Companion: installed outside the app store with broad access | High |
| F-02 | Configuration profile from an unfamiliar organization | Moderate |
| F-03 | QuickClean Booster holds location access at all times | Low |
| F-04 | Operating system is behind the current release | Moderate |
| F-05 | Lockdown Mode is not enabled | Informational |
One finding, in full
- Why it was raised
- Installed through an enterprise distribution route rather than the app store. The developer identity on the app does not match the name it presents. Holds microphone, location (always) and background access, and starts with the device.
- Evidence basis
- Analyzed Data, Applications (E-1042); Permission Correlation, RelayLink Companion (E-1043); Insight lead L-1 (E-2210).
- Interpretation
- These traits are shared by monitoring software and by some legitimate remote-support tools. There is no exact match to a known threat, so the lead rests on behavior, not on a known indicator.
- Benign context
- An employer's IT team could have installed a remote-support tool this way. The client reports that the phone is not enrolled with any employer.
- Next steps
- Ask the client when and by whom it was installed. Document, then remove it. Review the accounts used on the device.
The short form
How a long paper reaches you.
Four short fields
A long paper needs a short form: name, work email, organization and organization type.
A link by email
We email a link that works once and expires in 48 hours. Opening the link shows the file; you choose Download.