Manage every device, and prove nothing changed without approval.
Prismara Core manages Windows, macOS, Linux, iOS, iPadOS and Android devices from one console. Every policy, script and remote action is signed and approved before a device will act on it, so even someone with access to Core's database cannot push changes. Android uses SovSec's own device policy controller, with no dependency on Google services.
What Prismara Core does
Every platform
Agents for Linux, Windows and macOS, Apple MDM for iPhone, iPad and Mac, and an Android controller that works without Google services.
Signed policy
Policies apply only after approval, and drift on the device is reverted automatically.
Signed scripts
Scripts run only once approved with a passkey. Results come back signed by each device.
Protected wipes
Large wipes are held for 15 minutes and can be cancelled by a second administrator.
Compliance that acts
A non-compliant device produces a signed assertion for Prismara ZTNA and a ticket in Service Desk. High risk from Prismara SOC marks a device non-compliant.
Coming next
Native Windows MDM with Autopilot, an app catalogue and real-device testing on iPhone and Android.
How it's secured
Prismara Core follows the engineering rules shared across the suite, plus these product-specific measures.
Database can't command devices
Devices refuse any payload, target list or approval that was changed in the database.
No replays
Expired, rolled-back or re-delivered actions are refused.
Post-quantum transport
Every agent session negotiates X25519MLKEM768, and classical-only servers are refused.
Independently reviewed
Core has had two review rounds and Apple MDM three. All findings are fixed or accepted.
Connects to the rest of the suite
Want SovSec to run it for you?
SovSec provides managed security, SOC and Microsoft 365 services for organisations in the UK and DACH region, and can run Prismara as part of that service.