NOMINATION HIGHLIGHTS

In a natural experiment spanning 20,000 device scans, iVerify detected Pegasus spyware at a rate of approximately 2.5 infections per 1,000 devices, and that wasn’t looking for other common strains including Predator and DevilsTongue. In a 10,000-person enterprise, that works out to roughly 25 compromised devices: active today, invisible to every other tool in the stack. Advanced spyware is not a problem confined to journalists and dissidents. It is an enterprise problem, and most organizations have no way to see it.

2025 marked the year mobile devices became the security blind spot organizations could no longer ignore. Threat groups ran mobile-first credential theft campaigns that bypassed perimeter controls entirely. iVerify’s own research found China-linked state actors used zero-click exploits to compromise iPhones belonging to executives, campaign staff, and enterprise employees with no user interaction required. When Salt Typhoon penetrated U.S. telecom infrastructure, it removed geography as a meaningful protection. Being in the United States was no longer a defense against mobile spyware.

iVerify is the first mobile endpoint detection and response (EDR) platform built to treat mobile devices as full corporate endpoints. On both iOS and Android, iVerify delivers the threat hunting, incident response, and forensic capabilities that have long been standard on laptops and servers but have been largely absent from mobile. iVerify is the only mobile security vendor deployed at enterprise scale on iOS, a closed operating system where building a true EDR is technically difficult, as the near-complete absence of capable competitors confirms.

Designed for both managed devices and BYOD and on-prem and cloud deployments, iVerify provides comprehensive protection without invasive controls or personal data collection that are common with mobile device management tools. The platform runs without MDM profiles, does not access messages, photos, or browsing history, and collects no personal data. It deploys silently via zero-touch enrollment across managed and BYOD fleets.

Because iVerify operates at enterprise scale, its research team collects real-world spyware samples, at a volume no competitor can match, and the indicators of compromise it produces are used by researchers across the industry. Through its research and detections, iVerify shifted the perception that commercial spyware is limited to civil society like journalists and dissidents. iVerify has detected Indian government surveillance of opposition figures and journalists, Chinese actors targeting U.S. political campaigns, and Pegasus infections on corporate executives with access to sensitive financial data and strategic communications.