Mobile Watermark
Structured mobile security for enterprise-owned and BYOD Android devices with dynamic app whitelisting, capture restrictions, and automated anti-tamper enforcement across managed Work Profiles.
As mobile workforces expand across enterprise-owned devices and employee smartphones, preventing screen-based data leakage is a critical challenge. Mobile security fails when endpoints rely on manual configurations or easily bypassed permissions. xSecuritas Android Mobile Configuration provides a structured security layer—delivering dynamic app whitelisting, capture restrictions, and automated anti-tamper enforcement across managed devices and Work Profiles.
OUR NUMBERS
Android 10+
Supported operating system version baseline
2 Modes
Fully Managed Mode & BYOD Work Profile Mode
3 Permission
Core permissions required for persistent overlay protection
20 Secs
Automated anti-tamper alert interval if permissions are revoked
Why It Matters
- Unmanaged Mobile Capture: Unprotected mobile screens allow unauthorized screenshots and screen recordings.
- BYOD Compliance Challenges: Mixing personal and enterprise data on employee devices creates security and privacy conflicts.
- Permission Revocation: Users can manually revoke permissions to bypass security policies unless anti-tamper mechanisms are enforced.
- Unauthorized App Usage: Shadow IT and unapproved third-party mobile apps introduce operational risks.
Fully Managed vs. BYOD Work Profile: Deployment Comparison
Feature / Scope
Fully Managed Environment
xSecuritas AI-Resistant Watermark
Target Environment
Corporate-owned dedicated smartphones & tablets
Employee-owned personal devices
Watermark Coverage
Applied globally across all applications and home screen
Applied strictly to applications running within Work Profile
Personal Privacy
N/A (Device is fully enterprise-managed)
Personal profile apps and personal data remain unmonitored
Screen Capture Control
System-wide global screenshot and recording restriction
Restricts capture only within Work Profile enterprise apps
Deployment Method
EMM / MDM Managed Google Play deployment
Managed Google Play Work Profile container
MDM App Configuration Schema
When pushing the ScreenWatermark APK via MDM solutions, register the following App Configuration Keys to map metadata automatically:
Configuration Key
Requirement Level
xSecuritas AI-Resistant Watermark
UserID
MANDATORY
Unique User ID (Installation fails if missing).
UserName
MANDATORY
Display name of the user (Installation fails if missing).
DeviceID / UPN
Optional
Maps unique device string or Universal Principal Name (Email format).
DptCode / DptName
Optional
Maps the user's enterprise department code and name.
Custom Attribute 01 ~ 10
Optional
Additional custom metadata key-value pairs for dynamic watermark rendering.
Anti-Tamper & Delivery Cycle
- Single Permission Revoked (Overlay or Notification): Displays a permission recovery prompt every 20 seconds and logs an app exit attempt to the server every 3 minutes.
- Both Permissions Revoked: Triggers continuous device vibration and alarm alerts for 5 seconds every 20 seconds until permissions are restored.
Atlassian Platinum Solution Partner