XFA
Free plan · From ≈ $5.50/user/moActively maintained
≈ 721visits/mo
Use not read yet · estimate, read Oct 15, 2026
- For
- Teams with no IT team, using BYOD, freelance or contractor laptops outside an MDM.
- Price
- Free plan · From ≈ $5.50/user/mo€4.90 · pricing page, read Oct 17, 2026
- Activity
- Actively maintainedrelease 7 days ago · site updated 6 days ago
- Company
- XFA BV · since 2021site footer · per their site
- App Store
- 00 ratingsiPhone & iPad · updated Oct 13, 2026
- Used for
- Check personal and contractor laptops for encryption and screen lock at sign-in
- Let staff fix failed device checks themselves without IT help
- Block insecure devices from signing in on higher-tier plans
- Used more than 77% of the 415 tools on its shelfINITE Atlas →
- On the web since 2021, older than 80% of its shelfINITE Atlas
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantsxfa.tech ↗
- Founded2021per their site ↗
- Raised$1.5M · seedper the press · 2025-12 ↗
- HeadquartersAntwerp, BEper their site
- Run byXFA BVsite footer ↗
- Certifications they stateISO 27001 · GDPRprivacy policy ↗
- Trust centertheir owntrust center ↗
- Security contactsecurity.txt
These are XFA's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP servertech.xfa/xfaverified in the MCP registry
- Stateanswers, requires sign-inchecked 2026-10-17
- Address to connectmcp.xfa.tech/mcp
- MCP docsdocs.xfa.tech/docs/admin/connect-ai-assistantthe vendor's page ↗
- Status pageall systems operationalxfa.statuspage.io ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
Lumo by Proton
Provides encrypted email, calendar, cloud storage, password manager and VPN under one Proton account, with the Lumo chat assistant as an add-on.
3.4MActiveFree plan2014 - #2
Brave
Browser that blocks ads and trackers, encrypts connections with built-in VPN, and includes private search.
1.4MActiveFrom $3/mo2015 - #3
Firefox
Blocks trackers by default in a web browser and moves bookmarks, passwords and history between devices.
1.2MActive2002 - #4
SentinelOne Purple AI
Detects and responds to endpoint threats using behavioral AI and autonomous remediation across devices and identities.
453kFrom $179.99/user/yr2013 - #5
Varonis
Discovers, classifies, and monitors sensitive data; detects and prevents data exfiltration and identity-based attacks.
137kActive2005 - #6
Scamwise
Analyzes suspicious messages, emails, links, and images to detect scam signals and provide verdicts.
130kActiveFree
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use XFA for?
Sign in to leave a noteWhat is XFA?
Checks each sign-in device for encryption, firewall, screen lock and update settings, letting users fix gaps before access. It is listed in the Atlas under Security and made by XFA BV.
Who is XFA for?
Teams with no IT team, using BYOD, freelance or contractor laptops outside an MDM.
How much does XFA cost?
XFA has a free plan; paid plans start at ≈ $5.50/user/mo (€4.90/user/mo), per its pricing page on 2026-10-17.
Is XFA free?
Yes, XFA has a free plan, per its pricing page on 2026-10-17.
Is XFA still maintained?
Actively maintained: release 7 days ago · site updated 6 days ago.
Who owns XFA?
XFA is run by XFA BV, per its site footer (2026-10-17).
Is XFA safe?
We do not audit vendors. What XFA publishes, read 2026-10-17: ISO 27001, GDPR stated on its privacy policy.
Does XFA have an iPhone app?
Yes: “XFA” on the App Store, rated 0 from 0 ratings; current version released 2026-10-13.
What are alternatives to XFA?
In Security, by use: Lumo by Proton, Brave, Firefox, SentinelOne Purple AI, Varonis, Scamwise.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk