CrowdStrike Falcon for Mobile Gains Android Enterprise and Zero Trust Integrations

Falcon for Mobile now integrates Falcon Zero Trust Assessment for iOS and Android, along with exclusive Android trust signals provided through a new partnership with Device Trust from Android Enterprise.

May 14, 2025

| Luke Hunsinger - Haris Kampouris | Endpoint Security & XDR

As organizations support an increasingly mobile workforce, the challenge of securing access to corporate resources from personal and company-owned devices, across various locations, networks, and use cases, has grown more complex.

According to Verizon's 2024 Mobile Security Index, 53% of organizations experienced a security incident involving a mobile or IoT device that resulted in data loss or downtime, highlighting the escalating risks associated with mobile endpoints. Most (80% of) respondents consider mobile devices critical to their operations, underscoring the essential role these devices play in today's business environment.¹ Securing these endpoints is foundational to any Zero Trust strategy.

Today, CrowdStrike is proud to announce the general availability of two powerful enhancements to CrowdStrike Falcon® for Mobile:

CrowdStrike Falcon® Zero Trust Assessment (ZTA) for iOS and Android devices is now fully integrated into Falcon for Mobile, enabling real-time, policy-driven trust evaluations for mobile endpoints.
As a selected launch partner, CrowdStrike now integrates Device Trust from Android Enterprise into Falcon for Mobile. This partnership gives customers deep, real-time visibility into the trust posture of Android devices — whether managed or unmanaged.

Together, these updates empower organizations to extend their Zero Trust strategy to mobile devices, reduce their attack surface, and secure their workforce without interrupting the user experience.

Falcon ZTA Extends to Falcon for Mobile

CrowdStrike’s Falcon ZTA engine now extends to iOS and Android devices via Falcon for Mobile, enabling organizations to enforce Zero Trust policies on mobile devices.

Falcon ZTA continuously evaluates key operating system and sensor configurations to generate a real-time trust score, which reflects a device’s security posture. This score can be used to enforce granular conditional access decisions such as blocking, prompting, or allowing access based on a device’s trustworthiness.

Figure 1. Falcon Zero Trust Assessment score

With Falcon for Mobile integrated into Falcon ZTA, security teams can:

Enforce consistent Zero Trust policies across mobile devices
Block risky or misconfigured devices from accessing sensitive resources
Trigger adaptive responses based on a device’s security posture
Align with Zero Trust mandates and industry compliance standards

With this integration, mobile device scores now appear in the Falcon Zero Trust Assessment dashboard alongside other endpoints, with drill-down capabilities to see all signals for individual device posture. All roles with access to Investigate can view mobile data. Falcon ZTA signals are also accessible via API for custom workflows.

Organizations can now gain deeper insight into mobile risk posture and extend Zero Trust enforcement to one of the most commonly used, and commonly targeted, endpoint types in the enterprise.

Expanding Zero Trust: Device Trust from Android Enterprise

As organizations implement Zero Trust policies, they need to evaluate every device, user, and connection before granting access to sensitive data. This means going beyond traditional management tools to understand the real-time security posture of every device, whether it’s company-owned or BYOD, managed or unmanaged.

That’s why we’re excited to announce that CrowdStrike is one of the selected launch partners for Device Trust from Android Enterprise, a new initiative that brings several granular trust signals to Falcon for Mobile for security teams.

These signals include the security patch level for both the device and the system modules, kernel version and pending Over-the-Air updates, and more. And unlike traditional solutions that require full device enrollment, Device Trust from Android Enterprise works across both managed and unmanaged devices, delivering flexibility without sacrificing security.

Designed with feedback from Falcon for Mobile customers, these signals are fully ingested by the CrowdStrike Falcon® platform. Security teams can take action in real time to investigate risk, adjust policies, and enforce trust, without introducing user friction. With built-in privacy safeguards, organizations can protect their people and data while delivering a seamless user experience.

With Device Trust from Android Enterprise integrating with Falcon for Mobile, organizations can now:

Control access using a rich set of Android-specific trust signals to evaluate device posture at the time of access
Secure managed and unmanaged Android devices, including BYOD, with consistent policy enforcement, even without mobile device management (MDM)
Continuously evaluate device trust without interrupting users, ensuring seamless and secure experiences
Protect user privacy, with all trust signals collected through vetted APIs and built-in privacy safeguards

These signals are collected via Falcon for Mobile’s Android sensor and sent to the Falcon platform through the new AndroidEnterpriseInfo event, with periodic refreshes that keep posture data current.

Figure 2. Custom device trust dashboard in Falcon for Mobile, created with the dashboard widget, showing Device Trust for Android Enterprise signals

By leveraging this telemetry, security teams can:

Assess the overall posture of their Android device fleet
Devise an action plan to improve hygiene of the devices
Make smarter access decisions based on live device context
Investigate incidents faster with system-level forensics

Device Trust from Android Enterprise empowers businesses of all sizes to confidently enforce Zero Trust access policies in today’s mobile-first world, keeping the full spectrum of Android usage secured without complexity or compromise. This launch represents a continuation of CrowdStrike’s strong partnership with Android Enterprise, enabling us to deliver new mobile security capabilities at scale. As a selected Android Enterprise partner, CrowdStrike is uniquely positioned to provide trusted, real-time protection across the Android ecosystem.

Get Started Today

As mobile threats grow in sophistication and mobile usage increases, Falcon for Mobile delivers what security teams need: continuous trust verification, comprehensive signal collection, and seamless user experiences.