iVerify Raises $17M to Expand Mobile Endpoint Security

A phone admitted to the corporate network can still give a security team very little to investigate. iVerify is building its mobile-security business around the work between granting access and understanding whether that access remains safe.

The New York and Belfast company announced $17M in new funding on October 20, 2026, led by Sands Capital and Entropy Ventures. NAventures, National Bank of Canada's corporate venture arm, Morgan Stanley and United Airlines Ventures also participated. iVerify says the capital will help it scale operations as enterprise demand grows.

For buyers, the proposition combines mobile endpoint detection and response, or EDR, with the practical decisions that follow a finding. Someone has to investigate the phone, decide whether its access should change and explain the collection boundary to the person carrying it. Bringing that work into an enterprise creates a deployment assignment as demanding as the detection pitch.

What iVerify's $17M funding supports

The announcement gives the company more operating capital and adds institutional oversight. Sands Capital partner Chris Eng joins iVerify's board, while Morgan Stanley Global CISO Alonzo Ellis becomes a board observer. The company did not identify a round series or disclose a valuation, and its stated use of funds centers on scaling operations rather than a detailed spending allocation.

The financing history needs its own dates. iVerify announced a $4M seed round in August 2023, when it emerged from incubation at Trail of Bits, followed by a $12M Series A in June 2024. Those earlier announcements provide context for the business's development; the latest release leaves current lifetime funding unspecified.

Banking and aviation investment makes the institutional audience unusually visible in this round. It puts organizations associated with sensitive communications and complex operations into the capital story, without establishing that each investor has bought or deployed the product. A funding relationship and an operating contract carry different information, and the announcement establishes the former.

Mobile detection has to reach an access decision

iVerify Enterprise is the company's mobile EDR platform for iOS and Android. iVerify describes a system using operating-system telemetry and behavioral detection to surface threats, with alerts feeding security operations and forensic work supporting investigations. Those are vendor-described capabilities, rather than an independent comparative test of detection performance.

The company's integration documentation makes the operating connection concrete. Microsoft Intune integration brings mobile threat signals into compliance and Conditional Access workflows, while Cloudflare Zero Trust integration supplies mobile context for access decisions. Existing device management can remain part of deployment. A security buyer can therefore evaluate how detection fits the tools and responsibilities already in place.

That connection matters because a warning has a human destination. An analyst needs to understand the signal, a responder needs a permitted action and an employee may need help restoring access. A procurement conversation limited to what the detector can find would leave the customer to design the rest of that chain after installation.

For iVerify, enterprise expansion consequently involves more than distributing an application. The product has to remain useful as a finding travels from a phone into the customer's security operation. The quality of that handoff belongs in a buyer's assessment alongside coverage, deployment requirements and the effort needed to investigate an alert.

The employee's phone puts privacy inside procurement

Personal phones make the security assignment particularly intimate. Work credentials and communications can sit beside a person's private life, so collecting evidence requires a boundary that both an employer and a device owner can understand. iVerify's Privacy Hub says advanced forensic features require explicit consent and enterprise customers can configure retention periods.

Those provisions give a buyer specific matters to examine before a rollout: which collection mode is enabled, who authorizes an investigation, who can view the resulting evidence and how long it remains available. Privacy language is most useful when the person approving the purchase can connect it to the actual feature being deployed. A broad promise on a marketing page leaves too much work for the employee receiving the installation request.

The people behind that product carry a specialist history. Danny Rogers, Rocky Cole and Matthias Frielingsdorf are co-founders, serving as CEO, COO and VP of R&D, respectively; Kris Jones is CTO. The technology began inside Trail of Bits before iVerify became an independent company in 2023. That origin places mobile investigation and enterprise adoption inside the same company's development.

The funding supports a business that has to satisfy those constituencies together. Buyers need useful evidence, responders need workable permissions and employees need a clear account of what the software is doing. Each enterprise deployment turns those requirements into choices about configuration, policy and responsibility.

What enterprise buyers can learn from this round

iVerify's financing fits a wider security purchasing problem: organizations need to observe activity at the places where work actually happens. DevCuration's coverage of Pluto Security's AI workspace funding follows a different surface of that problem. Mobile EDR brings the discussion to devices employees carry outside the office and use across personal and professional settings.

The capital announcement supplies a clear amount, named institutions and a stated operating purpose. It leaves revenue, customer economics and detailed expansion milestones outside the public record. Operators can still use the product's documented integration and consent choices to ask more useful questions about a potential deployment, without treating investment as a performance benchmark.

As iVerify scales, its sales and engineering conversations meet inside the customer's access policy. The analyst investigating a phone and the employee trying to get back to work both depend on that policy being clear enough to act on. The new capital gives iVerify more resources to carry its specialist detection work into that everyday enterprise relationship.