Phylex VIP
Mobile Pentest: in-person phone checks and hardening
Executives' phones hold the conversations, documents, and access others want most. The Phylex team checks each iPhone or Android at your premises, looks for traces of spyware, locks down the settings that are often missed, and explains honestly what a phone can and cannot protect.
Per-device pricing comes in a written quote. Phones never leave your premises.
What we do for each phone
- Spyware trace checkWith the Mobile Verification Toolkit, an open forensic tool used by security researchers worldwide, matched against the latest public indicators.
- Accounts and linked devicesApple ID or Google account, devices linked to WhatsApp and Telegram, configuration profiles, foreign certificates, and apps with dangerous permissions.
- Hardening with the ownerLockdown Mode or Advanced Protection, SIM PIN, two-step verification, automatic updates, and messaging app settings.
- Short briefingAbout 20 minutes on safe habits for sensitive conversations and the limits of phone protection.
- Confidential reportOne report per phone, delivered straight to the device owner and password-protected.
How it works
Request a quote
Fill in the short form on this page. We reply with a written quote within 1 business day.
Phone owner's consent
Each phone owner consents to the check of their own phone. Company approval alone is not enough.
Session at your premises
About 2 hours per phone, using an encrypted Phylex examination laptop. The phone stays with its owner.
Report and deletion
Report within 3 business days after the session. The examination copy is deleted once the report is received, and the deletion is logged.
What you should know
- Interception carried out in a mobile operator's network cannot be detected or prevented from the phone, by anyone. That is why we help move sensitive conversations to end-to-end encrypted apps instead of promising an untappable phone.
- A clean result means no known indicators were found at the time of the check. It is not a guarantee that the phone is free of unknown threats.
- Phylex VIP is a security check of a phone with its owner's consent. It is not court forensics, not data recovery, and does not unlock devices.
Who it's for
- Directors and commissioners
- Business owners
- Heads of law and accounting firms
- Treasurers and fund managers
- Senior journalists
- Staff holding finance, IT, or government relations access
Your data
- The examination copy is made and checked on an encrypted Phylex laptop at your premises, never uploaded to the internet.
- The tools only look for technical indicators. We do not read conversations.
- The company receives a status summary, not the report content. The report is for the phone owner only.
FAQ
Is the phone taken to Phylex's office?
No. The check happens at your premises, and the phone stays with its owner throughout the session.
How long does it take?
About 2 hours per phone, including hardening and a short briefing. The report follows within 3 business days.
Do you read my conversations?
No. The tools look for technical indicators of spyware, not message content. The examination copy is deleted once the report is received.
Can you come outside Greater Jakarta?
Yes. Travel costs are listed separately in the quote.
What if spyware is found?
We do not remove it right away. Evidence is preserved, only the phone owner is told, and we help with next steps, including referral to a research lab or CSIRT if the owner agrees.
Will my phone be untappable afterwards?
No check can promise that. Interception in the operator's network is invisible from the phone. What we do: confirm no known spyware traces, close settings gaps, and move sensitive conversations to encrypted apps.
Is there a follow-up check?
Yes, a periodic re-check every 3 months, priced per phone in the quote.