Mobile Trust Boundary · Recurring Infrastructure

The infrastructure that holds the score in place — between assessments.

A Trust Boundary Index measurement is a point-in-time read. Mobile risk is not. The Mobile Trust Boundary subscription is the recurring layer that keeps the four boundaries observed, the posture re-scored, and the audit narrative continuous. Three tiers. Two pricing models. One framework.

This page is a catalog and the reasoning behind it. It does not describe an onboarding process — that is in the Mobile Risk Reduction Exercise. Scored against the Trust Boundary Index.

Baseline · Standard · Executive Per-user · Capped retainer Monthly · USD · Recurring Sold after an MRRE engagement
01 — Why this is a subscription, not a project

A score is a moment. A boundary is a posture.

An assessment that is not re-measured is a finding, not a control. The Mobile Trust Boundary subscription exists because boundary integrity decays continuously — eSIM profiles re-issue, apps update, brokers re-list, identity bindings drift — and the audit committee will ask what the number is this quarter, not last. The infrastructure tier holds the TBI score under continuous observation, against the same four-boundary axis.

The MRRE is how the program starts. The Mobile Trust Boundary is how the program stays defensible.

02 — Three tiers

Three tiers. Two pricing models on each. Same four-boundary discipline.

Tiers differ in inference-surface depth, briefing cadence, and onboarding posture. The TBI axis does not move between them.

Tier 01 · MTB Base

Baseline

Transport, Behavior, and Identity boundaries under monthly observation. Inference boundary out of scope.

  • Identity-boundary separation maintained monthly
  • Mobile threat defense layer · vendor-neutral
  • Monthly posture review · audit-ready note
  • Quarterly TBI re-read on Baseline scope
mtb_baseline_per_user_mo · mtb_baseline_retainer_25
Modal tier Tier 02 · MTB Std

Standard

Adds the Inference boundary — broker and people-search surfaces — under continuous reduction.

  • Everything in Baseline
  • Inference-boundary exposure reduction (broker + people-search)
  • Continuous re-listing detection & suppression workflow
  • Quarterly inference-surface delta report
  • Disclosure-ready language pack on request
mtb_standard_per_user_mo · mtb_standard_retainer_25
Tier 03 · MTB Exec

Executive

Extends Inference coverage with PET on named principals and a quarterly executive read.

  • Everything in Standard
  • Extended PET coverage on the inference boundary
  • White-glove onboarding for named principals
  • Quarterly executive risk briefing · board-ready
  • Direct line to the assessor on score-impacting events
mtb_executive_per_user_mo · mtb_executive_retainer_10
03 — Commercial reference

One catalog. Two commercial shapes — metered seat and capped retainer.

Both shapes apply to every tier. The difference is how the commercial unit scales against the population under observation.

Commercial mechanics across the two pricing shapes.
Attribute Per-user (metered) Retainer (capped bundle)
Quantity unitQ-01 Active user count on the subscription Always one. Seat cap enforced operationally.
Mid-cycle changeQ-02 Seats added or removed mid-cycle Fixed bundle for the cycle
Tax postureQ-03 Exclusive · added at checkout Exclusive · added at checkout
Catalog scopeQ-04 Available on every tier Available on every tier
04 — Per-boundary coverage map

Same four boundaries. Different depth of observation.

The TBI axis does not move between tiers. The amount of the axis held under continuous observation does.

Coverage by boundary across Baseline, Standard, and Executive tiers.
Boundary Baseline Standard Executive
TransportB-01 Carrier path & eSIM integrity +Downgrade exposure +Principal-routing review
BehaviorB-02 MTD layer · posture review +Configuration drift signal +Quarterly anomaly briefing
IdentityB-03 eSIM identity separation +Subscriber re-issue watch +Step-up bypass review
InferenceB-04 Out of scope Broker + people-search reduction +Extended PET coverage on principal
05 — Reference notes

Things worth saying out loud.

Note 01 · Scope expansion

The catalog expands as adjacent solutions mature.

Data-removal-as-a-service and Privacy-Enhancing BYOD ship under the same lookup-key discipline (mtb_, dro_, pet_) so retrieval and reporting stay clean.

Note 02 · Vendor neutrality

No vendor is named in any tier deliverable.

No product, platform, MTD, UEM, or eSIM provider is named in any tier deliverable. The telemetry source is the customer's choice.

Note 03 · Sequence

Subscription tiers convert from an MRRE engagement.

New customers begin with an MRRE — not with a subscription. The exercise produces the baseline read; the subscription holds it under continuous observation.

Note 04 · Audit posture

Every tier produces audit-defensible evidence.

Each tier produces evidence ready to read into CMMC Phase 2 audit-defensibility narratives and SEC 8-K Item 1.05 disclosure language.

06 — Subscribe

Read each tier as it ships — and how the boundary moves.

A weekly brief — vendor-neutral, source-traceable, CISO-grade — tracking what is breaking in mobile security, which boundary moved, and what the recurring infrastructure caught between assessments.

Weekly · Vendor-neutral · Unsubscribe one-click

Request the MTB catalog PDF Walk the catalog with the assessor