Sovereign mobile command & control.

European-built device management for defence and government. Run it on your own hardware, air-gapped, or dark behind our Firefly Core network. No foreign cloud in the control plane, no public attack surface, no vendor kill switch.

Get a demo How Firefly Core works

Sovereign by design, not by contract

Most MDM platforms are run from US clouds and subject to US law. A data processing agreement does not change that: under the CLOUD Act and FISA 702 a foreign authority can compel access, and a foreign vendor can switch off your fleet. DELTΔ MDM removes that dependency. It is designed, built, and operated in the Netherlands by AKASEC, and the control plane runs where you decide: in your own data centre, in an air-gapped enclave, or in our Dutch facility.

The result is strategic autonomy over the devices your people carry into the field. Ministries, police forces, defence organisations, and the defence industrial base use DELTΔ MDM to enrol, harden, monitor, and wipe Android fleets without handing keys, telemetry, or metadata to a third country.

AKASEC

AKASEC is a Dutch offensive security firm specialised in advanced red teaming and secure software development, working for government and the defence industry. We build DELTΔ MDM the way we attack networks: assume breach, minimise exposure, trust nothing by default.

DELTΔ MDM User Interface

Intuitive Command Center

Built for operators, not administrators. Fleet posture, compliance drift, and device location in one view, so a small team can run thousands of devices. Push a hardened policy baseline, deploy a signed APK, or wipe a lost handset in seconds, with every action written to a tamper-evident audit trail.

Built for contested environments

Device management that assumes the network is hostile and the adversary is capable.

Zero Trust

Every device, operator, and request is authenticated and authorised. No implicit trust, no flat network, no standing admin access.

Signed App Delivery

Private app distribution with signature pinning. Only APKs you approved reach the fleet, with no public app store in the supply chain.

Remote Wipe & Lockdown

Lock, locate, or cryptographically wipe a compromised or lost device the moment it checks in.

NIS2 & BIO Aligned

Policy baselines and audit logging that map to NIS2, BIO2, GDPR, and ABDO requirements for the defence industry.

Continuous Posture

Root, tamper, and policy-drift detection with alerts you can forward to your own SOC or SIEM.

Operator-First UI

Designed for rapid decisions under pressure. New operators are productive within an hour.

Run it where you decide

Three deployment models. Same platform, same feature set. You choose where the control plane lives and who can reach it.

01 / On-prem

Your data centre

Install DELTΔ MDM on your own hardware or private cloud. Runs fully air-gapped for classified networks. No licence server, no phone-home, no outbound dependency.

For: ministries, defence, classified enclaves

02 / Sovereign hosted

Operated in NL

We run it for you in the Netherlands, on EU-owned infrastructure, operated by screened Dutch staff. Operational within hours, with no foreign parent company in the chain.

For: agencies and suppliers that want speed without giving up jurisdiction

03 / Dark

Behind Firefly Core

Either model above, with the MDM removed from the internet entirely. It only answers inside the Firefly Core network. Devices connect from anywhere in the world; attackers have nothing to scan.

For: deployed personnel, travelling staff, high-threat profiles

Firefly Core network

Global reach. EU exit.

Your people are deployed, travelling, or stationed abroad. Your MDM should not be exposed to the internet to reach them.

Firefly Core is AKASEC's private VPN backbone. Devices connect to the nearest edge point, wherever they are. From there, traffic is carried over multiple encrypted hops into the EU and, if you require it, into the Netherlands, where DELTΔ MDM is reachable only from inside the network.

Anywhere

Device

Always-on tunnel, enforced by policy

Nearest edge

Global ingress

Anycast entry point close to the user, on every continent

Multi-hop

EU core

Layered encryption across Firefly Core nodes inside the EU

Optional: NL

DELTΔ MDM

No public IP. Reachable only through Firefly Core

No public attack surface

The management plane has no internet-facing endpoint. Nothing to scan, fingerprint, or exploit, including the next zero-day in a web stack.

Effortless for the user

The tunnel is provisioned at enrolment and enforced by policy. No configuration, no choosing servers, low latency from anywhere.

Jurisdiction you choose

Terminate in the EU, or pin the exit to the Netherlands. Management traffic never exits in a third country.

Harder to map, harder to hit

Multi-hop routing separates where a device is from where it is managed. Observers at the edge see an encrypted tunnel, not your organisation.

Questions & Answers

Sovereignty, deployment, and security, answered.

Get in Touch

Talk to an engineer, not a sales team. We will walk you through deployment options and a live demo.

Contact Information

hello@deltamdm.com
https://maps.app.goo.gl/JAFo32m1XgiLU4jG7