Mobile threat-intelligence client

Enterprise Security

Industry: Enterprise Security

Platform: iOS, MDM-distributed

Stack: Swift · SwiftUI · Combine · gRPC · Protobuf · CoreData

Description: Thin-client iOS for an enterprise mobile-security platform with bidirectional gRPC streams.

---

The engineering surface was shaped by three category constraints: the capability set required by cross-app introspection is only available through enterprise device-management distribution, threat intelligence evolves faster than an MDM-shipped binary can update, and analysis results must arrive on-device without polling. The architecture is thin-client by necessity — server-side analysis is the source of truth, bidirectional gRPC streaming pushes results as they complete, and a short-lived local cache holds the last-known snapshot for offline render.

We owned the iOS client architecture, the SwiftUI risk-visualization surface, the gRPC transport layer, and the cache invalidation rules. The client owned the analysis backend, the threat-intel data sources, and the enterprise distribution channels.

Engagement: ~6-month build · 2-engineer team · 2024.

Engineering signal: push-style delivery of completed analyses over a single persistent gRPC connection; render-from-cache continuity through transient transport disconnects.