Aragon Research. RESEARCH NOTE Number: January 4, The Aragon Research Globe for Enterprise Mobile Management Software, 2013

Transcription

1 Aragon Research Authors: Mike Anderson, Jim Lundy Topic: Mobile Issue: Who are the vendors that are battling to lead the mobile computing revolution? The Aragon Research Globe for Enterprise Mobile Management Software, 2013 Summary: The market for enterprise mobile management software is rapidly converging from multiple segments, including MDM and MAM. This Aragon Research Globe reviews the major participants in EMM and their strengths and challenges as this market transforms. Copyright 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Aragon Research and the Aragon Research Globe are trademarks of Aragon Research Inc. All other trademarks are the property of their respective owners. This publication may not be distributed in any form without Aragon Research s prior written permission. The information contained in this publication has been obtained from sources believed to be reliable. Nevertheless, Aragon Research provides this publication and the information contained in it "AS IS," without warranty of any kind. To the maximum extent allowed by law, Aragon Research expressly disclaims all warranties as to the accuracy, completeness or adequacy of such information and shall have no liability for errors, omissions or inadequacies in such information. This publication consists of the opinions of Aragon Research and Advisory Services organization and should not be construed as statements of fact. The opinions expressed here-in are subject to change without notice. Although Aragon Research may include a discussion of related legal issues, Aragon Research does not provide legal advice or services and its research should not be construed or used as such. Aragon Research is a private company and its clients may include firms or financial institutions that have financial interests in entities covered by Aragon Research. Further information about the objectivity of Aragon Research can be found at aragonresearch.com

2 TABLE OF CONTENTS Mobile Management Beyond the Device... 3 A Growing Focus on Content... 4 A Commoditizing MDM Market... 4 Managing the Mobile Enterprise Ecosystem in the Post-PC Era... 4 Enterprise Mobility: The Business Imperative... 5 Market Coalescence and Consolidation... 5 Aragon Research Globe Overview... 6 Dimensions of Analysis... 6 Inclusion Criteria... 7 Exclusions... 8 The Aragon Research Globe for Enterprise Mobile Management Software, Aragon Advisory Bottom Line THE VENDORS Absolute Software AirWatch Antenna Software App Apperian BoxTone Fiberlink Good Technology (AppCentral) IBM Kony LANDesk McAfee MobileIron Partnerpedia Research In Motion (RIM) SAP Smith Micro Sophos SOTI Symantec Tangoe Trend Micro Zenprise (Citrix) Aragon Research Inc. and or its affiliates. All rights reserved. Page 2

3 Mobile Management Beyond the Device Managing mobility in the enterprise is a relatively new and rapidly transforming business discipline. Enterprise mobile management (EMM) is an emerging holistic approach that incorporates and transcends mobile device management (MDM), mobile app management (MAM) and other software for managing mobile assets. The shift is away from merely managing the assets themselves and toward transforming business through mobilizing the enterprise. Mobile management began by focusing on MDM, but subsequently expanded to include application management, as enterprises realized that managing only the devices themselves was not enough. While MDM helps address authentication and security, success with mobility also depends on apps that are lightweight, secure and easy to manage, distribute and use. MAM is an inescapable part of the mix. At first, enterprises could focus on a single mobile device and OS (the BlackBerry) and a single application: . Those days are over, and enterprises need a flexible strategy to manage an increasing diversity of devices, operating systems and capabilities; an expansion of mobile users approaching 100 percent of the workforce, many of whom bring their own devices (BYOD); and an explosion of apps and their content owned both by the company and by the individual user. Enterprises mobile management needs are as diverse as the growing universe of vendors and tools. First, they need a strategy to secure and manage the huge number of devices entering the workplace; to distribute, support, monitor and control the use of enterprise applications; and to protect and secure the entire ecosystem, corporate information and intellectual property. Dealing with issues in each of these categories will most often require multiple management tools. Enterprise device, application and infrastructure management tools are rapidly evolving to help manage different aspects of the new mobile, bring-your-own enterprise. In the near term, businesses will face a fragmented market that includes public and private app stores along with MDM, MAM and emerging EMM vendors. Each of them is valuable for certain business needs and circumstances, but the coming consolidation in this market will have important consequences, and should be reflected in relatively short-term planning. Beyond what can be addressed in the short term, enterprises need to recognize the value of personally owned mobile devices, and to establish an integrated, holistic approach to enterprise mobile management. Aragon recommends these key priorities: Authenticate and manage user identity Control the devices Manage the apps Protect enterprise data Monitor the network Optimize performance of the systems Administer inventories and expenses Oversee a workplace with users as the perimeter 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Page 3

4 A Growing Focus on Content A growing trend is the shift toward being able to manage mobile content as well as mobile apps. Given the huge growth we expect as tablets become more widely used in enterprises is the need to manage content that is part of a mobile worker s job. Mobile security is a top priority in gaining managed control over smartphones and tablets in business, whether the devices are company-owned or BYOD. Content stored on those devices is a critical exposure, and protecting the intellectual property of the business demands a mobile content strategy. Although newer smartphones with modern OSs have device-level encryption to protect content, significantly more is needed to protect sensitive documents and valuable corporate intellectual property. EMM will require mobile content management tools that can protect data and documents stored on devices and in transit via apps. The ability to easily and securely connect with existing enterprise content, particularly through SharePoint, is a rapidly growing requirement. A Commoditizing MDM Market The MDM market is crowded, with many vendors that have varied approaches to largely commoditized functionality. MDM software prices have declined each year, and providers will continue to add services and expand functions to create new revenue streams and grow their businesses. One thing vendors must do is to recognize the expansion into EMM, and shift their focus from MDM price to overall mobile management to align with the requirements on enterprise short lists. Gaining control of mobile devices is only the beginning of what enterprises will need, and MDM is where most need to start. The explosion of smartphones and tablets, particularly those owned by employees, has forced enterprises to address mobile security and management issues. For vendors, however, while a strong foundation of MDM and MAM is important, the potential to upsell beyond the initial installation is a larger and more lucrative opportunity, and successful providers are rapidly adding more automated management and features to address the increasing support costs of BYOD. Managing the Mobile Enterprise Ecosystem in the Post-PC Era The huge influx of smartphones and tablets has pushed enterprises from acceptance and bare connectivity to full integration and business solutions, even more rapidly than occurred with PCs. Indeed, mobility and the new mobile form factors are at the forefront of the first post-pc IT generation, which Aragon calls the Tablet Era. This tablet era is now in a transitional phase. The first phase of mobility was dominated by the new technologies and approaches. Most enterprises focused on devices, and the tactical steps needed to establish governance in an area where users have considerable power. The BYOD smartphones and tablets permeating the business computing fabric have made individual users and their personal devices a strong force in enterprises adopting a mobile strategy. Mobile management has aimed at solving the security and control issues introduced by droves of new 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Page 4

5 devices bringing in new apps and connecting to enterprise systems without the requisite IT infrastructure. Now, enterprises are beginning to learn how to use mobile especially tablets to change how they do business. What began as solid use cases like sales automation, restaurants and other service industries, and mobile healthcare is expanding toward business integration of mobile across all industries. Business increasingly understands how to leverage and exploit mobile, and tablets are becoming strategic business tools. Enterprise Mobility: The Business Imperative For enterprises, the multiple elements of mobile and mobile management are rapidly becoming part of the strategic business foundation. Managing mobile devices and controlling BYOD have been important priorities behind the MDM segment, but increasingly a holistic approach to mobility is required. As enterprises make mobile an integral part of how their systems are designed and how their business runs, mobile management that addresses mobile devices, the mobile app lifecycle, and mobile content in an integrated way becomes a priority. EMM is an emerging business imperative that requires a broad range of management capabilities. It is driving a coalescence and consolidation in previously fragmented mobile management markets around these business objectives. These expanded business requirements include: Managing mobile networks Managing and securing users Managing and securing devices Managing and securing apps Managing and securing content Mobile operations and support Market Coalescence and Consolidation Enterprise mobile management is a holistic and integrated approach that consolidates multiple individual tools to address all aspects of mobility. Beyond securing devices or managing apps, EMM recognizes the strategic shift in computing paradigms that the mobile phenomenon represents. It targets the entire mobile ecosystem of users, networks, business data and applications with a broad range of capabilities, including MDM, MAM, enterprise app stores (EAS), mobile application development, mobile content management and telecom expense management. Among the criteria for assessing the suitability of vendors covered in this report is how well they have managed this consolidation, and what their road maps are for continuing to do so Aragon Research Inc. and or its affiliates. All rights reserved. Page 5

6 Aragon Research Globe Overview The Aragon Research Globe graphically represents our analysis of a specific market and its component vendors. We use a rigorous analysis of each vendor using three dimensions that enable comparative evaluation of the participants in a given market. The Aragon Research Globe looks beyond size and market share, which often dominate this type of analysis, and instead uses those as comparative factors in evaluating providers product-oriented capabilities. Positioning in the Aragon Research Globe will reflect how complete a provider s future strategy is, relative to their performance in fulfilling that strategy in the market. A further differentiating factor is the global market reach of each vendor. This allows all vendors with similar strategy and performance to be compared regardless of their size and market share. It will improve recognition of providers with a comprehensive strategy and strong performance but limited or targeted global penetration, which will be compared more directly to others with similar perspectives. Dimensions of Analysis The following parameters are tracked in this analysis: Strategy reflects the degree to which a vendor has the market understanding and strategic intent that are at the forefront of market direction. That includes providing the capabilities that customers want in the current offering and recognizing where the market is headed. For this Globe, we are looking at EMM, which combines MDM and MAM. The strategy evaluation includes: Product Product strategy Market understanding and how well product roadmaps reflect that understanding Marketing Management team, including time in the job and understanding of the market Performance represents effectiveness in executing a vendor s defined strategy. This includes selling, supporting the defined product offering or service. The performance evaluation includes: Awareness: Market awareness of the firm and its product Customer experience: Feedback on the product, installs, upgrades and overall satisfaction Viability: financial Viability of the provider as measured by financial statements. Pricing and Packaging: Is the offering priced and packaged competitively? Product: The mix of features tied to the frequency and quality of releases and updates. R&D: Investment in research and development as evidenced by overall architecture Aragon Research Inc. and or its affiliates. All rights reserved. Page 6

7 Reach is a measure of the global capability that a vendor can deliver. Reach can have one of three values: national, international or global. Being able to offer products and services in one of the following three regions is the third dimension of the Globe analysis: Americas (North America and Latin America) EMEA (Europe, Middle East and Africa) APAC (Asia Pacific: including but not limited to Australia, China, India, Japan, Korea, Russia, Singapore, etc.) The market reach evaluation includes: Sales and support offices worldwide Time zone and location of support centers Support for languages References in respective hemispheres Data center locations The Aragon Research Globe is segmented into four sectors, representing high and low on both the strategy and performance dimensions. When the analysis is complete, each vendor will be in one of four groups: leaders, contenders, innovators or specialists. We define these as follows: Leaders are the companies with comprehensive strategies that align with industry direction and market demand, and who effectively perform against that strategic backdrop. Contenders are those companies with strong performance, but with more limited or less complete strategies. Their performance positions them well to challenge for leadership by expanding their strategic focus. Innovators are companies that have strong strategic understanding and objectives, but have yet to perform effectively across all elements of that strategy. Specialists are companies that fulfill their strategy well, but have a narrower or more targeted emphasis with regard to overall industry and user expectations. Specialists may excel in a certain market or vertical application. Inclusion Criteria The inclusion criteria for this Aragon Research Globe are: A minimum of $2 million in primary revenue for mobile management software for enterprises, supporting management for mobile apps, mobile devices, mobile content and/or mobile operations and support Shipping product; must be announced and available. Customer references: Vendor must provide customer references in each region where the vendor does business Aragon Research Inc. and or its affiliates. All rights reserved. Page 7

8 Exclusions The following vendors were excluded from the 2013 Aragon Research Globe for enterprise mobile management software: Capricode: Capricode s SyncShield MDM software has been growing, but the company is small and predominantly focused in Europe, mainly in the Nordic countries. Fixmo: Under the umbrella of Mobile Risk Management (MRM), Fixmo offers a number of products within EMM that address managing devices and apps and securing mobile content. Fixmo did not meet revenue criteria. ipass: ipass provides mobility services and management capabilities for ios, Android and Windows smartphones and tablets, as well as Windows and Mac PCs. Although ipass provides basic device management functions, its focus is global connectivity and telecom cost management and does not focus explicitly on EMM. Motorola Solutions: Motorola Solutions offers an expanding MDM product in its Mobility Services Platform. While MSP includes support for ios, Android and Windows Mobile, the focus and sales effort is aimed at managing Motorola mobile computing in its core business Aragon Research Inc. and or its affiliates. All rights reserved. Page 8

9 Figure 1: The Aragon Research Globe for Enterprise Mobile Management Software, Aragon Research Inc. and or its affiliates. All rights reserved. Page 9

10 Leaders AirWatch Secure Content Locker; Enterprise App Catalog Atlanta, Georgia-based AirWatch has quietly been delivering an EMM platform that can manage devices, apps and content through the cloud and on-premise. The company has one of the largest installed bases we have seen, in part due to its architecture and aggressive pricing. It has also taken a lead on what Aragon calls Tablet Content Management. With over 900 employees, AirWatch has taken no outside funding, which demonstrates the strength of its management team. Highly scalable, supports more than 100,000 devices Multi-tenant architecture Strong content management capabilities through the Secure Content Locker App management has solid administration and inventory support Expanding its basic app-level management controls and reporting Owns few patents, and currently exposed to lawsuit from Good Technology App management includes app tunneling for internally developed apps with third party app support expected Fiberlink MaaS360 Fiberlink s MaaS360 is a cloud-based offering that features fast and easy deployment. Founded in 1991, the company still offers visibility, management, and security for mobile laptops, but ever since it extended MaaS360 to smartphones and tablets in 2010, it has found its place in a broader market, beginning with its SaaS-based MDM service. Its platform now extends to application management, document distribution, expense management, and contextual event management for any mobile device. Fiberlink s strategy is to remain aggressive in providing support across a broad range of mobile OSs, recently adding support for Windows 8, Windows RT and Windows Phone 8. MaaS360 is a very broad EMM offering. It has rich content security capabilities, with a content catalog that allows policies on a per-document basis, and can securely sandbox content within the mobile app. Fiberlink has a strong partner program and we estimate that 40% of its revenues come from partners. Fast and easy deployment Broad suite of EMM capabilities Strong integration with existing enterprise infrastructure, , LDAP and certificate services Multi-tenant architecture, on-demand access and automatic feature updates Need for broader market awareness Cloud and SaaS managed services implementations only App-level management controls growing, with app-wrapping just added Q Aragon Research Inc. and or its affiliates. All rights reserved. Page 10

11 Good Technology (AppCentral) Good for Enterprise; Good Dynamics Good Technology has been one of the pioneers in providing a containerized approach to managing mobile devices. Good recently acquired AppCentral, bringing a cloud approach to its on-premise only model and adding richer app management functionality. Good for Enterprise has a tightly controlled approach that offers very high levels of control and security on personal devices. Using Good Dynamics, developers can incorporate Good s security into their mobile apps. Not every organization requires this level of lock-down and associated change in the user experience. Industries and businesses that most often need the extensive attention to security and compliance that Good can provide include financial services, government and healthcare. Excellent security for separating corporate data on personal devices Secure content container that links to SharePoint and other file stores and can sync and selectively wipe content Wide selection of third-party apps that use Good s secure containers, connections and infrastructure (e.g. Box, Breezy, Roambi) Inter-container communication that enables secure app-to-app workflows Prices have been high Rationalizing security vs. user flexibility within its architecture Integration of AppCentral capabilities Management console has strong controls but reporting needs improved visuals and graphic representations MobileIron MobileIron VSP MobileIron focuses on the mobile lifecycle, including the ability to manage and secure devices, provide an app storefront, and manage mobile apps and data. MobileIron has built from an app focus, having provided one of the first enterprise app stores. MobileIron s architecture supports flexibility and attention across the mobile lifecycle through a repository of data identifying the entire network of supported mobile devices and their capabilities, controlled via a detailed privacy policy to govern access. MobileIron also includes tools to monitor and manage wireless expenses in real time that make it possible to control costs and optimize service plans. In addition to broad capabilities across EMM, MobileIron includes solid monitoring, reporting and dashboards. MobileIron is focused on self-service, and allows users to self-register new devices and handle other management duties. In addition to enrollment, users can locate their own device with a mapping service or lock and wipe a lost device, lessening the load on IT. It provides both on-premise and cloud offerings, but most of its users are on-premise to date. MobileIron has strong partner relationships with mobile carriers, system integrators and VARs that have enabled it to grow in more than 40 countries. Strong name recognition in MDM and EMM Reseller relationships in more than 40 countries All sales through channels On-premise and cloud offerings that provide broad device support Owns few patents, and currently exposed to lawsuit from Good Technology Only added app wrapping recently Secure content container and app-level features like tunneling have only recently been added 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Page 11

12 Zenprise (Citrix) MobileManager; Zencloud; Zensuite Citrix acquired Zenprise on December 5, With both cloud and on-premise options, Zenprise has been extending its focus from device management to app and data management in enterprise mobile environments. Business initiatives are strongly driving mobile investments, and Zenprise s efforts to align its products and marketing with that trend is a valuable strategy. The company s rapid growth has been driven in part by this business-oriented strategy. Zenprise strongly focuses on content security and collaboration, providing secure connection with SharePoint. The recent announcement of Zensuite addresses challenges in secure and tighter mobile content control through a secure container. The company s long-term strategy is to transform MobileManager into a platform for enterprise deployment of third-party apps, and an enabler for internally developed apps. Content security through a sandboxed container Uptime guarantee Multi-tenant architecture scalable to over 100,000 devices Supports hybrid cloud implementation Very broad device support that includes BlackBerry and Kindle Fire Manages expenses through policies and tracking mobile data and app use Cloud-only SaaS deployment option Mainly U.S. cloud presence, expanding into Europe Maintaining momentum and roadmap following the December acquisition by Citrix 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Page 12

13 Contenders Absolute Software Absolute Manage; AbsoluteSafe Absolute Software was founded in 1993 with its headquarters in Vancouver, British Columbia. Absolute Manage for Mobile Devices provides management for ios, Android and Windows Phone devices. When deployed as a component of the Absolute Manage product, enterprises can have a single console to control Mac and Windows PCs along with mobile clients. Absolute Software is known for strong cross-platform support. Growth of ios in Windows-centric enterprises has resulted in growth in healthcare, finance and corporate groups. Absolute provides content distribution and security capabilities for ios through the AbsoluteSafe app. Absolute has a growing emphasis on BYOD, with automated self-service enrollment and BYOD-specific policies to control access to corporate resources based on configuration compliance. Integrated management console for Windows, Mac and mobile devices Mobile device and app management capabilities Secure content container for confidential documents with distribution under admin control and automated wipe for expiration based on time, device noncompliance, or job change Available on-premise only, with Windows or Mac servers Limited automation of tasks like device discovery, compliance notification and remediation McAfee Enterprise Mobility Management Well known for its security products, McAfee offers a full mobile security and management suite, Enterprise Mobility Management (EMM), and enables management for mobile data and devices including ios, Android, Windows Phone and BlackBerry. The combination of McAfee s EMM with McAfee s anti-malware and authentication along with integration of other policy and compliance tools should prove to be attractive for IT organizations with existing investments in McAfee security tools or a strong need for compliance management and reporting. Strong brand recognition from its endpoint security technology Uses strong authentication via device certificates for connecting to Integrates with McAfee epolicy Orchestrator to provide a unified security posture across PCs, mobile devices and networks Awareness for its mobile security is strong but lower for enterprise mobile management Available on-premise and SaaS cloud managed services only Does not provide device-level encryption, but can block devices lacking the capability 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Page 13

14 Partnerpedia Enterprise AppZone Partnerpedia is a provider of enterprise app store and marketplace solutions, with a heritage of building cross-platform mobile apps. Partnerpedia is the engine behind some of the largest technology providers app stores, and has grown its MAM product Enterprise AppZone to over 200 organizations in multiple industries. Based in Vancouver, B.C. and Morgan Hill, California, Partnerpedia has been working to become one of the dominant private app store providers. Its Enterprise AppZone also supports web/html5 and desktop app publishing and distribution. It also includes app vetting and license management functions. App wrapping is offered for Android with ios expected in early White label app stores Ease and speed of deployment of an app store Architecture can support mobile and desktop PC apps App vetting and license management Limited recognition outside of technology providers Ability to grow partner relationships to increase market penetration Expanding its app management and breadth in EMM tools SOTI MobiControl SOTI was founded in 1995 and is based in Ontario, Canada. SOTI MobiControl has rich MDM functionality and provides app management, mobile security features, mobile content management and mobile management. MobiControl has extensive reporting in its management console, and a secure content library that supports a wide range of document formats and can push files to individuals, groups, or all mobile users. MobiControl can give help desk staff live remote control of Android devices for troubleshooting, and has a remote viewing agent with two-way chat to provide similar capability for ios. To address fragmentation occurring with Android, SOTI has created technology for OEM device vendors like Samsung, LG and ZTE to provide more consistent device management and app control. Strong track record supporting ruggedized and custom-built business apps Profitable with more than 10,000 MDM enterprise customers Extensive support for any Android device with Android+ stack Help desk support and remote control features Scalable through multiple server configuration and to 100,000 using cloud deployment Support for ios and other platforms improving relative to very strong Android capabilities Limited recognition for general enterprise mobility management outside of its traditional vertical and industrial use cases Improvement needed in secure content container, expected in early Aragon Research Inc. and or its affiliates. All rights reserved. Page 14

15 Symantec Symantec Mobile Management Symantec is best known for its security product lines, and its EMM is not its main product focus. Acquisitions of Odyssey and Nukona have strengthened Symantec s device management for Android and Windows Phone, and introduced app management not previously available. Symantec has developed a relatively complete goal in EMM, with objectives for MDM, MAM and identity management to combine with their security and threat protection suites. While Symantec provides on-premise and SaaS offerings, they remain separate products that can be acquired as a suite but without integration into a complete package. The app management capability, via Symantec App Center (Nukona), provides app-level security and content management with an app-wrapping technology that does not require source code changes. Name recognition in its security product line Capabilities across device, app and data management Ability to provide security products across mobile and PCs Global capability and sales organization Limited name recognition in enterprise mobile management Need to better integrate acquisitions and other products Mobile device and app management are secondary to core security tools 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Page 15

16 Innovators Antenna Software AMPchroma Antenna Software, based in Jersey City, New Jersey, is a mobile app development and management platform vendor. Antenna s AMPchroma addresses the mobile lifecycle from design to analysis to support the ability to build, run and manage mobile apps and content. In addition to providing mobile app management and app store capabilities, Antenna enables enterprises to build and distribute apps, and provides tools for integrating with other business applications. Antenna s open client allows developers to build web apps in HTML5, CSS or JavaScript (including IDE tools that generate JavaScript) and can publish directly to AMPcroma. An API for native SDK support, along with Antenna s own cross-platform native IDE and the open client allows developers to create cross-platform web, hybrid, native or mixed-mode apps and deploy on Antenna s platform. A patented secure multi-app container supports multiple web apps in a single container. Antenna s analytics tools enable usage data to be used to monitor user activities and behavior, evaluate issues with the apps and mobile environment, and gather feedback from the user community. Where Antenna is gaining traction is with enterprises looking for higher levels of integration and management for their custom app development efforts. Full EMM suite Strong partner ecosystem includes carriers, device manufacturers and system integrators Open and standards-based app development options Awareness outside of IT Development Strong analytics and reporting Leveraging its multi-app container technology for stronger content integration 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Page 16

17 BoxTone Enterprise Mobility Management Founded in 2005 and headquartered in Columbia, Maryland, BoxTone initially focused on managing large BlackBerry installations. It has grown from that heritage to have a solid offering with broad capabilities. In addition to MDM with competitive functionality to address security, policy management, configuration and compliance management, BoxTone provides a unified management platform to address support, operations and app performance management. BoxTone s strength has been in its on-premise solution. It started a price war in mid-2012 by offering its full MDM suite for $0.99. Its cloud offering has been gaining traction, with a majority of new installations taking the SaaS approach. BoxTone s focus is on integrated service management with automation, service desk support, proactive monitoring and reporting tools for quality of service while minimizing overhead costs. Supported devices include ios (iphone, ipad and ipod), Android, Windows Phone, BlackBerry and Symbian. Broad and modular capabilities that enable starting with MDM and expanding to EMM EMM Partner Network integrates its core EMM platform with more than 10 other vendors Automated policy and compliance management linked to corporate identity and policy management Integration and partnerships with other secure container vendors, including Good Technology and Mocana Connectors integrate with operations management consoles to provide rich functionality Limited brand recognition Multiple individual modules enable flexibility in deployment options but increase the complexity of enterprise selling Has customers worldwide, but organization is mainly US-centric IBM IBM Mobile Foundation IBM is developing a broad and increasingly comprehensive strategy to support enterprise mobile management. The recently introduced IBM Mobile Foundation incorporates a mobile app development platform with mobile app management and mobile app development tools. While IBM provides a broad range of EMM capabilities with security tools and extensive ability to integrate with other areas including TEM and its own mobile apps, the offerings remain a collection of components that continue to evolve integration. Acquisitions have formed the foundation for IBM s mobile management strategy, including BigFix to extend Tivoli Endpoint Manager, Worklight, and Emptoris. IBM s EMM capabilities are not individually best in breed, but its growing emphasis on mobile management and breadth of offerings make it a formidable force. Integration is improving, and is an emphasis for future updates, and capabilities to extend its strength in desktop management and create single views for administration and reporting will resonate with IT organizations. Global capabilities and enterprise reach Breadth of EMM strategy Supports ios, Android, Blackberry, Symbian, Windows Mobile, Windows Phone, as well as Windows, Mac and Linux PCs Needs to integrate products from acquisitions Individual components need improvement to gain on leading vendors Usability of admin tools 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Page 17

18 Kony KonyOne Kony is focused on mobile app development, with the KonyOne platform being one of the leading tools for building cross-platform mobile apps. Kony builds on open standards, and has a solid strategy around its API to expose the full breadth of mobile OS functions without requiring knowledge of each vendor s APIs. By building a single code base, enterprises can optimize how they use mobile app development resources, and can address feature phones and desktops in addition to smartphones and tablets. By integrating mobile management, an app store, a management console and policy management, Kony gives enterprises a single tool to develop and deploy their own custom apps to many platforms including Android, ios, BlackBerry, WebOS and Windows Phone, and monitor compliance with app installation. Leading mobile app development environment Open architecture with abstraction layer for APIs enabling rich cross-platform apps Extensive cross-platform development tools can reduce costs by cross-compiling a single code base Limited recognition outside mobile app development Geographically limited, with most activity in North America Basic mobile app management capabilities Mobile app management and app store are new capabilities Research In Motion (RIM) BlackBerry Enterprise Server BlackBerry Mobile Fusion RIM is racing to become relevant again in mobile devices and enterprise mobile management. BlackBerry Enterprise Server (BES) offers the most secure environment and greatest policy configuration breadth in managing mobile devices and apps, albeit for BlackBerry devices. Introduction of support for ios and Android devices with BlackBerry Mobile Fusion enables large BlackBerry shops to incorporate them into the managed environment, and create a single management console. Although not built on the same secure infrastructure nor containing the same huge range of policies, Mobile Fusion underpins RIM s future direction. The future for RIM hinges on the ability of the new BlackBerry 10 OS and devices to be successful when they appear in Q Support for the new BlackBerry, the PlayBook, legacy RIM devices and tablets or smartphones running ios or Android will come via BlackBerry Enterprise Service 10 (BES 10) at the same time (BlackBerry Mobile Fusion currently does all but BlackBerry 10). RIM has a solid EMM platform to build on, but will be best suited for existing BlackBerry environments evolving into multi-os BYOD, and for those enterprises that move to the new BlackBerry 10. Mobile brand recognition Able to support ios and Android devices Large enterprise installed base of BlackBerry and BES users Need for two servers to manage legacy RIM installations Eroding mobile device market share puts all businesses at risk On-premise only deployment 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Page 18

19 SAP Afaria SAP has increasing mobile capabilities in its core software, expanding into MDM, MAM and MEAP (Mobile Enterprise Application Platform) via its acquisitions, including Sybase for Afaria. SAP has a broad three-part strategy for mobility, including SAP s mobile app store, mobile app development environments and EMM capabilities. With its 2012 acquisition of Syclo SAP has added another solid app development platform and strategy for the field service app development life cycle. SAP offers on-premise capabilities, and has recently introduced cloud support for a wide variety of SAP software through partners including perpetual or subscription access through Amazon Web Services. SAP Afaria provides a broad suite of EMM tools, including solid MDM, and strong capabilities for content management, software distribution, enforcing policies at the app level. Additional integration of the mobile management tools is emerging to deliver a more unified platform, with integration being a key direction for SAP. Analytics is also a key focus for SAP in mobile management. As part of its integration efforts, SAP has a built-in dashboard and also provides integration with more than 40 reports from the SAP BusinessObjects BI tool. SAP is taking an increasingly open approach to enable further integration, and aims to expose all key functions via APIs to enable enterprises and developers to use capabilities outside of the core user interface. SAP brand recognition and customer base Analytics and reporting integrated throughout the system using BusinessObjects Evolving a broad mobile management strategy including app development, content management and enterprise app integration Real-time TEM data to monitor data usage and roaming charges High prices may discourage users from choosing SAP Broad capabilities are implemented as modular components that require additional integration and simplification Sophos Sophos Mobile Control Founded in 1985, Sophos is a European company with dual headquarters in Oxford, England and Boston. Sophos is best known for its security, encryption and anti-malware tools for PCs and Macs. The acquisition of DIALOGS, based in Germany, was completed in April 2012, which strengthened its Sophos Mobile Control (SMC). Sophos has broad platform support, including ios, Android, Windows Phone and BlackBerry, and integrates with other Sophos security tools. SMC is available both on-premise and as SaaS. When deployed as part of the Sophos Complete Security Suite, IT organizations can implement security across PCs and mobile devices in a single license, and provide web filtering and integrated encryption. Sophos is a good fit for organizations who use Sophos for PC security and management. Broad device support, including Android, ios, BlackBerry, Windows Mobile and Symbian Both on-premise and SaaS implementations Offers additional encryption tools to support ios or Android access to encrypted files in cloud services such as Dropbox or Egnyte Limited name recognition in enterprise mobile management Currently lacks support for Windows Phone or Windows 8 Needs to improve management for usage analysis and remote OS upgrades 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Page 19

20 Specialists App47 App47 App47 was initially founded to develop app analytics and analysis for the enterprise. Its focus is on mobile app management, aiming to address the life cycle of apps from the user perspective. App47 does not address managing devices, and focuses on tools to improve management and problem solving in a mobile app environment. The performance and usage analytics data is a valuable tool for enterprises needing to monitor how their apps are performing and being used by employees or by customers. Reporting capabilities are relatively basic, but having visibility inside apps to identify most used functions and develop performance benchmarks are solid for a relatively inexpensive tool. Ability to manage individual apps Provided both on-premise and cloud Analytics and reports to track app performance, usage and problems Ability to perform testing and granular app crash analysis Lacks brand recognition in EMM Very limited sales presence is US-only; needs additional channels and partnerships Apperian Enterprise App Services Environment (EASE) Apperian has extensive expertise and experience in building enterprise mobile apps, particularly for ios, and developed its MAM capabilities to solve the problems related to securing and deploying the apps they built. By providing MAM capability for 3 rd party and public apps, Apperian has mobile management for corporate and personal devices without MDM. Apperian s Enterprise App Services Environment (EASE) is a cloud-based solution built as a framework that can connect both Apperian and third-party components as modules. EASE modules can detect malware and evaluate potentially risky apps before they are deployed, offer security including encryption, copy/paste protection and app-level VPN, and include social capabilities to gather feedback and crowdsource improvements. Apperian s open platform and APIs allow mobile app development platforms like Appcelerator to automatically publish and update apps by connecting with EASE. Lightweight approach for managing enterprise apps separately from all personal use and without control over the device, especially suited to BYOD EASE platform enables integration to broaden capabilities, currently supporting Appcelerator, Appthority and Mocana Provides support for mobile users and devices with or without an MDM product installed Support limited to ios and Android only Device management capabilities are basic such as inventory, device wipe and lock Available only as cloud deployment Can distribute content through the App Catalog, but lacks mobile content container or other content management 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Page 20

21 LANDesk Mobility Manager LANDesk is one of the larger vendors providing MDM and other EMM software. LANDesk s main markets are system lifecycle and service management software for enterprise servers and PCs. LANDesk Mobility Manager provides the essentials for MDM supporting ios, Android, BlackBerry and Windows Phone, but limited app and content management. When implemented with the LANDesk Management Suite, IT organizations can integrate their mobile device management with the same management system and admin console as servers, desktops and laptops. It provides discovery features to prevent unmanaged devices from connecting, and the ability to grandfather select existing devices. LANDesk lacks a secure content container to manage mobile documents, but can provide secure content streaming from a secured server. LANDesk Mobility Manager will be attractive to large companies with strong IT operations management focus with other LANDesk management products. Strong presence in PC lifecycle management Very broad operations management suite Integrated console for servers, PCs and mobile devices Limited recognition in EMM, with attention coming from existing customers expanding into mobile management Lacks secure content management Growing experience outside of PCs for Android and ios Smith Micro Device Management Suite Smith Micro was founded in 1982 and is headquartered in Aliso Viejo, CA. Relatively new to enterprise mobile management with its Device Management Suite (DM Suite), Smith Micro has products aimed at device management, managing mobile hotspots and wireless switching, providing video to any device and secure file delivery. Much of Smith Micro s business and experience stems from working with carriers, and it has strong tools to allow mobile operators to offload mobile data from 3G and 4G networks onto Wi-Fi and optimize network capacity. Using its existing sales organization and growing support with partners, Smith Micro aims at device management for enterprises using ios, Android and Symbian. Open Mobile Alliance standards based, with licensable APIs and ability to rapidly deploy custom DM extensions Strong carrier relationships Middleware for cellular network offloading to Wi-Fi Scalable, with over 30 million DM clients deployed Limited enterprise recognition for MDM Expanding partners and their ability to extend MDM visibility to enterprises Global but small direct sales for enterprises 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Page 21

22 Tangoe Tangoe Lifecycle Management Solution Tangoe focuses on communication lifecycle management, and has strong enterprise presence for those implementing shared ownership and personal selection of smartphones. With emphasis on the communication life cycle, Tangoe has a broad suite for mobile device, app and content policy management. The individual components are not all integrated, but device containerization and TEM integration are differentiators. Tangoe offers extensive tracking, reporting and controls including GPS location and audit trails, cut-off policies for plan usage and roaming, and the ability to optimize plans with analytical tools. For BYOD, both corporate and personal liable devices can be limited in access to corporate resources based on compliance requirements. Tangoe has strengthened focus on data management and security with device containerization, with content syncing support for approved users, secure searching and access to corporate file servers and SharePoint servers. Recognition as leading mobile TEM provider Real-time app to track usage and costs Offers on-premise, private SaaS cloud and managed service options Secure mobile access to SharePoint No multi-tenant cloud offering, although can provide SaaS managed services from Tangoe datacenter Sales strength is in TEM and needs more emphasis on overall EMM message Device containerization is a recently introduced capability Trend Micro Mobile Security Trend Micro is one of the largest providers of consumer and enterprise security and anti-malware software. Its mobile management capabilities provide basic functionality, and aim mainly at security and device management. Trend Micro Mobile Security is a plug-in for Trend s core enterprise endpoint security product, OfficeScan. Its device, app and content management functionality integrates with OfficeScan to provide a single web-based management console for Windows, Mac, virtual desktops and mobile devices. Trend Micro Mobile Security supports ios, Android, BlackBerry and Windows Mobile, but lags in support for Windows Phone, with Windows 8 slated for Q Reputation as top security software provider Integration with desktop security and management Web-based console for mobile and desktop device visibility Limited brand awareness outside of security and antivirus Less prevalent in North America than Asia/Pacific and Europe 2013 Aragon Research Inc. and or its affiliates. All rights reserved. Page 22

23 Aragon Advisory Carefully evaluate EMM providers both on current capabilities and on product roadmaps, balancing MDM and MAM needs. EMM is growing rapidly, but enterprises will often require multiple products and multiple vendors to meet the full range of EMM requirements. Realize that EMM will go through a consolidation phase and that larger firms may acquire some providers. That is a natural part of any technology market evolution. Evaluate product roadmaps from providers who are on your short list, evaluating how the providers keep up with OS changes. Bottom Line There is no one-size-fits-all model for managing enterprise mobility. Each solution needs to address mobile devices, apps and data in a flexible way. Some businesses will require tight control over mobile devices and everything they can do, and others will need to enable flexible BYOD support while ensuring that business apps and data are protected. Consolidation has begun even as additional providers introduce mobile management capabilities, and we anticipate a phase of mergers and acquisitions as mobile management functionality converges. Many enterprises will require multiple approaches, but the key priority is to get mobile management started Aragon Research Inc. and or its affiliates. All rights reserved. Page 23