Evaluation server to compare data from mobile devices to historical device data to control deployment of security policies

1. A system comprising:

a data repository; and

an evaluation server comprising a processor and a memory, wherein the evaluation server is configured to:

collect data from each of a plurality of computing devices;

store the collected data in the data repository;

collect first data from a first computing device;

collect second data from a second computing device;

cause a comparison of the first data to the collected data in the data repository;

cause a comparison of the second data to the collected data in the data repository;

based on the comparison of the first data to the collected data and the comparison of the second data to the collected data, determine a first policy to apply to the first computing device and to apply to the second computing device;

determine a priority order for deploying the first policy to the first computing device and the second computing device; and

deploy the first policy to the first computing device and the second computing device according to the priority order.

2. The system of claim 1 , further comprising a cloud back-end server system accessible to the evaluation server, wherein:

the evaluation server is further configured to, after collecting the first data from the first computing device, send the first data to the cloud back-end server system; and

the cloud back-end server system is configured to perform the comparison of the first data to the collected data.

3. The system of claim 1 , wherein the first data includes an inventory of applications installed on the first computing device.

4. The system of claim 3 , wherein the first data further includes at least one of a version numberfor each application, a hash for each application, or a unique identifier associated with each application.

5. The system of claim 1 , wherein the evaluation server is further configured to:

determine a fingerprintfor the first computing device; and

based on the fingerprint, determine whether the first computing device is running improperly modified firmware or software.

6. The system of claim 5 , wherein the fingerprint is based on a file system of the first computing device.

7. The system of claim 1 , wherein the collected data includes historical data regarding behavior of network communications between each of the plurality of computing devices and at least one of the evaluation server or another computing device.

8. The system of claim 1 , wherein:

the evaluation server is further configured to run behavioral tests based on context subgroups;

the collected data in the data repository includes results of the behavioral tests for the plurality of computing devices; and

the evaluation server is further configured to determine whether to deploy the first policy to the first computing device based on the results for a context subgroup associated with the first computing device.

9. The system of claim 1 , wherein the first data is associated with an application on the first computing device, and the evaluation server determines based on a context determination that the application is in violation of rules stored by the evaluation server.

10. The system of claim 9 , wherein the evaluation server is further configured to, in response to determining that the application is in violation of the rules, cause modification or substitution of one or more components of the application on the first computing device.

11. The system of claim 1 , wherein the evaluation server is further configured to perform an analysis via a component that is injected into an application on the first computing device.

12. The system of claim 11 , wherein the application is configured to facilitate single sign-on for the first computing device.

13. The system of claim 1 , wherein the evaluation server is further configured to check that the first computing device is compliantwith a policy of a service provider server that communicates over a network with the evaluation server.

14. The system of claim 13 , wherein the evaluation server is further configured to configure the policy of the service provider server based on a desired risk threshold.

15. A system comprising:

at least one processor; and

memory storing instructions configured to instruct the at least one processor to:

collect data from each of a plurality of computing devices;

store the collected data;

collect first data from a first computing device, wherein the first data is collected from a security component installed on the first computing device to assess a context of operation of the first computing device;

collect second data from a second computing device, wherein the second data is collected from a security component installed on the second computing device to assess a context of operation of the second computing device;

cause a comparison of the first data to the stored collected data;

cause a comparison of the second data to the stored collected data;

determine, based on the comparison of the first data to the collected data and the comparison of the second data to the stored collected data, a first policy to apply to the first computing device and to apply to the second computing device;

determine a priority order for deploying the first policy to the first computing device and the second computing device;

deploy the first policy to the first computing device and the second computing device according to the priority order; and

track a status for deployment of the first policy to the first computing device and to the second computing device.

16. The system of claim 15 , further comprising a server that communicates with the evaluation server over a network, wherein:

the evaluation server is further configured to, after collecting the first data from the first computing device, send the first data to the server; and

the server is configured to perform the comparison of the first data to the collected data.

17. The system of claim 15 , wherein the collected data is historical risk data collected from managing security for the plurality of computing devices.

18. The system of claim 15 , wherein the evaluation server is further configured to generate a risk profile for the first computing device, and the first policy is determined further based on the risk profile.

19. The system of claim 15 , wherein the evaluation server is further configured to cause mobile device management (MDM) software to drive a compliance response for the first computing device based on the risk profile.

20. A method comprising:

collecting data from each of a plurality of computing devices;

storing the collected data in a data repository;

collecting first data from a first computing device and second data from a second computing device;

causing a comparison of the first data to the collected data in the data repository and a comparison of the second data to the collected data in the data repository;

based on the comparison of the first data to the collected data and the second data to the collected data, determining a first policy to apply to the first computing device and to apply to the second computing device;

determining a priority order for deploying the first policy to the first computing device and the second computing device; and

deploying the first policy to the first computing device and the second computing device according to the priority order.