The Trust’s Head of Digital Services reported that processing time for new mobile applications fell from weeks to minutes after the Trust introduced MobSTR. The team could also show colleagues why it had declined an app and revisit that decision when the risks changed.
Gathering evidence for each request
Previously, several colleagues had to piece together publicly available information for each review. Staff checked applications individually, reading privacy policies and looking for known vulnerabilities.
Bringing the evidence together
The Trust worked with MobSTR to automate parts of its assessment of mobile applications and browser extensions. MobSTR brings permissions, data handling, encryption, software dependencies and known vulnerabilities into one assessment. A risk rating helps reviewers decide which findings deserve their attention first.
“Within a week, the platform was live with minimum overhead for both its installation and to run it.”
Head of Digital Services
Seeing which risks to investigate first
For the cyber security team, the benefit extended beyond the initial decision. Seeing risks across the mobile estate helped the team decide what to investigate first and when to revisit an earlier approval.
“MobSTR has made mobile security much more visible in our day-to-day work.”
Cyber Security Manager
The Trust and MobSTR jointly won Cyber security solution of the year at the Health Tech Awards 2026 for this work. Read the award announcement.
About this customer story & photography
The Trust’s digital services and cyber security teams described their experience of reviewing applications.
Processing times reflect the Trust’s account of its own approval process.
Explore application risk assessment for NHS teams ↗
Illustrative image of a smartphone and laptop in a healthcare setting, created for this case study.