Secure End-User Device
EUD TA5
$1,400.00
Secure End-User Device
EUD TA5
A Samsung Galaxy Tab Active 5 debloated and hardened by GoTAK, with ATAK and the GoTAK plugin suite pre-loaded. Knox, DeX and Google services stay intact — a tablet-sized common operating picture that still works as a daily carry.
Ships within 3–5 business days
Included in your kit
- EUD TA5
- MAAK Rugged Case
Why the EUD TA5
A commercial Galaxy Tab ships with dozens of apps nobody asked for, telemetry daemons running before you touch it, and an advertising stack wired in at system level. We ^strip all of it^, harden what is left for the field, and provision the tablet with ATAK and the ^GoTAK plugin suite^ before it ships. Knox, DeX and Google services stay intact — a full-size map you can ^actually carry every day^.
OEM and consumer packages stripped
Telemetry agents disabled, Samsung and Google
Telemetry leaving the device in the background
Factory-direct dispatch
First boot
Operational on first boot.
Power on and operate. Hardened Samsung shell, mission stack pre-loaded, telemetry baselined to zero. A tablet-sized common operating picture — not a degoogled lab device — so it still runs the apps your team and your partners require.
What we do to it
Stock is
a liability.
A commercial Galaxy Tab arrives loaded with the vendor's business model: bloatware, telemetry daemons, and an advertising stack wired in at system level. We strip all of it, harden what is left, and provision the device with ATAK and the GoTAK plugin suite before it ships. Hardening isn't degoogling — it's removing the parts that aren't yours.
Five things we do to every device
Stock behaviour
Apps you didn't ask for, with permissions you didn't grant.
Bixby, Samsung Pay, Samsung Cloud, the Galaxy Store, Game Hub, Themes, S Health, AR Zone, Routines and Smart Capture — plus Google Photos, Drive, Bard and Docs. Every one of them carries permissions, network access and an attack surface, on a device you never chose them for.
The GoTAK baseline
Fifty-six packages removed.
The manufacturer and carrier layer comes off before the device ships — the apps nobody chose, and the permissions and network access they carry with them. Removal is non-destructive, so any tier can be put back later.
- The assistant, payments, cloud and store apps are gone.
- The consumer apps you did not ask for are gone; the services you rely on stay.
- Knox, DeX, NFC and UWB are explicitly preserved.
Reversible — a stripped package can be reinstated without reflashing.
Stock behaviour
Twenty-four daemons phoning home.
Stock devices ship with Samsung DQAgent, the Knox Analytics Uploader, BBC Agent and Diagmon Agent — plus Google's Turbo, Feedback, AdServices and Federated Compute. They run continuously, reporting device state, app usage and behavioural data.
The GoTAK baseline
Telemetry stripped to zero.
The reporting stack across both the manufacturer and Google comes out, and system-level backup, crash and diagnostic reporting goes with it.
- No device state, app usage or behavioural data leaving in the background.
- Backup, crash and diagnostic reporting off at the system level.
- We record the device's state before and after, so what shipped is verifiable.
A zero-telemetry baseline — and the evidence that it is one.
Stock behaviour
The adware ships with the phone.
Commercial devices arrive with an active advertising ID, personalised ad frameworks and partner analytics wired in at system level — alongside plaintext DNS and continuous Wi-Fi and Bluetooth scanning that beacon the device to anything listening.
The GoTAK baseline
The tracking layer comes out.
The advertising and analytics surface is stripped, then the network paths the remainder depends on are closed behind an encrypted resolver.
- Advertising identifiers and personalised ad frameworks disabled system-wide.
- Ad, tracker and malware domains blocked before they resolve — in every app, inside WebView and over the VPN.
- Passive Wi-Fi and Bluetooth scanning switched off; location comes from GPS.
Nothing on the device is quietly monetising the person carrying it.
Stock behaviour
Consumer defaults fight the mission.
Stock Android is tuned for a consumer's battery life and a carrier's convenience. Background apps are suspended to save power, so ATAK, Beartooth, Somewear — anything holding a position broadcast or a mesh link — is put to sleep the moment the screen goes off, and fails silently.
The GoTAK baseline
Tuned for the field, not the shelf.
Android's power management is what silently suspends a long-lived link. We exempt the mission stack from it, then apply a field settings baseline on top.
- ATAK and every TAK-related app keep running with the screen off.
- The interface is tuned for instant response, and stays awake when docked.
- Knox stays intact end to end — secure boot, root of trust and attestation untouched.
GPS lock, mesh, voice and tracking stay live in the field.
Stock behaviour
A stock home screen is built for a thumb on a sofa.
Grid after grid of icons, targets sized for a fingertip in good light, a white screen that ruins your night vision, and the one app you actually need buried three swipes deep. Loading the device with two dozen replacement apps only makes the pile bigger.
The GoTAK baseline
ATAK, our plugins, and the GoTAK Launcher.
We install ATAK and the GoTAK plugin suite, then replace the home screen with the GoTAK Launcher — our own landscape-first launcher, built for EUDs. No sprawling app stack: the tools you need, where your thumb already is.
- ATAK and the GoTAK plugin suite installed, licensed and paired to your TAK server.
- GoTAK Launcher set as the home screen — landscape-first, ATAK dead centre, gloved-size targets.
- One tap takes the whole interface red for light discipline; everything else is a swipe away in a searchable drawer.
Operational on first boot — nothing to install, and nothing to hunt for in the field.
From trust root to user space.
Trust root ↑ · User space ↓Knox is preserved end to end — hardware root of trust, secure boot, real-time kernel protection and the Samsung Secure Element. Knox attestation stays available for MDM enrolment and procurement audits.
The reporting stack removed, backup and crash reporting off, advertising identifiers disabled, and a field settings baseline applied for response and docked work.
Ad, tracker and malware domains are blocked at an encrypted resolver — inside WebView, in every app and over the VPN — with per-app firewalling on top. Passive Wi-Fi and Bluetooth scanning are off and location comes from GPS.
ATAK and the GoTAK plugins installed, licensed and paired, with every TAK-related package auto-detected and whitelisted so it survives a screen-off. The GoTAK Launcher replaces the stock home screen.
GoTAK ATAK plugins
More than hardware.
A plugin suite.
The EUD TA5 ships with ATAK and the plugins GoTAK builds for it — tools for the operator's health, the map, the drone above, the transmitter over the hill, and the moment data fails.
Heart rate and vitals from Garmin and Samsung smartwatches, on the ATAK map beside everything else and shared to the team as CoT — so a leader sees the condition of every operator, not just their position.
Past a few hundred markers a COP stops being a picture. Clusters collapses colliding markers into counted, colour-graded groups by screen position, so the terrain comes back and the count shows where the activity is. Nothing is deleted; zoom in or tap and the members return.
Every drone around you on the ATAK map in seconds — the aircraft, where the pilot is standing, and whether the signal is real. Reads FAA Remote ID off the air, passive and RX-only, and shares every detection with the whole team.
Turns the KrakenSDR receiver into an ATAK sensor. Direction-of-arrival bearings, the power lobe, and RSSI-coloured breadcrumbs draw on the map, every reading tightens a running estimate of where the emitter is, and it all goes out as CoT.
Encrypted Cursor-on-Target over SMS and MMS — the lowest-bandwidth transport in tactical comms. ATAK keeps working on direct-to-cell satellite and every cellular generation down to 2G, with no data connection at all.
Search any address, place, or building and drop it straight onto the map. Region databases live on the device, so it works with zero network — no API keys, no licensing, typo-tolerant.
A landscape-first Android launcher built for GoTAK EUDs: ATAK front and centre, big glove-friendly targets, one-tap NVIS red night mode with auto, and a searchable app drawer. Free.
One device. One toolkit. Every plugin is built and supported in Virginia Beach, licensed through the GoTAK plugin portal, and runs on ATAK 5.2 and newer.
GoTAK Launcher · installed and set as the home screen
Made for
EUDs.
Every GoTAK EUD boots into our own launcher, not Samsung's or Google's. Landscape-first, ATAK dead centre, targets sized for gloves — and one tap that takes the whole screen red.
Home screen
One tap to red.
The quick actions ring the hawk on the home screen: night mode, search, settings, lock. Night mode washes the whole interface red — launcher, labels, icons — so nothing on the device blows your light discipline. AUTO sits under the hawk for hands-off switching.
Your stack, up front.
The home screen carries the five apps you actually open in the field, ATAK in the middle. Everything else is one swipe away in a searchable drawer — no grid of icons to hunt through, and nothing buried three screens deep.
MAAK Field Module Interface
Quick swap
field modules.
The chest mount's Field Module Mount lets you pull one module and seat the next as the mission changes — no tools, no re-rigging, without taking the carrier off. The module you are not running stores on a MAAK Adventure Clip.
- 01
One interface, every platform
The NavBoard, the EUD and every other MAAK field module share the same mount. What rides on the chest mount also fits the belt clip, standard MOLLE, and the Adventure Clip.
- 02
Swap in seconds
Press, lift, seat the next module. Gloved, in the dark, on the move — the retention is positive and you feel it lock.
- 03
Nothing gets left behind
The inactive module rides on an Adventure Clip, so what is not in use is still on you and still ready.
Field tested
Trusted
in the field.
Deployed by defense, law enforcement, and search and rescue teams worldwide — and provisioned for each of them in Virginia Beach.
“Real-time SA, secure comms, and geospatial intelligence on objective. Directly enabled safe recovery with minimal risk to the team.”
“Since introducing ATAK, my department is now looking at EUDs for every officer and SWAT team. GoTAK makes equipping a department reasonable, affordable, and possible.”
“Currently deployed at platoon level in a Tier 1 Special Forces unit of a European country. Reliable in the most demanding environments.”
“SAR is a volunteer program with a very limited budget. GoTAK enabled the whole team to have tracking and information sharing with a few clicks.”
The difference
A stock Galaxy Tab.
Or the same tablet, hardened.
Off-the-shelf Samsung is built for consumers — ad trackers, telemetry agents, cloud sync and battery-killing background services. The EUD TA5 strips all of it while keeping Knox, DeX and Google services, so it still operates as a daily carry.
| Consumer Stock Galaxy Tab | GoTAK EUD TA5 This device | |
|---|---|---|
| Bixby & S Voice | Stock Galaxy Tab Always-listening voice daemon. | EUD TA5 Removed entirely. |
| Telemetry agents | Stock Galaxy Tab 24+ background daemons from Samsung and Google. | EUD TA5 All stripped, and verifiable on the device you receive. |
| Cloud sync | Stock Galaxy Tab Samsung Cloud and Google Photos on by default. | EUD TA5 Local-first apps installed in their place. |
| DNS | Stock Galaxy Tab Plaintext, visible to the carrier or network. | EUD TA5 Encrypted at the resolver, system-wide. |
| Ad tracking | Stock Galaxy Tab Personalised ads and ad ID active. | EUD TA5 Off, ad ID limited, trackers blocked at the resolver. |
| Background scanning | Stock Galaxy Tab Wi-Fi and Bluetooth LE probe continuously. | EUD TA5 Passive scanning disabled; GPS only for location. |
| Mission software | Stock Galaxy Tab Manual install per device, then the OS suspends it. | EUD TA5 ATAK and plugins pre-loaded, licensed, and kept awake in the background. |
| Knox & DeX | Stock Galaxy Tab Intact, but alongside everything else. | EUD TA5 Intact — attestation available for MDM and procurement audits. |
| Fleet management | Stock Galaxy Tab Manual configuration, per device. | EUD TA5 WARDEN MDM — one QR code to enrol, policies pushed fleet-wide. |
| Reversibility | Stock Galaxy Tab n/a — nothing was changed. | EUD TA5 Nothing flashed, bootloader locked, returnable to stock. |
Hardened, not crippled. Knox & DeX preserved · Google services kept · NDAA & TAA compliant.
Explore the full EUD lineup →FAQ
The questions
operators ask first.
Full documentation in the GoTAK knowledge base. Community support on Discord. Procurement support direct from sales.
Is the EUD TA5 degoogled?+
No — deliberately. Google services stay installed and working so the device functions as a daily carry: your team's apps, your partners' apps, banking, MFA, everything you actually need. What we remove is the telemetry, the bloatware and the tracking. If you want a fully degoogled device, that's the EUD V3 on GrapheneOS.
What is different from a stock Samsung?+
The consumer layer comes off: the manufacturer and carrier apps nobody asked for, the background services that report device state and usage, and the advertising and analytics wired in at system level. What stays is everything you actually need — Knox, DeX, NFC, UWB and Google services.
You get the battery, the storage and the attention back, on a device that behaves itself. The exact profile is ours, and we scope it to your fleet rather than shipping one list.
Is anything permanently modified?+
No. Nothing is flashed and the bootloader stays locked, so the warranty, Knox attestation and MDM enrolment all keep working — that is the whole point of doing it this way rather than putting a custom ROM on a rugged phone.
A device can be returned to a stock configuration if you ever need it, and we capture its state before we start so what shipped is always verifiable.
Does Knox still work?+
Yes. The debloat does not modify or weaken any Knox flag. The hardware root of trust, secure boot chain, Secure Element and Knox attestation are all intact — which is what makes MDM enrolment and procurement audit trails possible. Samsung DeX is preserved too, for command-post and vehicle-dock workflows.
Will ATAK keep running with the screen off?+
Yes. On a stock device Android's power management quietly suspends background apps, and a long-lived position broadcast or a mesh link is the first thing it kills — the app looks fine until the moment you need it.
We tune the device so the mission stack is exempt from that. GPS lock, mesh, voice and tracking stay live in the field.
Does it have cellular?+
Both configurations are offered. Wi-Fi Only, or Wi-Fi + 5G Cellular with a carrier-unlocked modem that works on any network. Pick the one you need in the configurator above.
Can I manage a fleet of these?+
Yes. WARDEN MDM enrols a device from a single QR code and pushes policies, apps and locks fleet-wide from one console, over Knox attestation. Provisioning profiles can be tailored to a department's own requirements.
Is it NDAA compliant?+
Yes. NDAA Section 889 compliant, with no banned-vendor components in the chip set, modem or RF chain. TAA-compliant configurations are available, and documentation packs can be provided on request.
How long does shipping take?+
Standard orders ship within 3–5 business days from Virginia Beach. Larger fleet builds are scheduled with you directly.
What is the return policy?+
Because every device is custom-provisioned and built to order, all sales are final. If something arrives faulty we will make it right.
More questions? Ask on Discord or email sales@getgotak.com.
GoTAK Discord →GoTAK EUD TA5 · Provisioned in Virginia Beach
Hardened, not crippled. Ready to carry.
A Galaxy Tab Active 5 with 56 packages and 24 telemetry agents stripped, encrypted DNS system-wide, and ATAK plus the GoTAK plugin suite pre-loaded and licensed. Knox, DeX and Google services intact. Factory-direct from Virginia Beach, shipping in 3–5 business days.
From $1,400 · ships in 3–5 business days · NDAA & TAA compliant