Secure End-User Device · TAA Compliant
Secure End-User Device · TAA Compliant
A Samsung Galaxy XCover 7 Pro debloated and hardened by GoTAK, with ATAK and the GoTAK plugin suite pre-loaded. Knox, DeX and Google services stay intact — so it runs every app your team and your partners require.
A Samsung Galaxy XCover 7 Pro debloated and hardened by GoTAK, with ATAK and the GoTAK plugin suite pre-loaded. Knox, DeX and Google services stay intact — so it runs every app your team and your partners require.
Ships within 3–5 business days
Included in your kit
GoTAK Operator Mode
Configure your EUD for the demands of the mission. Operator Mode gives you direct control over supported radios, capture functions, network settings and app access. Build mission profiles, apply the restrictions you need, and verify your configuration before deployment.
Delivered through GoTAK Operator Settings on a Device Owner-provisioned EUD. Available controls vary by Android version and hardware.
Connect supported tactical radios using the correct driver, and use GoTAK’s mesh gateway to give mission data multiple communication pathways. Control Bluetooth and supported Wi-Fi functions, with restrictions that keep radios off until an authorized operator changes the configuration.
Restrict cameras, microphone use, screenshots and screen recording to match the operating environment. Decide which capture functions are available on your EUD. Microphone restrictions also affect voice communications.
Prepare Regular, Tactical or custom configurations for different tasks. Review and apply a saved profile, then check the device for settings that differ from your intended setup.
Limit Wi-Fi access to approved network names, restrict USB file transfer, and configure an installed VPN for always-on operation with optional lockdown. Keep connection settings under operator control.
Keep essential tools available through GoTAK Launcher and an approved app list. Use managed kiosk controls to restrict access to other apps and settings, with password-protected access for authorized changes.
Carry a reviewed configuration from one EUD to the next. Export profiles, check required apps and launcher settings, and generate a readiness report before handing devices to your team.
Pair Operator Mode with WARDEN, GoTAK’s mobile device management platform. WARDEN works with Operator Mode out of the box, connecting on-device operational controls with fleet management for your team. Explore WARDEN
Why the EUD X7P
A commercial Samsung ships with fifty-six apps nobody asked for, two dozen telemetry daemons, and an advertising stack wired in at system level. We ^strip all of it^, harden what is left for the field, and provision the device with ATAK and the ^GoTAK plugin suite^ before it ships. Knox, DeX and Google services stay intact — this is a device you can ^actually carry every day^.
OEM and consumer packages stripped
Telemetry agents disabled, Samsung and Google
Telemetry leaving the device in the background
Factory-direct dispatch
First boot
Power on and operate. Hardened Samsung shell, mission stack pre-loaded, telemetry baselined to zero. Designed as a daily carry, with Google services kept — so it still runs the apps your team and your partners require.
What we do to it
A commercial Samsung arrives loaded with the vendor's business model: bloatware, telemetry daemons, and an advertising stack wired in at system level. We strip all of it, harden what is left, and provision the device with ATAK and the GoTAK plugin suite before it ships — starting from hardware sourced through a trusted, TAA-compliant channel rather than off the retail shelf. Hardening isn't degoogling — it's removing the parts that aren't yours.
Six things we do to every device
Stock behaviour
Bixby, Samsung Pay, Samsung Cloud, the Galaxy Store, Game Hub, Themes, S Health, AR Zone, Routines and Smart Capture — plus Google Photos, Drive, Bard and Docs. Every one of them carries permissions, network access and an attack surface, on a device you never chose them for.
The GoTAK baseline
The manufacturer and carrier layer comes off before the device ships — the apps nobody chose, and the permissions and network access they carry with them. Removal is non-destructive, so any tier can be put back later.
Reversible — a stripped package can be reinstated without reflashing.
Stock behaviour
Retail and carrier stock is assembled wherever the volume is that quarter — Vietnam, India, Brazil — and then moves through distributors, resellers and marketplace sellers nobody audited. A commercial buyer never sees any of it. A federal, state, defense or public-safety buyer discovers it at the exact moment the purchase order needs to clear.
The GoTAK baseline
We do not buy off the shelf. EUD X7P units are pulled through a trusted, auditable channel — Korea-built stock from a TAA designated country, which the mainstream supply does not carry. Same device, same Knox, same warranty; a provenance you can hand to a contracting officer.
The hardening only matters if the hardware underneath it is accounted for.
Stock behaviour
Stock devices ship with Samsung DQAgent, the Knox Analytics Uploader, BBC Agent and Diagmon Agent — plus Google's Turbo, Feedback, AdServices and Federated Compute. They run continuously, reporting device state, app usage and behavioural data.
The GoTAK baseline
The reporting stack across both the manufacturer and Google comes out, and system-level backup, crash and diagnostic reporting goes with it.
A zero-telemetry baseline — and the evidence that it is one.
Stock behaviour
Commercial devices arrive with an active advertising ID, personalised ad frameworks and partner analytics wired in at system level — alongside plaintext DNS and continuous Wi-Fi and Bluetooth scanning that beacon the device to anything listening.
The GoTAK baseline
The advertising and analytics surface is stripped, then the network paths the remainder depends on are closed behind an encrypted resolver.
Nothing on the device is quietly monetising the person carrying it.
Stock behaviour
Stock Android is tuned for a consumer's battery life and a carrier's convenience. Background apps are suspended to save power, so ATAK, Beartooth, Somewear — anything holding a position broadcast or a mesh link — is put to sleep the moment the screen goes off, and fails silently.
The GoTAK baseline
Android's power management is what silently suspends a long-lived link. We exempt the mission stack from it, then apply a field settings baseline on top.
GPS lock, mesh, voice and tracking stay live in the field.
Stock behaviour
Grid after grid of icons, targets sized for a fingertip in good light, a white screen that ruins your night vision, and the one app you actually need buried three swipes deep. Loading the device with two dozen replacement apps only makes the pile bigger.
The GoTAK baseline
We install ATAK and the GoTAK plugin suite, then replace the home screen with the GoTAK Launcher — our own landscape-first launcher, built for EUDs. No sprawling app stack: the tools you need, where your thumb already is.
Operational on first boot — nothing to install, and nothing to hunt for in the field.
Knox is preserved end to end — hardware root of trust, secure boot, real-time kernel protection and the Samsung Secure Element. Knox attestation stays available for MDM enrolment and procurement audits.
The reporting stack removed, backup and crash reporting off, advertising identifiers disabled, and a field settings baseline applied for response and docked work.
Ad, tracker and malware domains are blocked at an encrypted resolver — inside WebView, in every app and over the VPN — with per-app firewalling on top. Passive Wi-Fi and Bluetooth scanning are off and location comes from GPS.
ATAK and the GoTAK plugins installed, licensed and paired, with every TAK-related package auto-detected and whitelisted so it survives a screen-off. The GoTAK Launcher replaces the stock home screen.
GoTAK Launcher · installed and set as the home screen
Every GoTAK EUD boots into our own launcher, not Samsung's or Google's. Landscape-first, ATAK dead centre, targets sized for gloves — and one tap that takes the whole screen red.
Home screen
The quick actions ring the hawk on the home screen: night mode, search, settings, lock. Night mode washes the whole interface red — launcher, labels, icons — so nothing on the device blows your light discipline. AUTO sits under the hawk for hands-off switching.
The home screen carries the five apps you actually open in the field, ATAK in the middle. Everything else is one swipe away in a searchable drawer — no grid of icons to hunt through, and nothing buried three screens deep.
MAAK Field Module Interface
The chest mount's Field Module Mount lets you pull one module and seat the next as the mission changes — no tools, no re-rigging, without taking the carrier off. The module you are not running stores on a MAAK Adventure Clip.
One interface, every platform
The NavBoard, the EUD and every other MAAK field module share the same mount. What rides on the chest mount also fits the belt clip, standard MOLLE, and the Adventure Clip.
Swap in seconds
Press, lift, seat the next module. Gloved, in the dark, on the move — the retention is positive and you feel it lock.
Nothing gets left behind
The inactive module rides on an Adventure Clip, so what is not in use is still on you and still ready.
Field tested
Deployed by defense, law enforcement, and search and rescue teams worldwide — and provisioned for each of them in Virginia Beach.
“Real-time SA, secure comms, and geospatial intelligence on objective. Directly enabled safe recovery with minimal risk to the team.”
“Since introducing ATAK, my department is now looking at EUDs for every officer and SWAT team. GoTAK makes equipping a department reasonable, affordable, and possible.”
“Currently deployed at platoon level in a Tier 1 Special Forces unit of a European country. Reliable in the most demanding environments.”
“SAR is a volunteer program with a very limited budget. GoTAK enabled the whole team to have tracking and information sharing with a few clicks.”
The difference
Off-the-shelf Samsung is built for consumers — ad trackers, telemetry agents, cloud sync and battery-killing background services. The EUD X7P strips all of it while keeping Knox, DeX and Google services, so it still operates as a daily carry.
| Consumer Stock Galaxy | GoTAK EUD X7P This device | |
|---|---|---|
| Bixby & S Voice | Stock Galaxy Always-listening voice daemon. | EUD X7P Removed entirely. |
| Telemetry agents | Stock Galaxy 24+ background daemons from Samsung and Google. | EUD X7P All stripped, and verifiable on the device you receive. |
| Cloud sync | Stock Galaxy Samsung Cloud and Google Photos on by default. | EUD X7P Local-first apps installed in their place. |
| DNS | Stock Galaxy Plaintext, visible to the carrier or network. | EUD X7P Encrypted at the resolver, system-wide. |
| Ad tracking | Stock Galaxy Personalised ads and ad ID active. | EUD X7P Off, ad ID limited, trackers blocked at the resolver. |
| Background scanning | Stock Galaxy Wi-Fi and Bluetooth LE probe continuously. | EUD X7P Passive scanning disabled; GPS only for location. |
| Mission software | Stock Galaxy Manual install per device, then the OS suspends it. | EUD X7P ATAK and plugins pre-loaded, licensed, and kept awake in the background. |
| Knox & DeX | Stock Galaxy Intact, but alongside everything else. | EUD X7P Intact — attestation available for MDM and procurement audits. |
| Fleet management | Stock Galaxy Manual configuration, per device. | EUD X7P WARDEN MDM — one QR code to enrol, policies pushed fleet-wide. |
| Reversibility | Stock Galaxy n/a — nothing was changed. | EUD X7P Nothing flashed, bootloader locked, returnable to stock. |
Hardened, not crippled. Knox & DeX preserved · Google services kept · NDAA & TAA compliant.
Explore the full EUD lineup →FAQ
Full documentation in the GoTAK knowledge base. Community support on Discord. Procurement support direct from sales.
No — deliberately. Google services stay installed and working so the device functions as a daily carry: your team's apps, your partners' apps, banking, MFA, everything you actually need. What we remove is the telemetry, the bloatware and the tracking. If you want a fully degoogled device, that's the EUD V3 on GrapheneOS.
The consumer layer comes off: the manufacturer and carrier apps nobody asked for, the background services that report device state and usage, and the advertising and analytics wired in at system level. What stays is everything you actually need — Knox, DeX, NFC, UWB and Google services.
You get the battery, the storage and the attention back, on a device that behaves itself. The exact profile is ours, and we scope it to your fleet rather than shipping one list.
No. Nothing is flashed and the bootloader stays locked, so the warranty, Knox attestation and MDM enrolment all keep working — that is the whole point of doing it this way rather than putting a custom ROM on a rugged phone.
A device can be returned to a stock configuration if you ever need it, and we capture its state before we start so what shipped is always verifiable.
Yes. The debloat does not modify or weaken any Knox flag. The hardware root of trust, secure boot chain, Secure Element and Knox attestation are all intact — which is what makes MDM enrolment and procurement audit trails possible. Samsung DeX is preserved too, for command-post and vehicle-dock workflows.
Yes. On a stock device Android's power management quietly suspends background apps, and a long-lived position broadcast or a mesh link is the first thing it kills — the app looks fine until the moment you need it.
We tune the device so the mission stack is exempt from that. GPS lock, mesh, voice and tracking stay live in the field.
All of them. Every EUD X7P is carrier unlocked — Verizon, T-Mobile, AT&T and the MVNOs — and works internationally.
Yes. WARDEN MDM enrols a device from a single QR code and pushes policies, apps and locks fleet-wide from one console, over Knox attestation. Provisioning profiles can be tailored to a department's own requirements.
Yes. NDAA Section 889 compliant, with no banned-vendor components in the chip set, modem or RF chain. TAA-compliant configurations are available, and documentation packs can be provided on request.
Standard orders ship within 3–5 business days from Virginia Beach. Larger fleet builds are scheduled with you directly.
Because every device is custom-provisioned and built to order, all sales are final. If something arrives faulty we will make it right.
More questions? Ask on Discord or email sales@getgotak.com.
GoTAK Discord →GoTAK EUD X7P · Provisioned in Virginia Beach
A Galaxy XCover 7 Pro with 56 packages and 24 telemetry agents stripped, encrypted DNS system-wide, and ATAK plus the GoTAK plugin suite pre-loaded and licensed. Knox, DeX and Google services intact. Factory-direct from Virginia Beach, shipping in 3–5 business days.
From $1,500 · ships in 3–5 business days · NDAA & TAA compliant
