01
PRE-LOADED
Mission-Loaded
ATAK + plugins, encrypted comms, mesh stacks, VPN, and the 24-app tactical stack pre-installed and version-pinned. Operational on first boot.
EUD X7P
Introducing the EUD X7 (Samsung Galaxy XCover 7 Pro), professionally provisioned and mission-ready by GoTAK.
This is not a stock, off-the-shelf device. Each EUD X7 is fully configured before shipment to ensure it is operational, streamlined, and ready for field deployment the moment it powers on.
Pre-Installed & Operationally Configured
Every unit includes:
-
ATAK pre-installed and updated
-
Preloaded GoTAK proprietary TAK plugins and operational tools
-
GoTAK-verified configuration for immediate server enrollment
-
Optimized permissions and battery settings for sustained field performance
-
Clean baseline profile ready for rapid team provisioning
Devices arrive deployment-ready — minimizing setup time and eliminating unnecessary field configuration.
GoTAK Provisioning & Privacy Hardening
Each Galaxy XCover 7 EUD undergoes a structured provisioning process that includes:
-
Removal or disabling of non-essential carrier and OEM applications
-
Reduction of background services that impact battery life and telemetry
-
Privacy-focused system configuration aligned with Android best practices
-
Hardened default settings for location services, radios, and network behavior
-
Performance tuning to prioritize TAK stability and responsiveness
In addition to ATAK, we preload GoTAK proprietary plugins and tools that extend TAK functionality for enhanced situational awareness, communications integration, and streamlined operational workflows.
The result is a streamlined, debloated Android device optimized specifically for TAK-based environments — without consumer-device clutter or unnecessary overhead.
Included with Your Order
-
Samsung Galaxy XCover 7 EUD (professionally provisioned by GoTAK)
-
MAAK rugged case
-
MAAK chest mount
-
MAAK field module mount
TAA-compliant configuration available.
Note: Scout Battery not included unless selected at checkout or purchased separately.
Scout batteries will begin shipment in August 2026.
LIVE OPS
REC · 00:00:00
FIELD CAPTURE
Deployed in environments where failure isn't an option.
DAILY CARRY DEPLOYMENTS
SOF
Law Enforcement
SAR
Defense Contractors
Public Safety
Why not a stock Galaxy?
Off-the-shelf Samsung is built for consumers — bloated with ad trackers, telemetry agents, cloud sync, and battery-killing background services. The GoTAK EUD strips all of that while keeping Google services so it operates as a daily carry.
Bixby & S Voice
STOCK PHONE
Always-listening voice daemon
GOTAK EUD
Removed entirely
Telemetry Agents
STOCK PHONE
24+ background daemons
GOTAK EUD
All stripped (Samsung + Google)
Cloud Sync
STOCK PHONE
Samsung Cloud + Google Photos default-on
GOTAK EUD
Local-first apps installed
DNS
STOCK PHONE
Plaintext, ISP-visible
GOTAK EUD
Encrypted DoT to AdGuard system-wide
Ad Tracking
STOCK PHONE
Personalized ads + Ad ID active
GOTAK EUD
Off; Ad ID limited; trackers DNS-blocked
Mission Software
STOCK PHONE
Manual install; Doze kills the app
GOTAK EUD
ATAK pre-loaded; Doze-whitelisted
| FEATURE | STOCK PHONE | GOTAK EUD |
|---|---|---|
| Bixby & S Voice | Always-listening voice daemon | Removed entirely |
| Telemetry Agents | 24+ background daemons | All stripped (Samsung + Google) |
| Cloud Sync | Samsung Cloud + Google Photos default-on | Local-first apps installed |
| DNS | Plaintext, ISP-visible | Encrypted DoT to AdGuard system-wide |
| Ad Tracking | Personalized ads + Ad ID active | Off; Ad ID limited; trackers DNS-blocked |
| Mission Software | Manual install; Doze kills the app | ATAK pre-loaded; Doze-whitelisted |
Stock is a liability.
Out of the box, a Samsung Galaxy ships with telemetry agents, cloud sync, and ad ID active. The GoTAK debloat is a 7-phase ADB-driven baseline that strips every consumer-grade attack surface — and tunes what's left for the field.
Hardening isn't degoogling. It's removing the parts that aren't yours.
STOCK BEHAVIOR
Twenty-four daemons phoning home.
Stock Samsung devices ship with Samsung DQAgent, Knox Analytics Uploader, BBC Agent, Diagmon Agent — plus Google's Turbo, Feedback, AdServices, and Federated Compute. They run continuously, collecting device state, app usage, and behavioral data.
GOTAK BASELINE
Telemetry Stripped
Phase 2 of the debloat removes the entire telemetry stack — 24 agents from both Samsung and Google — and disables backup + crash reporting at the system level.
- bmgr enable false — backup manager off.
- send_action_app_error = 0 — no crash uploads.
- samsung_errorlog_agree = 0 — no Samsung error log.
- Pre-state snapshot captured for forensic verification and reversibility.
STOCK BEHAVIOR
Apps you didn't ask for, with permissions you didn't grant.
Bixby, Samsung Pay, Samsung Cloud, the Galaxy Store, Game Hub, Samsung Themes, S Health, AR Zone, Routines, Smart Capture — plus Google Photos, Drive, Bard, Gmail, YouTube, Docs. Each carries permissions, network access, and an attack surface.
GOTAK BASELINE
56-Package Strip
Phases 1, 1b, and 1c uninstall 56 OEM and consumer packages with pm uninstall -k --user 0 — keeping app data so anything can be reinstalled, but removing the package from the running system.
- Bixby suite, Samsung Pay, Samsung Cloud, Galaxy Store — gone.
- Google Photos, Drive, Bard, Tachyon, Gmail (optional) — gone.
- Samsung Edge panels, AR Zone, Routines, Smart Capture, Themes — gone.
- Knox, DeX, NFC, UWB — explicitly preserved.
STOCK BEHAVIOR
DNS in the clear, scanning in the background.
Stock Android sends DNS queries in plaintext to whatever resolver the carrier or Wi-Fi network provides. Bluetooth LE and Wi-Fi scan continuously, beaconing the device's presence to anything listening.
GOTAK BASELINE
Encrypted DNS + Scanning Off
Phase 4 sets system-wide encrypted DNS-over-TLS to AdGuard and disables every passive scanning mode.
- private_dns_specifier = dns.adguard-dns.com — encrypted at the resolver, blocks ad/tracker/malware domains everywhere.
- wifi_scan_always_enabled = 0 — no passive Wi-Fi probes.
- ble_scan_always_enabled = 0 — no Bluetooth LE scanning.
- location_providers_allowed = -network — GPS only, no network-based geolocation.
STOCK BEHAVIOR
Doze kills your mission app at the worst time.
Stock Android aggressively hibernates background apps to save battery. ATAK, Beartooth, Somewear, EOTAK — anything keeping a long-lived position broadcast or mesh link — gets put to sleep when the screen turns off, and silently fails.
GOTAK BASELINE
TAK Stack Whitelisted
Phase 5 auto-detects every TAK-related package on the device and exempts it from Doze, hibernation, and aggressive standby buckets.
- dumpsys deviceidle whitelist +<pkg> — Doze exemption.
- cmd appops set <pkg> RUN_ANY_IN_BACKGROUND allow — background ops on.
- cmd app_hibernation set-state <pkg> false — hibernation off.
- cmd usagestats set-standby-bucket <pkg> active — always-active standby.
STOCK BEHAVIOR
What replaces what you removed?
Strip Samsung Messages and you need a messaging app. Strip Gmail and you need a mail client. Strip Samsung Notes and you need a note app. Stock OS leaves you with consumer-grade replacements that re-introduce trackers and cloud sync.
GOTAK BASELINE
24-App Tactical Stack
Phase 7 installs a curated set of FOSS, privacy-first, and tactical applications — pre-cached, version-pinned, deployed via adb install -r -g.
- Stores: Aurora, F-Droid, Accrescent.
- Comms: AOSP Messaging, FairEmail (PGP/S-MIME), LocalSend.
- Network: WireGuard, RethinkDNS firewall, PCAPdroid.
- Security: Aegis Authenticator, KeePassDX, Vanadium browser.
- UX: Kvaesitso launcher (custom-built, internet permission stripped), FUTO Keyboard (offline voice).
- Compartmentalization: Shelter (work-profile isolation).
01 / 05
Defense from silicon to UI.
TRUST ROOT ↓
↑ USER SPACE
01
LAYER DETAIL
HARDWARE
Knox is preserved end-to-end — hardware root of trust, secure boot, real-time kernel protection, and the Samsung Secure Element. Knox attestation remains available for MDM enrollment and procurement audits. NFC and UWB stay enabled for operator preference.
Operational on first boot.
Power on and operate. Hardened Samsung shell, mission stack pre-loaded, telemetry baselined to zero. Designed as a daily carry — not a degoogled lab device — so it runs the apps your team and partners require.
02
HARDENED
Daily Carry Baseline
56 OEM and consumer packages stripped. 24 telemetry agents disabled. Encrypted DNS, ad ID off, animations stripped, Wi-Fi/BLE scanning disabled — all reversible from snapshot.
03
PRESERVED
Knox + DeX Ready
Samsung Knox stays fully intact for MDM attestation and hardware-backed key storage. DeX, NFC, and UWB preserved for desktop docking, tap-to-share, and short-range comms.
04
MDM READY
WARDEN MDM
Single QR-code enrollment for full device management. Push policies, deploy apps, and lock devices fleet-wide from one console — over Knox attestation.
Utilized by tier 1 operators, military personnel, law enforcement, public safety officials, search and rescue teams, and forward-thinking civilians worldwide.
Hardened to carry.
Hardware, hardening pipeline, network policy, and tactical stack — the field-ready details.
ADB-only, reversible, no flashing or bootloader unlock required. Pre-state snapshot captured for forensic verification.
- Phase 1 / 1b / 1c: 56 OEM & consumer packages uninstalled — Bixby, Samsung Pay, Galaxy Store, Cloud, Edge panels, AR Zone, Routines, Photos, Drive, Bard, Gmail.
- Phase 2: 24 telemetry agents disabled. Backup manager off. Error log + diagnostic uploads off.
- Phase 3: Privacy hardening — ad tracking limited, personalized ads off, captive portal probing off, Samsung sharing daemons off.
- Phase 4: Network — system-wide DoT to AdGuard, Wi-Fi + BLE passive scanning off, network-based location off, mobile-data-always-on off.
- Phase 5: TAK performance — auto-detected TAK packages whitelisted from Doze, hibernation, and standby buckets. Animations stripped.
- Phase 7: 24-app tactical stack installed and configured.
System-wide DNS-over-TLS to dns.adguard-dns.com — encrypted at the resolver, blocks ad/tracker/malware domains everywhere, including inside WebView and over VPN.
RethinkDNS layered on top: per-app firewall, multi-WireGuard routing without root, on-device DNS resolver. WireGuard VPN ships with the device.
Samsung Knox is preserved end-to-end — hardware root of trust, secure boot chain, Knox attestation, Samsung Secure Element. The debloat does not modify or weaken any Knox flag.
Samsung DeX is preserved for command-post and vehicle-dock workflows. NFC and UWB are kept active for operator preference.
Pre-staged, version-pinned, deployed via adb install -r -g:
- Stores: Aurora · F-Droid · Accrescent
- Comms: AOSP Messaging · FairEmail (PGP/S-MIME) · LocalSend
- Network: WireGuard · RethinkDNS · PCAPdroid
- Security: Aegis Authenticator · KeePassDX · Vanadium browser
- Productivity: Markor · Material Files · GrapheneOS PDF Viewer · GrapheneOS Camera
- UX: Kvaesitso launcher (INTERNET permission stripped) · Fossify Launcher (backup) · FUTO Keyboard
- Field: ConnectBot · Termux · Shelter (work-profile compartmentalization)
NDAA Section 889 compliant. No banned-vendor components in the chip set, modem, or RF chain. TAA-compliant configurations available for DoD, federal, and allied procurement.
- GSA-eligible kits available on request.
- Documentation packs (DoCs, BoMs, CoCs) available for contracting officers.
- Knox attestation reports available for MDM enrollment audit trails.
Factory-direct from Virginia Beach. Two-business-day standard ship. Expedited LE/military procurement available.
Volume pricing at 10+ units. Custom kits scoped, sourced, and shipped to spec.
sales@getgotak.com · (757) 910-0259
DAILY CARRY FLEET INQUIRIES
Equipping a department?
Volume pricing, TAA-compliant kits, MDM-staged enrollment, and custom debloat profiles for departmental rollouts.
NEXT STEP
Carry it hardened.
TAA & NDAA compliant. Knox preserved. Bloat stripped. ATAK pre-loaded. Designed as a daily carry, ready for the field.
Ships in 2 business days
TAA & NDAA compliant
Carrier unlocked
