A method, comprising: evaluating each of a plurality of applications for each of privacy behavior, data leakage behavior, account takeover behavior, device takeover behavior, and malicious behavior, the plurality of applications residing on a mobile device, the mobile device being configurable to access an enterprise system, the evaluating comprising: performing a static analysis of each of the plurality of applications for each of the privacy behavior, data leakage behavior, account takeover behavior, device takeover behavior, and malicious behavior, performing a dynamic analysis of each of the plurality of applications for each of the privacy behavior, data leakage behavior, account takeover behavior, device takeover behavior, and malicious behavior, and performing a behavior analysis of each of the plurality of applications for each of the privacy behavior, data leakage behavior, account takeover behavior, device takeover behavior, and malicious behavior; calculating a risk score for each of the plurality of applications based on the evaluating; determining whether each of the plurality of applications meets or exceeds a risk score threshold; and automatically remediating the applications, of the plurality of applications, for which the risk score meets or exceeds the risk score threshold. evaluating each of a plurality of applications for each of privacy behavior, data leakage behavior, account takeover behavior, device takeover behavior, and malicious behavior, the plurality of applications residing on a mobile device, the mobile device being configurable to access an enterprise system, the evaluating comprising: performing a static analysis of each of the plurality of applications for each of the privacy behavior, data leakage behavior, account takeover behavior, device takeover behavior, and malicious behavior, performing a dynamic analysis of each of the plurality of applications for each of the privacy behavior, data leakage behavior, account takeover behavior, device takeover behavior, and malicious behavior, and performing a behavior analysis of each of the plurality of applications for each of the privacy behavior, data leakage behavior, account takeover behavior, device takeover behavior, and malicious behavior; performing a static analysis of each of the plurality of applications for each of the privacy behavior, data leakage behavior, account takeover behavior, device takeover behavior, and malicious behavior, performing a dynamic analysis of each of the plurality of applications for each of the privacy behavior, data leakage behavior, account takeover behavior, device takeover behavior, and malicious behavior, and performing a behavior analysis of each of the plurality of applications for each of the privacy behavior, data leakage behavior, account takeover behavior, device takeover behavior, and malicious behavior; calculating a risk score for each of the plurality of applications based on the evaluating; determining whether each of the plurality of applications meets or exceeds a risk score threshold; and automatically remediating the applications, of the plurality of applications, for which the risk score meets or exceeds the risk score threshold.