A method, comprising: collecting or detecting vulnerability data from distributed sources with respect to aspects within a mobile device, with respect to communication between the mobile device and a server in a secure network, and with respect to communication between the mobile device and a network service (641, 642, 644), the distributed sources including the mobile device, the server, and the network service (641, 642, 644), the collecting or detecting performed by a facility having a processor, a non-transitory computer-readable medium, and stored instructions translatable by the processor, the facility configured for enhancing security of mobile devices in a mobile networking environment; centrally processing (422, 423, 424) the vulnerability data in order of threat priority associated therewith, the processing (422, 423, 424) performed by the facility, the processing (422, 423, 424) comprising: for each vulnerability event in the vulnerability data: determining (423, 1001), from a plurality of vulnerability policies in a reference policy data store, a matching vulnerability policy that matches a respective vulnerability event in the vulnerability data and that contains a risk score; extracting the risk score from the matching vulnerability policy; based at least on the risk score extracted from the matching vulnerability policy, determining (424, 1101) a best matching risk remediation policy for the respective vulnerability event in the vulnerability data; and performing (424, 1103) a remediation for the mobile device per the best matching risk remediation policy to remediate the respective vulnerability event in the vulnerability data; and reporting, through a user interface (1105, 1106, 1107) of the facility, vulnerability events in the vulnerability data and associated remediations for the mobile device in the order of the threat priority. collecting or detecting vulnerability data from distributed sources with respect to aspects within a mobile device, with respect to communication between the mobile device and a server in a secure network, and with respect to communication between the mobile device and a network service (641, 642, 644), the distributed sources including the mobile device, the server, and the network service (641, 642, 644), the collecting or detecting performed by a facility having a processor, a non-transitory computer-readable medium, and stored instructions translatable by the processor, the facility configured for enhancing security of mobile devices in a mobile networking environment; centrally processing (422, 423, 424) the vulnerability data in order of threat priority associated therewith, the processing (422, 423, 424) performed by the facility, the processing (422, 423, 424) comprising: for each vulnerability event in the vulnerability data: determining (423, 1001), from a plurality of vulnerability policies in a reference policy data store, a matching vulnerability policy that matches a respective vulnerability event in the vulnerability data and that contains a risk score; extracting the risk score from the matching vulnerability policy; based at least on the risk score extracted from the matching vulnerability policy, determining (424, 1101) a best matching risk remediation policy for the respective vulnerability event in the vulnerability data; and performing (424, 1103) a remediation for the mobile device per the best matching risk remediation policy to remediate the respective vulnerability event in the vulnerability data; and reporting, through a user interface (1105, 1106, 1107) of the facility, vulnerability events in the vulnerability data and associated remediations for the mobile device in the order of the threat priority. for each vulnerability event in the vulnerability data: determining (423, 1001), from a plurality of vulnerability policies in a reference policy data store, a matching vulnerability policy that matches a respective vulnerability event in the vulnerability data and that contains a risk score; extracting the risk score from the matching vulnerability policy; based at least on the risk score extracted from the matching vulnerability policy, determining (424, 1101) a best matching risk remediation policy for the respective vulnerability event in the vulnerability data; and performing (424, 1103) a remediation for the mobile device per the best matching risk remediation policy to remediate the respective vulnerability event in the vulnerability data; and determining (423, 1001), from a plurality of vulnerability policies in a reference policy data store, a matching vulnerability policy that matches a respective vulnerability event in the vulnerability data and that contains a risk score; extracting the risk score from the matching vulnerability policy; based at least on the risk score extracted from the matching vulnerability policy, determining (424, 1101) a best matching risk remediation policy for the respective vulnerability event in the vulnerability data; and performing (424, 1103) a remediation for the mobile device per the best matching risk remediation policy to remediate the respective vulnerability event in the vulnerability data; and reporting, through a user interface (1105, 1106, 1107) of the facility, vulnerability events in the vulnerability data and associated remediations for the mobile device in the order of the threat priority.