Application integrity verification for enterprise resource access

A non-transitory computer-readable medium comprising machine-readable instructions, wherein the instructions, when executed by at least one processor, cause at least one computing device to at least:

• extract, by a client device, actual certificate-based signature information from a local instance of an application installed on the client device;
• generate, by at least one of the client device or a management service, an application verification status using the actual certificate-based signature information and expected certificate-based signature information received from the management service;
• and
• provide or deny network access to a protected set of enterprise resources based at least in part on the application verification status.

A method performed using instructions executed by at least one computing device, the method comprising:

• extracting, by a client device, actual certificate-based signature information from a local instance of an application installed on the client device;
• generating, by at least one of the client device or a management service, an application verification status using the actual certificate-based signature information and expected certificate-based signature information received from the management service;
• and
• providing or denying network access to a protected set of enterprise resources based at least in part on the application verification status.