Abstract: A system and method for managing secure access to one or more applications and data provided via the application based on trustworthiness of a client device. The system is configured to establish a level of trustworthiness of the client device based, at least in part, on attributes of the client device and the user of the client device. In the event that the level of trustworthiness meets or exceeds a predefined trust level for a corresponding application, the system is configured to authorize and allow the client device to execute the application and access data provided via the application. Alternatively, in the event that the level of trustworthiness falls below a predefined trust level, the system is configured to restrict execution of the application and/or access to data provided via the application.