Abstract: A mobile computing device security client that monitors and detects inconsistencies in device security is described. The security client may provide a notification and/or perform an actuation in response to detection of a change in operating conditions of a mobile computing device that is inconsistent with security policies for the mobile computing device. A user notification may provide the user with an opportunity to select an action to take in response to the potential security breach. Actuations include response actions to mitigate the compromise in security based on the operating conditions. The security policies may include security policies associated with hardware peripheral use, an application whitelist, an application blacklist, and/or firewall security settings. The security client may maintain associations between operating condition inconsistencies and notifications and/or actuations to be performed.