Abstract: Disclosed are various approaches for ensuring application integrity for enterprise resource access. In some examples, a client device extracts installed application data from a local instance of an application that is installed on the client device. The installed application data includes actual certificate-based signature information for the local instance of the application. An application verification status is generated using the actual certificate-based signature information and the expected certificate-based signature information; and network access to a protected set of enterprise resources is permitted or denied using the application verification status.