[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:saas-security-posture":3},{"control":4,"products":25,"stories":47,"lessons":91,"related":116,"compare":137},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"saas-security-posture","SaaS security posture management (SSPM)","Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.","Monitoring of settings, sharing, user permissions and connected third-party apps in your SaaS platforms, with alerts on risky changes and data exposure.","Some of the largest data thefts of recent years came through SaaS platforms: stolen tokens of connected apps, public sharing links and support accounts with too much access. SSPM gives the security team a view of systems that business units usually run themselves.",[11,12,13,14],"Which SaaS platforms does it support?","Does it monitor the OAuth apps and integrations connected to our tenants?","Can it detect unusual data exports or API use?","Who in the business gets the findings, and can they fix them themselves?","Risk: data theft from SaaS platforms through misconfiguration or compromised integrations. Control: SSPM on core SaaS tenants with review of connected apps. Owner: business applications lead. Measure: high-risk connected apps without approval.",[17,18,19,20],"NIS2 Art. 21(2)(d): supply chain security","DORA Art. 28: ICT third-party risk","CIS Control 4: secure configuration","ISO\u002FIEC 27001:2022 A.5.23: information security for use of cloud services",{"name":22,"slug":23},"Configuration Management","configuration-management","2026-10-16T12:48:10.584124+00:00",[26,32,40],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":27,"product_name":28,"url":30,"description":31},"appomni","AppOmni","\u002Fvendor-logos\u002Fappomni.png","https:\u002F\u002Fappomni.com\u002F","SaaS security posture management for platforms such as Salesforce, Microsoft 365 and ServiceNow.",{"vendor_slug":33,"vendor_name":34,"vendor_logo":35,"product_slug":36,"product_name":37,"url":38,"description":39},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-shield","Falcon Shield","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Ffalcon-shield\u002F","SaaS security posture management, from CrowdStrike's acquisition of Adaptive Shield.",{"vendor_slug":41,"vendor_name":42,"vendor_logo":43,"product_slug":44,"product_name":42,"url":45,"description":46},"obsidian-security","Obsidian Security","\u002Fvendor-logos\u002Fobsidian-security.png","obsidian","https:\u002F\u002Fwww.obsidiansecurity.com\u002F","SaaS posture management and detection of account and integration compromise.",{"total":48,"last_days":49,"recent":50},81,29,[51,56,61,66,71,76,81,86],{"slug":52,"title":53,"published_at":54,"brief":55},"datatilsynet-norway-20-03541-37-2b19d2","Datatilsynet (Norway) - 20\u002F03541-37","2026-10-13T13:41:47+00:00","Norway DPA fines Xandr €8.5M for processing Grindr users' sexual orientation data without valid consent in real-time",{"slug":57,"title":58,"published_at":59,"brief":60},"tietosuojavaltuutetun-toimisto-finland-tsv-303-2022-29610e","Tietosuojavaltuutetun toimisto (Finland) - TSV\u002F303\u002F2022","2026-10-12T12:55:35+00:00","Finland's DPA fines healthcare provider €33,000 for GDPR violations related to data sharing.",{"slug":62,"title":63,"published_at":64,"brief":65},"the-third-party-agent-problem-why-security-built-for-ai-you-chose-misses-the-age-6966a6","The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't","2026-10-10T11:00:00+00:00","Many third-party AI agents in enterprise software are invisible to security controls.",{"slug":67,"title":68,"published_at":69,"brief":70},"asos-breach-reveals-the-risks-in-customer-facing-saas-7d8a7b","ASOS Breach Reveals the Risks in Customer-Facing SaaS","2026-10-09T20:58:32+00:00","ASOS breach highlights risks of compromised identity in customer-facing SaaS.",{"slug":72,"title":73,"published_at":74,"brief":75},"oauth-grants-pile-up-faster-than-you-can-review-them-here-s-how-to-keep-up-f5b86e","OAuth grants pile up faster than you can review them. Here's how to keep up.","2026-10-08T14:00:10+00:00","OAuth grants accumulate faster than security teams can review, creating exploitable data access pathways.",{"slug":77,"title":78,"published_at":79,"brief":80},"aepd-spain-ps-00287-2025-4ac220","AEPD (Spain) - ps-00287-2025","2026-10-01T15:31:33+00:00","Spain's AEPD finds DGT's mobile app collected unnecessary personal data.",{"slug":82,"title":83,"published_at":84,"brief":85},"lg-frankfurt-am-main-2-06-o-234-25-caf197","LG Frankfurt am Main - 2-06 O 234\u002F25","2026-09-22T06:06:32+00:00","German court finds social media platform liable for fake account content under DSA.",{"slug":87,"title":88,"published_at":89,"brief":90},"bigcommerce-alerts-merchants-of-data-breach-linked-to-ribon-apps-7a6663","BigCommerce alerts merchants of data breach linked to Ribon apps","2026-09-21T21:18:49+00:00","BigCommerce alerts merchants of data breach via compromised Ribon app credentials.",[92,96,100,104,108,112],{"slug":93,"title":94,"published_at":95},"xandr-fined-85m-for-unlawful-processing-of-sensitive-grindr-user-data-in-real-time-bidding","Xandr Fined €8.5M for Unlawful Processing of Sensitive Grindr User Data in Real-Time Bidding","2026-10-13T14:20:35.881+00:00",{"slug":97,"title":98,"published_at":99},"finnish-healthcare-provider-fined-33k-for-sharing-patient-data-with-big-tech-via-tracking-tools","Finnish Healthcare Provider Fined €33K for Sharing Patient Data with Big Tech via Tracking Tools","2026-10-12T14:21:21.087+00:00",{"slug":101,"title":102,"published_at":103},"inherited-ai-agents-create-hidden-identity-and-access-blind-spots","Inherited AI Agents Create Hidden Identity and Access Blind Spots","2026-10-10T12:20:48.952+00:00",{"slug":105,"title":106,"published_at":107},"asos-saas-breach-one-compromised-identity-opens-the-door","ASOS SaaS Breach: One Compromised Identity Opens the Door","2026-10-09T22:20:25.762+00:00",{"slug":109,"title":110,"published_at":111},"unmanaged-oauth-grants-create-shadow-access-risk-across-saas-ecosystems","Unmanaged OAuth Grants Create Shadow Access Risk Across SaaS Ecosystems","2026-10-08T16:22:32.394+00:00",{"slug":113,"title":114,"published_at":115},"spains-dgt-fined-for-collecting-excessive-personal-data-via-mobile-app","Spain's DGT Fined for Collecting Excessive Personal Data via Mobile App","2026-10-01T16:20:36.501+00:00",[117,121,125,129,133],{"slug":118,"name":119,"problem":120},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",{"slug":122,"name":123,"problem":124},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",{"slug":126,"name":127,"problem":128},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":130,"name":131,"problem":132},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",{"slug":134,"name":135,"problem":136},"email-authentication","Email authentication (DMARC)","Nobody can send email that pretends to come from your domain.",{"obsidian-security\u002Fobsidian":138,"appomni\u002Fappomni":146,"crowdstrike\u002Ffalcon-shield":152},{"hq_country":139,"also_provides":140,"reviews":141,"affected":145,"reported":145},"US",[],[142],{"label":143,"url":144},"Gartner Peer Insights: Obsidian user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fobsidian",0,{"hq_country":139,"also_provides":147,"reviews":148,"affected":145,"reported":145},[],[149],{"label":150,"url":151},"Gartner Peer Insights: AppOmni SaaS Security Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fappomni-saas-security-platform",{"hq_country":139,"also_provides":153,"reviews":154,"affected":167,"reported":168},[],[155,158,161,164],{"label":156,"url":157},"SE Labs enterprise endpoint test Apr-Jun 2026: CrowdStrike Falcon","https:\u002F\u002Fselabs.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fsecurity-evaluation-test-report-enterprise-crowdstrike-falcon-2026-07-factsheet.pdf",{"label":159,"url":160},"AV-Comparatives EPR test 2025: CrowdStrike Falcon Enterprise","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2025\u002F09\u002FEPR_CrowdStrike_2025.pdf",{"label":162,"url":163},"Gartner Peer Insights: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcrowdstrike-falcon",{"label":165,"url":166},"PeerSpot: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcrowdstrike-falcon-reviews",4,15]