Surface 04
SaaS
What lives here
Business apps (Workday, Salesforce, Google Workspace), OAuth grants between them, shadow SaaS the company doesn't know it has.
Primary threats
- misconfiguration
- over-permissioned integrations
- data exposure
- account takeover via OAuth
- shadow IT
Defensive categories
- SaaS security posture (SSPM)
- identity
- DSPM
- CASB