Adaptive Shield expands SSPM platform for complex data security

Adaptive Shield, a cybersecurity firm based in Tel Aviv, Israel, has announced an extension of its SaaS Security Posture Management (SSPM) platform capabilities to encompass complex permissions and shared data. This development comes in the wake of the company's recent introduction of GenAI Posture Management at the 2024 RSA Conference.

According to Maor Bin, CEO and co-founder of Adaptive Shield, "SaaS security impacts the entire organisation, affecting security teams, auditors, and app owners. Our platform consolidates and unifies all threat prevention and detection efforts, allowing enterprises to safely rely on both out-of-the-box and homegrown SaaS applications."

One of the significant challenges cited in securing SaaS applications is the unique manner in which each app provisions entitlements. Security teams and app owners find it nearly impossible to facilitate security and compliance audits due to intricate and dispersed permission structures, combined with varying terminology and user interfaces across different apps. These challenges are particularly pronounced in environments such as Salesforce, Workday, M365, Zendesk, and Google Workspace. Furthermore, the management of data entitlements, such as detecting external sharing of documents, boards, and repositories, poses the risk of inadvertent or malicious data disclosure.

As a response to these emerging security concerns, Adaptive Shield has prioritised the development of two key features: the Permission Inventory and the Data Inventory.

The Permission Inventory offers customers comprehensive visibility into permission structures at the SaaS stack level through an automated approach. Its core capabilities include:

• Permissions consolidation from multiple areas within the application
• Normalisation of permissions across multiple tenants and applications
• Centralised discovery of roles and aggregated permissions

On the other hand, the Data Inventory feature helps customers prevent data leakage with several key benefits:

• Identification of all publicly shared data from SaaS apps such as Microsoft OneDrive and Google Drive, with the capability to determine which need further protection
• Identification and revocation of outlived data or those no longer being used
• Recognition and sorting of resources shared externally by user, date, department, and former employees
• Alerting of suspicious connections from external domains

Adaptive Shield's SSPM platform distinguishes itself by integrating with over 150 SaaS applications out-of-the-box, while also supporting any custom app through its no-code Integration Builder. This breadth of integration positions Adaptive Shield as a versatile and comprehensive solution in the SaaS security domain.