Obsidian Security Launches Comprehensive SaaS Supply Chain Security Solution

Obsidian Security has unveiled a comprehensive solution for SaaS supply chain security, aiming to empower organizations to manage the growing risks associated with interconnected SaaS applications. This initiative follows significant breaches, such as the Salesloft-Drift Supply Chain attack, which impacted over 700 organizations in the previous year. The new solution encompasses the full lifecycle of SaaS security, integrating risk visibility, proactive prevention, early detection of breaches, and forensic analysis into a unified platform.

Joseph Gothelf, VP of Cybersecurity at Wyndham Hotels and Resorts, emphasized the need for continuous visibility in the SaaS ecosystem, particularly regarding unauthorized activities between applications. This highlights the potential for significant data breaches if organizations do not have robust monitoring in place. Grace Liu, SVP and CIO at Seagate Technology, echoed this sentiment, stressing the importance of understanding both known and shadow integrations that facilitate data movement across applications.

Obsidian’s solution offers three key capabilities: full visibility into SaaS integration risk, early detection and mitigation of compromises, and rapid breach containment and remediation. The first capability allows organizations to unify identity, permissions, OAuth scopes, and activity data, enabling them to identify risky integrations and take action to mitigate exposure.

The early detection feature leverages the Obsidian Knowledge Graph and threat intelligence to enhance detection capabilities across SaaS integrations. By establishing baselines for normal behavior, Obsidian can identify suspicious activities that traditional tools might overlook. Additionally, the solution provides customized breach notifications tailored to each customer’s environment, allowing for swift response and containment of incidents.

Hasan Imam, CEO of Obsidian Security, noted that the evolution of SaaS environments into complex supply chains has made them vulnerable to exploitation. As AI agents increasingly facilitate connections between applications, the risk associated with a single compromised integration can escalate significantly. Obsidian’s new capabilities aim to address these challenges, enabling organizations to innovate while maintaining robust security.

• Full visibility into SaaS integration risk: Obsidian unifies identity, permissions, OAuth scopes, and activity data for comprehensive risk assessment.
• Early detection and mitigation of SaaS supply chain compromise: The solution uses threat intelligence to identify suspicious data movement in real time.
• Rapid breach containment and remediation: Customized notifications help organizations quickly assess and respond to incidents.