Jason Silberman — SaaS Security Insights

Shining a Light on Shadow IT—Announcing Valence's SaaS Discovery Capabilities

Discover Valence's SaaS discovery capabilities, offering unmatched visibility into shadow IT and shadow AI risks for stronger SaaS security and governance.

Secure SaaS to SaaS Supply chain Today | Valence security

SaaS Security and IaaS Security—Why You Need Both

This article looks at common and unique risks to securing cloud-stored data, both at the cloud infrastructure (IaaS) and SaaS levels, and argues inn favor of the importance of strong security for both.

SaaS OAuth Attack Leads to Widespread Browser Extension Breach

A recent large-scale attack campaign targeting Google Chrome extensions, affecting up to 2.6 million users, underscores the urgent need for businesses to prioritize SaaS security, monitor OAuth tokens, and evaluate third-party integration risks.

How to Choose the Best SaaS Security Platform

Selecting the right SaaS security platform is critical for safeguarding modern organizations against evolving threats in cloud-based environments. This guide explores key considerations and features to help you make an informed decision.

The Challenge of Distributed SaaS Management—Balancing Productivity and Security

Distributed SaaS management empowers business units with the tools they need to innovate and thrive—but it also creates critical security blind spots. This blog explores how organizations can balance the benefits of decentralization with effective SaaS security strategies.

SaaS Security Best Practices and Strategies for 2025

In 2025, securing SaaS applications will require sophisticated strategies and technologies to reduce evolving risks. This article explores key strategies, best practices, and tools for securing SaaS applications, with a focus on SaaS data security, SaaS-to-SaaS integrations, and common SaaS security challenges.

Key Risks of Software as a Service and How to Manage Them

The rapid adoption of SaaS introduces unique security risks that can threaten sensitive data, compliance efforts, and operational continuity. Understanding these risks and implementing strategies to address them is vital for securing SaaS environments effectively.

Strengthening SaaS Applications with Secure Non-Human Identity Management

As SaaS applications grow more complex, so does the network of SaaS-to-SaaS integrations and the non-human identities (NHIs)—such as service accounts, API keys, and OAuth tokens—that power them. Learn about NHI risks and security best practices.

Elevating SaaS Security Posture Management: Key Strategies

While SaaS applications have become essential to modern business operations, they also introduce unique security challenges. To address these issues, SaaS Security Posture Management (SSPM) has emerged as a critical solution.

2024 SaaS Security Breaches: Lessons Learned

As 2024 draws to a close, it's evident that the SaaS landscape has become both a cornerstone of business productivity and a growing target for sophisticated cyberattacks.

Strengthening Cloud Security from SaaS to Infrastructure: Valence Joins WIN—Wiz Integration Network

In today’s expanding cloud ecosystem, comprehensive protection demands securing not only infrastructure-as-a-service (IaaS) and platform-as-a-service (PaaS) environments but also the critical layer of software-as-a-service (SaaS) applications. Read about the Valence Wiz integration.

SSPM and DSPM Better Together—Enriching SaaS Security Risk Management with Cyera’s Data Security Platform Classification and Contextualization

Read about Valence's new integration with Cyera, a leader in Data Security Posture Management (DSPM). Combining Valence’s SSPM capabilities with Cyera’s insights around sensitive data, improving SaaS risk management.

Mitigating Generative AI Security Risks in SaaS Applications

Artificial Intelligence (AI) tools like DeepSeek have revolutionized the business landscape, offering unprecedented automation, efficiency, and innovation. Read about the security risks that come with GenAI use, and how to address them.

Lifecycle Management in SaaS Security: Navigating the Challenges and Risks

Discover SaaS security best practices and lifecycle management strategies to protect your organization from security risks and challenges.

Why Application-Specific Passwords are a Security Risk in Google Workspace

The digital world is constantly changing, and with it, the methods used to secure sensitive information. Decisions made years ago continue to shape today’s landscape. The inception of Gmail by Google marked a pivotal moment in history, setting the foundation for the Google Account as we know it today. Unfortunately, the platform’s early choices still cast a shadow on today’s security posture for everyone who uses it.

Understanding the Shared Responsibility Model in SaaS

The recent attacks targeting data in customers of Snowflake, a SaaS application focused on data storage, serve as a critical reminder of the importance of understanding the Shared Responsibility Model...

The Danger of Sharing Files with “Anyone with the Link”: Examining a Risky Google Drive Misconfiguration

Often when it comes to security, a significant risk results from an action that is so easy that we tend to overlook the risk itself. Sharing a file using the “anyone with the link” option is the equivalent of leaving a treasure chest unlocked...

2024 State of SaaS Security Report Shows A Gap Between Security Team Confidence And Complexity of SaaS Risks

The report explores key challenges, potential risks, and best practices to navigate the modern SaaS security landscape.