AppOmni, Grip Security, Obsidian Security and Valence

About Grip Security

Grip Security sells a SaaS Security Control Plane that helps organizations pinpoint, prioritize, and mitigate SaaS identity risks, including shadow SaaS, shadow AI, and rogue cloud accounts. Grip builds an app inventory and links assets to identities. Grip SaaS Security Control Plane (SSCP) uses identity as the key control point. Grip SSCP is an identity-based architectural element for discovering SaaS services and user-SaaS relationships, and for identifying risky access and malicious or abandoned SaaS services.^{[4][5][6][14]}

Grip says AI and SaaS providers are processing sensitive data outside an organization's direct control. Grip also says over 80% of breaches involve compromised credentials. Grip positions identity-first visibility as the way to detect threats early and respond quickly.^[5][7]

For discovery, Grip says customers can connect an email system and an identity provider in 10 minutes to uncover past, current, and future apps. Grip says the optional Grip Extend browser extension adds deeper insights. Grip says its discovery lets customers see which apps employees use, expose dormant accounts, and remove the blind spots created by shadow SaaS and shadow AI. Grip says Grip Extend brings to light risky SaaS identities, including weak passwords, reused logins, shared accounts, and exposed credentials. Grip categorizes OAuth scopes and permissions by risk level, so customers can prioritize threats and revoke access. Grip says it can capture shadow SaaS, usage history, justification, and authentication methods correlated to identities for up to 10 years of history. Grip says it revealed ten times more cloud accounts than IPG was aware of.^{[1][6][8][14]}

For evaluation, Grip says risk scores highlight SaaS risk based on asset, usage, and governance. SSCP creates a unified risk profile based on user adoption, data used, user roles, privileges, and app data sensitivity. Grip says customers can filter risk scores to prioritize the riskiest SaaS apps for follow-up.^[4][9]

For mitigation, Grip says customers can use its built-in workflows as they are or customize them, and run them automatically or trigger them manually. Grip says customers can connect Grip with existing tools to automate actions across the SaaS apps Grip discovers. Grip says customers can revoke access to unsanctioned apps that are not governed by an IdP. Grip says customers can examine OAuth scopes by risk level and revoke unnecessary or excessive app permissions. Grip says it can uncover opportunities to drive SSO and MFA adoption across SaaS apps. Grip says Grip SSCP automates mitigation and remediation processes. Grip describes workflows suited to existing control points, like CASB, endpoint protection, or IAM/SSO.^{[4][6][10][14]}

Grip sells Grip SaaS Security Posture Management, which Grip says delivers full, ongoing control over SaaS misconfigurations, security drift, and compliance gaps. Grip says it automates discovery and visibility so customers always know what risks exist. Grip describes a multi-user offboarding case in which, with Grip, you group identities, trigger credential rotation, and send manager notifications through one automated workflow. Grip says it continuously maps SaaS-to-SaaS integrations, third- and fourth-party connections, and OAuth tokens.^[11][14]

Grip ITDR 2.0 is Grip's identity threat detection and response product. Grip says Grip ITDR 2.0 empowers SecOps to prevent threats and catch those that bypass preventive controls. Grip ITDR 2.0 detects identity threats in real time across all SaaS, detects malicious OAuth grants between apps, and detects installation of malicious browser extensions. Grip ITDR 2.0 enables one-click and automated threat responses. Grip monitors unmanaged SaaS, including threats from browser extensions, OAuth grants, and privilege escalation. Grip combines discovery, posture hardening, and ITDR into a single platform, giving security teams both protection and response.^[1][7]

Grip says it gives a clear, real-world view of how AI is being used across an organization. Grip says it maps identity to AI usage and automates actions based on behavior, and that it integrates with existing security stacks. Grip says its integrations monitor Claude adoption, AI agents, configurations, and activity. Grip says its integrations discover Gemini agents, track ownership and usage, monitor activity, and manage posture risk. Grip says its integrations discover Cursor deployments and usage across developer environments. Grip integrates shadow SaaS management into Jira processes by automating ticket creation as needed.^{[6][7][10][12][13]}

About Obsidian Security

Obsidian Security sells AI security and third-party SaaS application security products, including posture management, supply chain security, and threat detection for platforms such as Google Workspace, Microsoft 365, Salesforce and Snowflake. The company announced a Series D funding round described as being used to fuel agentic productivity securely, indicating it is a privately held, venture-backed company. Its product lines span AI agent visibility and governance, shadow AI detection, and SaaS identity threat detection and response.^[2]

About Valence

Valence sells a platform that discovers and protects human, non-human, and AI agent identities across endpoint, cloud, and SaaS. Valence combines SaaS security and AI governance to enable security teams to discover, protect, and detect and respond to threats across their SaaS and AI ecosystem.^[1][3][5]

Valence says human, non-human, and agentic identities are spread across SaaS, cloud, and endpoints, far beyond what IAM was built to track. Valence says chained identities and privileges span systems, turning one rogue agent into an enterprise-wide incident. Valence says its platform lets teams enforce least privilege on agents and identities, fix misconfigurations, and control how AI connects to critical apps.^[3][5][14]

In its Microsoft 365 coverage, Valence combines SaaS Security Posture Management (SSPM), SaaS risk remediation and SaaS Identity Threat Detection and Response (ITDR) capabilities to find and fix Microsoft 365 security risks. Valence identifies and monitors both sanctioned and unsanctioned SaaS applications, including shadow IT and AI tools. Valence builds an inventory of SaaS apps and users.^[3][6]

Valence identifies misconfigurations, policy gaps, and configuration drift, presenting priorities and remediation paths. Valence supports compliance with industry frameworks such as CIS, ISO, SOC2, and NIST.^[3][7]

Valence delivers unified SaaS and AI Security Posture Management with centralized governance across every application. Valence continuously maps AI usage across SaaS, cataloging embedded AI features, integrations, and AI agents. Valence identifies and manages shadow AI tools and AI agents adopted outside of sanctioned workflows. Valence evaluates how AI capabilities and agents access data, what permissions they hold, and what actions they are allowed to perform. Valence says security teams can apply least-privilege controls to AI agents.^[3][7][8]

Valence offers remediation options that include manual and automated capabilities and business user collaboration. Security teams can apply one-click fixes directly from Valence or define automated triggers, outreach, and actions to enforce security policies. Valence collaborates with business users over Slack or email to address risks they configured. Valence delivers identity threat detection and response across a SaaS ecosystem. Valence monitors activity across users, service accounts, tokens, and integrations to identify suspicious access patterns, privilege abuse, and signs of compromise. Valence correlates events across applications to uncover threats that are difficult to detect in isolation.^[3][9]

Valence integrates and supports over 150 SaaS applications such as Microsoft 365, Google Workspace, Salesforce, Okta, and GitHub. Valence Connector Studio extends SaaS security to every application an organization relies on. Valence lets organizations use a simple REST API to ingest data from custom sources. Valence identifies Slack accounts that bypass corporate IdP management. Valence detects and manages GitHub accounts that bypass corporate SSO/IdP. Valence says it empowered Lionbridge to revoke 95% of obsolete or inactive OAuth and API tokens almost immediately. Highspot reduced external data shares by 55% over six months.^{[1][3][6][7][10][11][12][13]}