sspm

Open-SSPM is a small “who has access to what” service. It syncs identities from Okta (IdP) and permissions from connected apps (GitHub, Datadog, AWS Identity Center). Demo: admin@admin.com / admin

An open-source SSPM tool written in Go

This is a Python based SaaS Security Posture Management tool for Tableau SaaS

OS/1337 Package Repository

Python SSPM portfolio project for Microsoft 365 / Entra ID posture monitoring using Graph API foundations, IAM checks, risk scoring, compliance mapping, and executive/technical reporting.

Open-source SSPM for SIEM-native teams: detect SaaS posture risks, inventory OAuth shadow IT, and stream normalized findings to your security stack.

Top SaaS Security Posture Management (SSPM) 🌟 Star if you like it! 🌟

Nudge Security — independent third-party profile of a public API surface, by API Evangelist. Nudge Security is a SaaS and AI security management platform that discovers all SaaS and cloud applications used across an organization, helps security teams manage OAuth grants, enforce security policies, monitor app-to-app integrations, and reduce SaaS ri

Wing Security is an AI security platform providing automated discovery, risk assessment, and governance of AI agents, SaaS applications, and app-to-app integrations. The platform delivers SaaS Security Posture Management (SSPM), Identity Threat Detection and Response (ITDR), and continuous observability for AI tools across enterprise environments.

CloudNuro — independent third-party profile of a public API surface, by API Evangelist. CloudNuro is an enterprise SaaS management and FinOps platform that combines SaaS discovery (shadow IT), SaaS subscription and license optimization, user lifecycle and compliance management, SaaS-Chargeback and cost allocation, and Cloud FinOps for AWS, Azure, G

Adaptive Shield — independent third-party profile of a public API surface, by API Evangelist. Adaptive Shield (now CrowdStrike Falcon Shield) is a SaaS Security Posture Management (SSPM) platform that continuously monitors, remediates, and governs SaaS application security configurations and identity risks.

Saasment — independent third-party profile of a public API surface, by API Evangelist. Saasment is an AI-powered SaaS security posture management (SSPM) and cloud cost optimization platform that detects misconfigurations, compliance gaps, and cost inefficiencies across cloud applications.

Valence Security — independent third-party profile of a public API surface, by API Evangelist. Valence Security is the leader in SaaS and AI Security, built for the agentic era. The platform provides SaaS security posture management (SSPM), AI security posture management (AI-SPM), identity threat detection and response (ITDR), and risk remediation