Nudge Security

No entries match these filters. Clear filters

1. Detect cryptocurrency wallet addresses shared in AI conversations Nov 3, 2026 · issue 130
   • New detection Cryptocurrency wallet address detection in AI conversations
2. Strengthen your SaaS security posture with our latest connected app for Duo Security Nov 3, 2026 · issue 130
   • New integration Duo Security connected app
3. announced Nov 2, 2026 · issue 130

   Nudge Security: Toggle browser-based AI agent discovery on in extension settings to auto-populate the AI agents inventory; no new rollout needed for existing users.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   Activate browser-based agent discovery to surface shadow AI agents your employees are building in tools like Cursor or Zapier Agents that have no enterprise API.
   📍In the Nudge Security browser extension settings, toggle AI agent discovery on. Agents will start appearing in Identities › AI agents inventory as employees view or create them.
   • Nudge Security now discovers shadow AI agents through browser activity in addition to existing API integrations, covering platforms whose APIs are limited or unavailable to security teams.
   • Browser-based discovery now covers Cursor automations, Retool, Zapier Agents, ChatGPT workspace agents, OpenAI Agent Workflows, Atlassian Rovo (Jira, Bitbucket), Zoom AI Workflows, HyperAgent, HubSpot agents, Datadog, and Amazon — bringing total platform coverage to 23 across both discovery channels.
   • Governance actions — setting approval status, assigning a technical contact, and nudging the agent creator to confirm intent or remediate — are available directly from the AI agents inventory.
   • Nudge Security now discovers shadow AI agents through browser activity in addition to existing API integrations, covering platforms whose APIs are limited or unavailable to security teams.
   • Browser-based discovery now covers Cursor automations, Retool, Zapier Agents, ChatGPT workspace agents, OpenAI Agent Workflows, Atlassian Rovo (Jira, Bitbucket), Zoom AI Workflows, HyperAgent, HubSpot agents, Datadog, and Amazon — bringing total platform coverage to 23 across both discovery channels.

   1 more in Everything

4. Discover and govern AI agents across 23 agentic platforms Nov 2, 2026 · issue 129

   Nudge Security adds an AI agent inventory view at Identities > AI agents, risk flagging for publicly accessible agents, hardcoded credentials, and unauthenticated MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. connections, plus creator-nudge workflows to capture agent intent.

   • New integrationAccess the full AI agent inventory at Identities > AI agents, where each agent shows its creator, platform, integrations, permissions, and approval status regardless of which discovery channel found it.
   • Flag risky AI agents that are publicly accessible, carry hardcoded credentials, use unauthenticated MCP connections, or whose creators have left the organization.
   • Send a nudge to an agent's creator to collect a plain-language explanation of the agent's purpose and required access, with the answer saved to the agent's record.

   3 details in Everything

5. changelog Oct 29, 2026 · issue 124

   Nudge Security now blocks nudges to deleted, archived, or suspended users, and bulk sends report skipped recipients.

   • Nudge Security now blocks sending nudges to deleted, archived, or suspended users and accounts, with the nudge button disabled and a message explaining why delivery is not possible.
   • Bulk nudge sends now report which recipients were skipped due to deleted, archived, or suspended status.

   2 details in Everything

   • New integration Notion AI agent discovery
6. Stop nudging deleted, archived, and suspended users and accounts Oct 27, 2026 · issue 123

   Nudge Security now blocks nudges to deleted, archived, or suspended users, with inline explanations and bulk-skip notifications.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢
   • Disables the nudge button with an explanatory message when the target user or account is deleted, archived, or suspended.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Reports skipped recipients when sending bulk nudges to a mix of active and inactive users or accounts.
   • Disables the nudge button with an explanatory message when the target user or account is deleted, archived, or suspended.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

7. docs update Oct 21, 2026 · issue 115

   Nudge Security adds Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. via OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user., with optional per-user/group access restriction and a dedicated sign-in URL.

   • New integrationSupports signing in to Nudge Security via OpenID ConnectOpenID ConnectOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. (OIDC) using Microsoft Entra ID, separate from the existing Entra ID discovery integration.
   • Redirect URI https://oidc-auth.nudgesecurity.io/oauth2/idpresponse must be registered as a Web platform in the Entra app registration.
   • Supports restricting tenant-wide sign-in to specific users or groups via Assignment required? in the Entra Enterprise Applications Properties panel.
   • Sign-in with Microsoft OIDC is available at https://www.nudgesecurity.io/login?sso=true once SSO is configured.

   4 details in Everything

8. docs update Oct 21, 2026 · issue 115

   Nudge Security adds native ServiceNow integration for ticket creation, field mapping, and auto-close on finding resolution.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   Connect Nudge Security to ServiceNow and configure default field mappings so tickets created from findings are pre-populated correctly.
   📍In the Nudge Security console, go to Settings › Ticketing, select Connect ServiceNow, enter your ServiceNow instance URL, and authorize access. Then go to Settings › Ticketing › ServiceNow to configure your default field mappings (Table, Urgency, Assigned to, Assignment group, Caller).
   Create a ServiceNow ticket from an open finding and have it auto-close when the finding is resolved, with full Timeline history in Nudge.
   📍Open a finding in Nudge Security, go to the Fix tab, select Create ticket, choose ServiceNow, review the pre-filled Short description and Description, adjust Table/Urgency/Assigned to as needed, then select Create. The ticket (e.g., INC0012345) is linked back to the finding and will automatically move to your mapped closed state when the finding resolves.
   • Adds a ServiceNow integration configurable at Settings > Ticketing > Connect ServiceNow, supporting simultaneous use alongside an existing Jira connection with per-ticket destination selection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds default field mapping under Settings > Ticketing > ServiceNow to pre-populate ServiceNow ticket fields (Table, Urgency, Assigned to, Assignment group, Caller, Short description, Description) when creating tickets from findings.
   • Auto-closes the linked ServiceNow ticket when a finding is resolved in Nudge, setting the ticket to the mapped state and adding a work note with the finding name, resolution date, and a link back to Nudge; if the finding re-emerges, a new ticket is created while the original remains closed as a historical record.

   3 details in Everything

9. docs update Oct 21, 2026 · issue 115

   Nudge Security adds Jira Cloud integration with auto-close on resolution and deep-link ticket tracking.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢
   └──▷ HOW TO FIND IT
   Connect Jira Cloud and configure default field mappings so tickets created from findings are pre-populated correctly.
   📍In Nudge Security, go to Settings › Ticketing, select Connect Jira, and authorize access to your Jira Cloud site. Then go to Settings › Ticketing › Jira to configure default field mappings (Project, Work Type, Priority, Assignee, Reporter).
   Create a tracked Jira ticket from an open finding so engineers can work it in Jira while Nudge auto-closes the ticket on resolution.
   📍Open a finding › Fix tab › select Create Jira ticket › review and adjust pre-filled fields › select Create. The ticket key and URL are stored on the finding, and the Timeline logs a Jira ticket created event with a deep link.
   • Adds Jira Cloud integration, configurable at Settings > Ticketing, to create and track tickets directly from findings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds Create Jira ticket action on the Fix tab of any finding, pre-populating Summary, Description, Project, Work Type, Priority, Assignee, and Reporter from default field mappings set at Settings > Ticketing > Jira.
   • Stores the Jira ticket key and URL on the finding and logs a Jira ticket created event with an inline link in the finding Timeline.
   • Creates a new Jira ticket if a resolved finding re-emerges, preserving the original closed ticket as a historical record.

   4 details in Everything

10. docs update Oct 21, 2026 · issue 115

    Nudge Security adds Microsoft Teams integration, letting admins send nudges and route event-based notifications to Teams users and channels.

    • New integrationAdds Microsoft Teams integration via Settings → ChatOps → Teams, enabling nudges to be sent to and responded to directly inside the Teams app instead of email.
    • Supports Teams-based notification workflows so admins can receive Teams messages when events occur, such as a new supply-chain breach or a user signing up for a new application.
    • Requires the Nudge Security Teams app installed from the Teams apps marketplace (search nudge), with admin consent granted from the Microsoft Teams Admin Center.

    3 details in Everything

11. docs update Oct 21, 2026 · issue 115

    Nudge Security exposes a REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. with endpoints for events, fields, OAuth grants, and label/field management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    ⤢ ⤢ ⤢ ⤢
    • Adds Authorization: Bearer <token> authenticated REST API access, with API tokens created under Settings > API Tokens and a rate limit of 1200 requests per 5-minute period.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds events endpoint to retrieve all events generated by Nudge Security for export to external systems such as a data lake, SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., or IT ticketing system.
    • Adds notifications endpoint to retrieve only events that have been configured to trigger a notification.
    • Adds fields endpoint to retrieve the value of any field in Nudge Security from an external system, including approval status.
    • Adds OAuth grants endpoint to search and retrieve OAuth grants based on custom criteria, such as all high-risk grants for apps with an approval status of not permitted.

    +2 more show less

    • Adds API support for managing labels — create, update, and delete labels on apps or accounts from external systems.
    • Adds API support for managing fields — create new custom fields and update existing ones, including adding or removing allowed values, from external systems.

    7 details in Everything

12. docs update Oct 21, 2026 · issue 115

    Slack integration enables sending nudges, receiving in-Slack responses, and routing workflow notifications to Slack channels via Settings > Notifications.

    • New integrationAdds Slack integration via Settings > Notifications > Connect Slack so admins can send nudges to employees and receive their responses without leaving Slack.
    • Supports /invite @Nudge Security to add the Nudge Security bot to any Slack channel for event-driven notifications.
    • Supports /remove Nudge Security to remove the Nudge Security bot from a Slack channel.
    • Enables Slack channel as a destination in Notifications > Rules so workflow notification rules can route alerts to a specific Slack channel.
    • Tracks all nudge responses in Notifications > Nudge History regardless of whether the recipient replied via email or Slack.

    +1 more show less

    • Allows recipients to reply to nudges directly from Slack and to directly Slack-message the nudge sender from within the nudge message itself.

    6 details in Everything

13. docs update Oct 21, 2026 · issue 115

    Nudge Security adds Okta SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. with SP-initiatedSP-initiatedA SAML or OAuth/OIDC login flow where the Service Provider redirects the user to an Identity Provider to authenticate, rather than the IdP pushing an assertion unprompted; tools use it to trigger SSO from their own login page. and IdP-initiatedIdP-initiatedA SAML or OIDC login flow where the identity provider starts the session and pushes an assertion to the service provider without the user first requesting access, removing the SP-side redirect step. flows; login available at https://www.nudgesecurity.io/login?sso=true.

    • New integrationSupports SP-initiated and IdP-initiated SSOIdP-initiated SSOA single sign-on flow where the identity provider redirects an already-authenticated user directly to a service provider without the service provider first requesting authentication, removing the need for a separate login prompt. flows via Okta, configured by contacting Nudge Security support with your Okta domain, Client ID, and Client Secret.
    • Adds Okta SSO login at https://www.nudgesecurity.io/login?sso=true using the Sign in with Okta option.

    2 details in Everything

14. docs update Oct 21, 2026 · issue 115

    Nudge Security adds Okta SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. analysis integration to monitor SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. SSO enrollment status and trigger enrollment workflows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    ⤢ ⤢ ⤢ ⤢
    └──▷ HOW TO FIND IT
    Connect your Okta tenant to Nudge Security to start tracking SSO enrollment status across your SaaS estate.
    📍1. In Okta admin console, go to Security › API › Tokens and click Create token using a read-only administrator or application administrator account. 2. Copy the generated token. 3. In Nudge Security, navigate to Things to do › Onboard apps to Okta and start or continue the playbook. 4. Enter your Okta API token and subdomain, then click Test connection. 5. Confirm status shows Verified to complete the integration.
    • Adds Okta integration via read-only and application administrator API token, requiring access to /api/v1/apps, /api/v1/apps/{application_id}/groups, /api/v1/apps/{application_id}/users, /api/v1/org/contacts/technical, /api/v1/users/, /api/v1/groups, and /api/v1/groups/{group_id}/users endpoints.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Enables monitoring of SSO enrollment status across the full SaaS estate by connecting an Okta tenant to Nudge Security.
    • Supports automatic initiation of SSO enrollment workflows via the Things to do > Onboard apps to Okta playbook inside Nudge Security.

    3 details in Everything

15. docs update Oct 21, 2026 · issue 115

    Nudge Security adds an Okta connected app integration configured via a least-privilege API token, set up under Settings > Integrations.

    • New integrationAdds Okta connected app integration, configured under Settings > Integrations in Nudge Security by supplying an Okta domain and API token.
    • Supports least-privilege Okta API token setup by creating a custom Read-Only Okta role scoped to All Authorization Servers and All Identity and Access Management Resources before generating the token.

    2 details in Everything

16. changelog Oct 20, 2026 · issue 114

    Nudge Security adds custom SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. domain tracking to surface SSO coverage and enable auto-approval of apps signed into via those domains.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Surface SSO coverage across your app inventory without requiring a fully configured IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. connected-app for every tool.
    📍In the Nudge Security console, go to Settings › Browser extension and add your custom SSO domains (e.g. sso.yourcompany.com). The browser extension will then detect logins through those domains and automatically fill in the SSO provider for each matching app in your inventory.
    • Adds custom SSO domain configuration under Settings > Browser extension, letting the browser extension recognise logins through those domains and auto-fill the SSO provider in the app inventory — no IdP connected-app required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Enables filtering the app inventory to show which apps use SSO, based on logins detected through configured custom SSO domains.
    • Enables auto-approval of apps that users sign into through configured custom SSO domains.

    3 details in Everything

17. Discover AI agents built on Notion Oct 20, 2026 · issue 115

    Nudge Security now discovers AI agents built on Notion, surfacing creator, components, and risk insights in the AI agents inventory.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Enable Notion AI agent discovery so every agent your team builds surfaces automatically in the AI agents inventory with creator, components, and risk insights.
    📍In Nudge Security, go to Identities › AI Agents tab, then enable the Notion AI agents connected app to start ingesting agents into your inventory.
18. Set custom SSO domains to track SSO coverage across your apps Oct 13, 2026 · issue 109

    Nudge Security lets you define custom SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. domains so the browser extension auto-fills SSO provider and enables SSO-based app filtering and auto-approval.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Add a custom SSO domain so the browser extension automatically identifies SSO-authenticated apps and populates the SSO provider field in your inventory — no identity-provider integration required.
    📍In the Nudge Security console, go to Settings › Browser extension and add your custom SSO domain (e.g. sso.example.com) to the custom SSO domains list.
    • Adds custom SSO domain configuration via Settings > Browser extension, letting the browser extension recognise logins through those domains and automatically fill in the SSO provider for each app — even without a connected identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems..⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Enables filtering the app inventory by SSO coverage once custom SSO domains are configured.
    • Enables auto-approval of apps that users sign into through a configured custom SSO domain.

    3 details in Everything

19. changelog Oct 5, 2026 · issue 095

    Nudge Security: Enables both AI agents via Automations > AI Agents in the Nudge Security console.

    └──▷ HOW TO FIND IT
    Activate the OAuth Grant Risk Analyst to automatically handle newly discovered high-risk OAuth grants without manual triage.
    📍In the Nudge Security console, go to Automations › AI Agents and enable the OAuth Grant Risk Analyst.
    Activate the Browser Extension Risk Analyst to continuously inspect employee-installed extensions and trigger disable/uninstall workflows for risky ones.
    📍In the Nudge Security console, go to Automations › AI Agents and enable the Browser Extension Risk Analyst.
20. changelog Oct 4, 2026 · issue 094

    Nudge Security launches AI agents for automated OAuth grant revocation and browser extension risk remediation at scale.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Enable the OAuth Grant Risk Analyst to automatically revoke high-risk OAuth grants as Nudge Security discovers them, reducing manual triage.
    📍In the Nudge Security console, go to Automations › AI Agents, select OAuth Grant Risk Analyst, configure your revocation and nudge preferences, and activate the agent.
    Deploy the Browser Extension Risk Analyst to continuously inspect employee-installed extensions and trigger disable/uninstall workflows for flagged ones.
    📍In the Nudge Security console, go to Automations › AI Agents, select Browser Extension Risk Analyst, set your risk thresholds and remediation actions, and activate the agent.
    • Adds the OAuth Grant Risk Analyst AI agent, accessible via Automations > AI Agents, which reviews new OAuth grants as they are discovered, revokes overly permissive or high-risk ones automatically, or nudges the OAuth grantor to remove access, with human-in-the-loophuman-in-the-loopHuman in the loop, involving a person in an otherwise automated workflow. The person can review, approve, correct or supply information before work continues. oversight.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds the Browser Extension Risk Analyst AI agent, accessible via Automations > AI Agents, which inspects browser extension artifacts and metadata to flag malicious, compromised, or misrepresented extensions and orchestrates disable and uninstall workflows.

    2 details in Everything

21. docs update Oct 1, 2026 · issue 091

    Nudge Security adds Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management., letting teams sign in with their Microsoft credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    ⤢
22. docs update Oct 1, 2026 · issue 091

    Nudge Security adds AI Risk Agents that autonomously review risky OAuth grants and browser extensions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    ⤢
    └──▷ HOW TO FIND IT
    Enable and configure the OAuth Analyst Agent to automatically triage risky OAuth grants without manual review.
    📍In the Nudge Security console, go to Risk Agents › OAuth Analyst Agent, enable the agent, and configure the action to take for each verdict (e.g., notify owner, revoke grant).
    Block flagged browser extensions across your organization by marking them as not permitted via the Browser Extension Risk Agent.
    📍In the Nudge Security console, go to Risk Agents › Browser Extension Risk Agent, review verdicts for analyzed extensions, and mark high-risk extensions as not permitted to trigger enforcement.
    • Introduces Risk Agents — AI agents that autonomously review risky OAuth grants and browser extensions, with configurable autonomy levels for acting on verdicts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds the OAuth Analyst Agent to automatically analyze OAuth grants, assign verdicts, and take configurable actions based on each verdict.
    • Adds a Browser Extension Risk Agent that analyzes browser extensions, returns per-extension verdicts, and enforces a not permitted status on flagged extensions.

    3 details in Everything

23. announced seen Sep 30, 2026 · issue 090

    Nudge Security adds Adaptive Risk Management: continuous, dynamic risk scoring across SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally./AI apps as usage evolves post-approval.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Promote a newly-deployed app to business-critical so Nudge immediately begins tracking additional findings like password reuse and weak authentication.
    📍In the Nudge Security console, open the application's detail page, locate the criticality tier selector, and set it to Business Critical — Nudge will automatically begin surfacing additional findings such as password reuse and weak authentication for that app.
    • Adds automatic app criticality tiering that classifies every application by breadth of use and data sensitivity using a proprietary AI model identifying up to 29 distinct data types.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds continuous dynamic risk scoring built from more than 30 factors — combining vendor external security posture with internal usage signals such as OAuth grant staleness, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. connections, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. vs. standalone credential use, and active AI agent integrations — updating automatically as conditions change rather than on a scheduled cadence.
    • Adds a risk-to-action panel that ranks specific control gaps (such as enabling SSO or closing stale OAuth grants) by their potential risk reduction, with direct remediation actions available from within the panel.
    • Adds adaptive monitoring that automatically begins surfacing additional findings — such as password reuse or weak authentication — when an app is marked business-critical.
    • Adds a risk dashboard showing residual risk trends and a heatmap of business criticality versus risk severity across an organization's SaaS and AI portfolio.

    5 details in Everything

24. Respond dynamically to evolving SaaS and AI risks with adaptive risk management Sep 30, 2026 · issue 096

    Nudge Security launches adaptive risk management with automatic app tiering, dynamic risk scores, and a new Risk dashboard.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Review concentrated SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. and AI risk exposure across your estate and monitor how scores shift over time as vendor conditions change.
    📍In the Nudge Security console, go to Dashboards › Risk to view app tiers, dynamic risk scores, and exposure trends across your SaaS and AI portfolio.
    • Adds a Dashboards > Risk view to quickly identify where exposure is concentrated across your SaaS and AI estate and track changes over time.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Introduces automatic app tiering that prioritizes apps based on organizational adoption and the sensitivity of up to 29 inferred data types, with no manual entry required.
    • Adds always-on dynamic app risk scores driven by 30 internal and external factors, updating automatically without vendor participation.
    • Adds adaptive controls that adjust security decisions automatically through native controls, policy-driven nudges, agent-powered workflows, guided remediation, and third-party security integrations.

    4 details in Everything

25. announced Sep 30, 2026 · issue 093

    Nudge Security: Adds the OAuth Grant Risk Analyst AI agent, which evaluates new OAuth grants by analyzing app, grantor, vendor posture, scopes, and org usage, then returns a plain-language verdict (permit, justify, or revoke) and can autonomously orchestrate revocation with full auditability.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Enable and authorize the OAuth Grant Risk Analyst agent to automatically review and act on new OAuth grants as they appear in your environment.
    📍In the Nudge Security console, go to Automations › Agents, select OAuth Grant Risk Analyst, and authorize it to permit, justify, or revoke grants on new integration discoveries.
    Enable the Browser Extension Risk Analyst agent to automatically disable and block malicious or compromised browser extensions across your fleet.
    📍In the Nudge Security console, go to Automations › Agents, select Browser Extension Risk Analyst, and authorize it to disable and block extensions rated malicious or compromised.
26. announced Sep 30, 2026 · issue 093

    Nudge Security launches adaptive risk management with automated app tiering, dynamic risk scoring, and AI-driven remediation workflows for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. and AI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Review the ranked control gaps driving risk for a specific app so you know what to remediate first before a vendor posture change escalates exposure.
    📍In the Nudge Security console, navigate to the app's detail page and select the Risk tab to see a ranked breakdown of control gaps and the factors contributing to its current dynamic risk score.
    Spot where risk and business impact overlap most across your SaaS and AI estate to prioritize deeper vendor reviews.
    📍In the Nudge Security console, open the risk dashboard and use the heatmap to identify apps where a critical or high business criticality tier intersects with elevated app risk scores.
    • Adds automated business criticality tiering for every discovered SaaS and AI app, assigning each a critical, high, medium, or low tier based on organizational spread and inferred data sensitivity.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Introduces a dynamic risk score per app calculated from more than 30 internal and external factors — including OAuth grants and scopes, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. connections, AI agent permissions, authentication methods, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. coverage, MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. enrollment, security posture findings, stale accounts, and vendor breach/supply-chain intelligence — drawn from a database of more than 250,000 SaaS and AI vendor security profiles.
    • Uses a proprietary AI model to infer up to 29 data types each app typically handles, mapping them to sensitivity tiers that customers can customize to align with internal data governance models.
    • Adds a risk dashboard heatmap pairing business criticality tiers with app risk scores to visualize risk concentration across the entire SaaS and AI estate.
    • Adds a Risk tab per app surfacing a ranked breakdown of control gaps and the factors driving each risk score, updated continuously as internal usage and vendor conditions change.

    +2 more show less

    • Introduces the OAuth Risk Analyst AI agent to trigger and conduct reviews of high-risk OAuth grants automatically as risk scores change.
    • Enables adaptive, policy-driven controls that automatically expand security posture monitoring, strengthen authentication requirements, or route remediation to app owners, administrators, or users as an app's criticality or risk score shifts.

    7 details in Everything

27. Address sprawling OAuth and browser extension risk with Nudge Security AI agents, now live Sep 30, 2026 · issue 091

    Nudge Security launches two AI agents — OAuth Grant Risk Analyst and Browser Extension Risk Analyst — for automated SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. remediation at scale.

    • New detectionAdds the OAuth Grant Risk Analyst AI agent, which reviews new OAuth grants as they are discovered, automatically revokes overly permissive or high-risk access, or nudges the OAuth grantor to remove it, with human-in-the-loophuman-in-the-loopHuman in the loop, involving a person in an otherwise automated workflow. The person can review, approve, correct or supply information before work continues. oversight.
    • New detectionAdds the Browser Extension Risk Analyst AI agent, which inspects artifacts and metadata behind installed browser extensions, flags malicious, compromised, or misrepresented extensions, and orchestrates disable and uninstall workflows.
    • AI agents are accessible via Automations > AI Agents in the Nudge Security console.

    3 details in Everything

28. changelog Sep 26, 2026 · issue 086

    Nudge Security adds batched password-manager nudges and in-browser device-code phishing warnings across 10 OAuth providers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Sweep up shadow password-manager use in one campaign — send every employee a single nudge that lists all their unapproved accounts at once.
    📍In the Nudge Security console, go to Accounts Inventory › Filter by Password Manager › select Everything not set as approved › multi-select results › Send nudge: Use approved password manager
    • Adds a batched Use approved password manager nudge: filter the accounts inventory by observed password manager (including not approved), multi-select, and each employee receives one consolidated nudge listing all their affected accounts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds an in-browser nudge that warns employees on OAuth device codeOAuth device codeAn OAuth 2.0 flow where a device with no browser displays a short code; the user authenticates on a separate device, and the original device polls for the resulting token. Useful for CLI tools and headless environments. authorization pages for Microsoft, Google, GitHub, GitLab, Salesforce, AWS, Docker, Zoom, Vercel, and OpenAI — every acknowledgment is recorded as a nudge response.

    2 details in Everything

29. changelog Sep 25, 2026 · issue 085
    └──▷ HOW TO FIND IT
    Remediate shadow password manager use in bulk — send each employee a single nudge listing every account where a non-approved password manager was observed at login.
    📍In the Nudge Security console, go to Accounts Inventory › Filter by Password Manager › select any manager not marked approved › multi-select matching accounts › Send Nudge › Use approved password manager.
30. changelog Sep 24, 2026 · issue 084

    Nudge Security: Adds a Use approved password manager bulk nudge: filter accounts inventory by password manager (including unapproved ones), multi-select, and send one batched nudge per employee listing all affected accounts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Sweep out unapproved password manager use across your org in one pass — employees get a single batched nudge instead of per-account noise.
    📍In the Nudge Security console, go to Accounts Inventory › Filter by Password Manager › select any unapproved or unrecognized password manager › multi-select all matching accounts › Send Nudge › Use approved password manager.
    Enable device code phishing protection so employees are warned the moment they land on an OAuth device codeOAuth device codeAn OAuth 2.0 flow where a device with no browser displays a short code; the user authenticates on a separate device, and the original device polls for the resulting token. Useful for CLI tools and headless environments. authorization page.
    📍In the Nudge Security console, go to the device code phishing detection settings, enable detection, and turn on the in-browser nudge to activate warnings across Microsoft, Google, GitHub, GitLab, Salesforce, AWS, Docker, Zoom, Vercel, and OpenAI device code pages.
31. Prevent device code phishing with a new in-browser nudge Sep 18, 2026 · issue 083

    Nudge Security adds an in-browser warning on OAuth device codeOAuth device codeAn OAuth 2.0 flow where a device with no browser displays a short code; the user authenticates on a separate device, and the original device polls for the resulting token. Useful for CLI tools and headless environments. pages to block device code phishing attacks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Enable the device code phishing nudge so employees are warned in real time whenever they land on an OAuth device code authorization page.
    📍In the Nudge Security console, go to Browser Extension Settings, locate the device code phishing detection option, and turn on the nudge.
    • Adds a new in-browser nudge that fires on every visit to an OAuth device code authorization page for Microsoft, Google, GitHub, GitLab, Salesforce, AWS, Docker, Zoom, Vercel, and OpenAI, warning employees never to enter a code provided by someone else.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Records every employee acknowledgment of the device code phishing nudge as a nudge response for audit and tracking.
    • Configure detection and enable the device code phishing nudge in Browser Extension Settings.

    3 details in Everything

32. Clean up unapproved password manager use with a single batched nudge Sep 18, 2026 · issue 079

    Nudge Security adds bulk Use approved password manager nudge — one batched message per employee across all flagged accounts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Identify and notify all employees using unapproved password managers in one pass, without generating per-account notification noise.
    📍In the Nudge Security console, go to Accounts Inventory › Filter by Password Manager (select all not marked as approved) › multi-select the resulting accounts › Send nudge › Use approved password manager.
33. changelog Sep 16, 2026 · issue 076

    Nudge Security: Adds Safari support for the Nudge Security browser extension, extending SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. and AI discovery, identity risk detection, and in-browser nudges to the default browser on company Macs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

34. changelog Sep 15, 2026 · issue 075

    Nudge Security browser extension now supports Safari, enabling SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally./AI visibility and enforcement on company Macs via Apple Business Manager and MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies..⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Deploy the Nudge Security Safari extension silently to all company Macs so employees get SaaS/AI monitoring and nudges without any manual install step.
    📍In Nudge Security, go to Settings › Browser Extension › Safari and follow the step-by-step deployment instructions to push the extension via Apple Business Manager and your MDM.
    • Adds Safari browser extension support with silent rollout through Apple Business Manager and MDM, expanding SaaS and AI visibility to the default browser on company Macs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Monitors SaaS and AI activity in real time via the Safari extension, including daily AI usage, logins, access patterns, and file uploads.
    • Detects identity and access risks through the Safari extension, covering weak or reused passwords, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. or MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. bypass attempts, shared credentials, and risky password manager use.
    • Delivers automated in-browser nudges on Safari to guide employees toward safer SaaS and AI behaviors, with customization available.
    • Adds Safari browser extension support with silent rollout through Apple Business Manager and MDM, expanding SaaS and AI visibility to the default browser on company Macs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    3 more in Everything

35. Deploy the Nudge Security browser extension on Safari for more complete SaaS & AI visibility and enforcement Sep 8, 2026 · issue 069

    Nudge Security browser extension now supports Safari, enabling SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. and AI visibility on every company Mac.

    └──▷ HOW TO FIND IT
    Roll out the Safari extension silently to all company Macs without requiring employee action, using your existing MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies..
    📍In Nudge Security settings, go to the deployment guide for Safari support, follow the step-by-step instructions, and configure silent rollout through Apple Business Manager and your MDM.
    • Supports deploying the Nudge Security browser extension on Safari via Apple Business Manager and MDM for silent rollout across company Macs, with step-by-step instructions available in Nudge Security settings.
    • Monitors SaaS and AI activity in real time through the Safari extension, including daily AI usage, logins, access patterns, and file uploads.
    • Detects identity and access risks via the Safari extension, including weak or reused passwords, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. or MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. bypass attempts, shared credentials, and risky password manager use.
    • Delivers automated, customizable in-browser nudges on Safari to guide employees toward safer SaaS and AI behaviors.

    4 details in Everything

36. changelog Aug 23, 2026 · issue 054

    Nudge Security now discovers AI agents built on Datadog and HubSpot via browser-based agent discovery.

    └──▷ HOW TO FIND IT
    Enable browser-based AI agent discovery to surface Datadog and HubSpot agents your team has built.
    📍In the Nudge Security browser extension, go to Settings and turn on browser-based agent discovery. Then navigate to Identities › AI Agents to review discovered agents or request research preview access.
    • Discovers AI agents built on Datadog and HubSpot as part of the AI agent discovery research preview, surfaced through the browser extension.
    • Access to the research preview can be requested from the AI Agents tab under Identities.

    2 details in Everything

37. Discover AI agents built on Datadog and HubSpot seen Aug 19, 2026 · issue 050

    Nudge Security now discovers AI agents built on Datadog and HubSpot via its browser extension, surfacing them in the AI agents inventory.

    └──▷ HOW TO FIND IT
    Enable browser-based AI agent discovery so Datadog- and HubSpot-built agents automatically appear in your inventory.
    📍In the Nudge Security browser extension, go to Settings and turn on browser-based agent discovery. Then navigate to Identities › AI Agents tab to view discovered agents and, if needed, request access to the research preview.
    • Discovers AI agents your team builds on Datadog and HubSpot through browser-based detection, flowing each agent into the AI agents inventory under Identities with creator, components, and risk insights.
    • Requires browser-based agent discovery to be enabled in browser extension settings; accessible as part of the AI agent discovery research preview.

    2 details in Everything

38. changelog Aug 16, 2026 · issue 047

    Nudge Security adds a risk dashboard, passkeypasskeyPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. adoption tracking, and in-browser AI data-loss nudges with optional enforcement.

    └──▷ HOW TO FIND IT
    Audit where your organization's passkeyspasskeysPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. are stored and whether they survive device loss — useful before rolling out a passwordless policy.
    📍In the Nudge Security console, go to Dashboards › Passkey usage. Toggle the storage-provider breakdown between number of passkeys and number of users, then click an individual employee row to verify their passkey is device-independent and that the user was verified at login.
    Prevent unredacted PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. or secrets from reaching AI tools across your org by enabling enforcement mode for in-browser nudges.
    📍In the Nudge Security console, go to Settings › In-browser nudges, enable sensitive data nudges, then turn on enforce redaction so employees cannot send AI conversations containing detected sensitive data without redacting it first.
    • New Dashboards > Risk dashboard (open beta) shows residual risk scores, a trend chart filterable to business-critical apps, a business-criticality-vs-residual-risk matrix with drill-down, and a ranked highest-risk-apps table built automatically from Nudge's per-app risk scoring.
    • New Dashboards > Passkey usage dashboard surfaces passkey adoption rate, top apps using passkeys, storage provider breakdown (toggle between passkey count and user count), device-loss survivability, and per-login verification status — populated by the browser extension.
    • Passkey usage is also surfaced per individual employee on their user details page.
    • New in-browser nudge (Settings > In-browser nudges) intercepts sensitive data (PII, secrets, financial info) detected in AI-tool conversations, shows the employee exactly what was found, and offers one-click redaction; optional enforcement mode blocks sending until sensitive data is redacted.

    4 details in Everything

39. See your risk posture at a glance with our new risk dashboard, now in open beta seen Aug 15, 2026 · issue 046

    Nudge Security adds a Risk dashboard (open beta) at Dashboards > Risk, surfacing residual risk scores and business criticality across your SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. inventory.

    └──▷ HOW TO FIND IT
    Review your SaaS risk posture and identify apps missing approval or carrying high residual risk.
    📍In the Nudge Security console, go to Dashboards › Risk to view tiles for apps assessed, business-critical apps, overall residual risk, and apps missing approval.
    • New Risk dashboard at Dashboards > Risk (open beta) displays tiles for apps assessed, business-critical apps, overall residual risk, and apps missing approval — built automatically from Nudge's business criticality tiers and residual risk scores.
    • Risk trend chart within the dashboard lets you filter historical risk over time to business-critical apps only.
    • Business criticality vs. residual risk matrix lets you click into any cell to see the exact apps behind that risk concentration.
    • Highest-risk apps ranking table surfaces the apps that need attention first, ordered by risk score.

    4 details in Everything

40. Nudge employees in the browser before they share sensitive data in AI conversations seen Aug 14, 2026 · issue 045

    Nudge Security adds in-browser sensitive data detection and optional redaction enforcement for AI conversations.

    └──▷ HOW TO FIND IT
    Enable sensitive data nudges with mandatory redaction so employees can never paste unredacted PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. or secrets into AI tools.
    📍In the console, go to Settings › In-browser nudges, enable sensitive data nudges, then turn on enforcement so redaction is required before sending.
    • Adds in-browser nudges via the browser extension that detect PII, secrets, or financial info typed into AI conversations and prompt employees to redact in one click or justify sending — configurable at Settings > In-browser nudges.
    • Adds optional enforcement mode (configurable at Settings > In-browser nudges) that makes redaction the only way to send, preventing unredacted sensitive data from leaving the browser.

    2 details in Everything

41. Track passkey adoption and storage in the new Passkey usage dashboard seen Aug 14, 2026 · issue 045

    Nudge Security adds a PasskeyPasskeyPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. usage dashboard to track org-wide passkey adoption, storage location, and per-user detail.

    └──▷ HOW TO FIND IT
    Audit where your org's passkeyspasskeysPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. are stored and whether they survive device loss — useful before a hardware refresh or incident review.
    📍In the Nudge Security console, go to Dashboards › Passkey usage. Use the provider breakdown toggle to switch between number of passkeys and number of users, then review the device-loss survivability and user-verification columns.
    • Adds the Dashboards > Passkey usage dashboard, showing org-wide passkey adoption rate, top apps used with passkeys, and per-provider storage breakdown with a toggle between number of passkeys and number of users.
    • Surfaces device-loss survivability and login-verification status for each passkey detected by the browser extension.
    • Adds per-employee passkey usage detail on each user's user details page.

    3 details in Everything

42. See your risk posture at a glance with our new risk dashboard, now in open beta Aug 13, 2026 · release notes

    Nudge Security adds a new Risk dashboard in open beta to visualize SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. risk posture and trends.

    └──▷ HOW TO FIND IT
    Navigate to the new dashboard to get an immediate overview of your organization's SaaS risk posture.
    📍In the console, go to Dashboards › Risk
    • Adds the Risk dashboard (Dashboards > Risk) showing tiles for apps assessed, business-critical apps, overall residual risk, and apps missing approval
    • Adds a trend chart for tracking risk over time that can be filtered down to just business-critical apps
    • Adds a matrix mapping business criticality against residual risk with clickable cells to see specific apps
    • Adds a table ranking the highest-risk apps in the inventory

    4 details in Everything

43. Track passkey adoption and storage in the new Passkey usage dashboard Aug 13, 2026 · release notes

    Nudge Security adds a PasskeyPasskeyPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. usage dashboard for tracking adoption and storage providers

    └──▷ HOW TO FIND IT
    Navigate to the new dashboard to view organization-wide passkey adoption metrics.
    📍In the console, go to Dashboards › Passkey usage
    • Adds Passkey usage dashboard under Dashboards to show passkey adoption rate, top apps, and storage provider distribution (toggleable between number of passkeyspasskeysPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. and number of users)
    • Shows individual employee passkey usage on their user details page
    • Displays device survivability and login verification status for passkeys in the new dashboard

    3 details in Everything

44. Nudge employees in the browser before they share sensitive data in AI conversations Aug 12, 2026 · release notes

    New In-browser nudges UI section with enforcement toggle for AI data redaction.

    • Adds Settings > In-browser nudges navigation path to enable sensitive data detection in browser extensions
    • Adds enforcement mode to the in-browser nudge configuration, making redaction mandatory before sending

    2 details in Everything

45. changelog seen Jul 31, 2026 · issue 031

    Nudge Security adds Amazon Quick Suite AI monitoring, agent discovery, and enforced SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. login restrictions.

    └──▷ HOW TO FIND IT
    Enforce SSO-only access to Nudge Security so all logins inherit your IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems.'s MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. and conditional access policies.
    📍In the console, go to Settings › Organization and enable login restrictions.
    Turn on AI conversation monitoring to flag sensitive data entered into Amazon Quick Suite chats.
    📍In the console, go to Browser Extension Settings and configure AI conversation monitoring detection.
    Enable browser-based agent discovery to populate your AI agents inventory with Amazon Quick agents your team builds.
    📍In the console, go to Browser Extension Settings and enable browser-based agent discovery, then view discovered agents under Identities › AI Agents.
    • Detects sensitive data (secrets, PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations., financial, health) shared in Amazon Quick Suite AI conversations via browser extension monitoring.
    • Discovers AI agents built on Amazon Quick and surfaces them in the AI agents inventory under Identities, with creator, components, and risk insights.
    • Enables organizations to enforce SSO-only login, disabling Google and Microsoft sign-in methods so all authentication routes through the configured IdP (e.g., Okta) with its MFA and conditional access controls.

    3 details in Everything

46. docs update seen Jul 30, 2026 · issue 030

    Nudge Security adds a ServiceNow integration to route security findings directly into ServiceNow tickets.

    • New ServiceNow integration lets you create a ticket from any security finding, map it to the appropriate ServiceNow table and fields, and keep both systems in sync.

    1 detail in Everything

47. Detect sensitive data shared in Amazon Quick Suite seen Jul 30, 2026 · issue 030

    Nudge Security AI conversation monitoring now detects sensitive data entered into Amazon Quick Suite chats.

    └──▷ HOW TO FIND IT
    Enable detection of sensitive data shared in Amazon Quick Suite for your organization.
    📍In the Nudge Security console, go to Browser Extension Settings and configure AI conversation monitoring to include Amazon Quick Suite.
    • Detects secrets, PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations., financial data, and health data shared in Amazon Quick Suite (Amazon's agentic AI platform) via AI conversation monitoring.

    1 detail in Everything

48. Discover AI agents built on Amazon Quick seen Jul 30, 2026 · issue 030

    Nudge Security now discovers AI agents built on Amazon Quick, surfacing creator, components, and risk insights in your AI agents inventory.

    └──▷ HOW TO FIND IT
    Enable browser-based agent discovery to start automatically surfacing Amazon Quick AI agents in your inventory.
    📍In the browser extension settings, turn on browser-based agent discovery. Then navigate to Identities › AI Agents tab in Nudge Security to view discovered Amazon Quick agents with their creator, components, and risk insights.
49. docs update seen Jul 29, 2026 · issue 029

    Nudge Security browser extension now supports Safari deployment for managed services.

50. Enforce SSO login for Nudge Security seen Jul 29, 2026 · issue 029

    Nudge Security now lets admins enforce SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.-only login, disabling Google/Microsoft sign-in and routing all auth through your IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems..

    └──▷ HOW TO FIND IT
    Enforce SSO-only login for your organization to ensure all users authenticate via your IdP and inherit its MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. and deprovisioning policies.
    📍In the console, go to Settings › Organization and enable login restrictions.
    • Adds SSO login enforcement that disables alternative sign-in methods (Sign in with Google, Sign in with Microsoft) org-wide, routing all logins through your configured IdP (e.g., Okta) to inherit its MFA, conditional access, and deprovisioning controls.

    1 detail in Everything

51. Discover AI agents built on Amazon Quick Jul 29, 2026 · release notes

    Adds Amazon Quick AI agent discovery via browser extension and Identities inventory

52. Detect sensitive data shared in Amazon Quick Suite Jul 29, 2026 · release notes

    Nudge Security adds AI conversation monitoring for sensitive data in Amazon Quick Suite.

    • Detects sensitive data (secrets, PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations., financial data, health data) shared via Amazon Quick chat
    • Adds detection capability for Amazon's agentic AI platform

    2 details in Everything

53. Enforce SSO login for Nudge Security Jul 28, 2026 · release notes

    Nudge Security adds Settings > Organization UI for enforcing SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. login restrictions

    • Enables organization-level enforcement of SSO login via a new login restrictions toggle in the Organization settings page

    1 detail in Everything

54. changelog seen Jul 23, 2026 · issue 023

    Nudge Security adds admin audit log export, inherent/residual risk scores, and automatic business criticality tiers for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. and AI apps.

    └──▷ HOW TO FIND IT
    Audit who revoked OAuth grants or changed roles over a given period — useful after a security incident or for compliance reviews.
    📍In the console, go to Settings › Audit event, filter events by date or action type, then click Export to download the log as a CSV.
    Identify your highest-risk AI vendors by combining residual risk score with recommended remediation actions.
    📍In the app inventory, filter by Risk Score = Critical or High, then open any app overview and click the Risk tab to view the factor breakdown and ranked recommended actions.
    Focus security posture reviews on apps that handle sensitive data by filtering the inventory by data type and criticality tier.
    📍In the app inventory, use the Data Types filter to select a sensitive category (e.g., financial data) and the Business Criticality filter set to Critical or High to surface the apps warranting immediate attention.
    • Exports a complete admin activity log as CSV, capturing OAuth revocations, role changes, field/setting updates, and app connect/disconnect events (Settings > Audit event).
    • Introduces inherent and residual risk scores (Low/Medium/High/Critical) for every SaaS and AI vendor, with transparent factor breakdowns covering vendor security posture, internal deployment risk, and compensating controls — now in open beta.
    • Continuously recalculates risk scores as conditions change (e.g., new MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server connections, vendor breach disclosures) and surfaces recommended actions ranked by projected residual risk reduction.
    • Automatically assigns business criticality tiers (Low/Medium/High/Critical) to every app based on inferred data types, enabling inventory filtering across 27 distinct data types with no manual research — now in open beta.
    • Allows customization of data sensitivity tiers per organization's data governance model, with business criticality recalculating automatically on change (Settings > Risk).

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Previously tagged data types are no longer in the main Data Types field; they now appear under Data Types (Legacy), separate from the new automatically populated Data Types field.
55. docs update seen Jul 23, 2026 · docs issue 004

    Nudge Security adds admin audit log export, inherent/residual risk scores, and automatic business criticality tiers for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. and AI apps.

    └──▷ HOW TO FIND IT
    Audit who revoked OAuth grants or changed roles over a given period — useful after a security incident or for compliance reviews.
    📍In the console, go to Settings › Audit event, filter events by date or action type, then click Export to download the log as a CSV.
    Identify your highest-risk AI vendors by combining residual risk score with recommended remediation actions.
    📍In the app inventory, filter by Risk Score = Critical or High, then open any app overview and click the Risk tab to view the factor breakdown and ranked recommended actions.
    Focus security posture reviews on apps that handle sensitive data by filtering the inventory by data type and criticality tier.
    📍In the app inventory, use the Data Types filter to select a sensitive category (e.g., financial data) and the Business Criticality filter set to Critical or High to surface the apps warranting immediate attention.
    • Exports a complete admin activity log as CSV, capturing OAuth revocations, role changes, field/setting updates, and app connect/disconnect events (Settings > Audit event).
    • Introduces inherent and residual risk scores (Low/Medium/High/Critical) for every SaaS and AI vendor, with transparent factor breakdowns covering vendor security posture, internal deployment risk, and compensating controls — now in open beta.
    • Continuously recalculates risk scores as conditions change (e.g., new MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server connections, vendor breach disclosures) and surfaces recommended actions ranked by projected residual risk reduction.
    • Automatically assigns business criticality tiers (Low/Medium/High/Critical) to every app based on inferred data types, enabling inventory filtering across 27 distinct data types with no manual research — now in open beta.
    • Allows customization of data sensitivity tiers per organization's data governance model, with business criticality recalculating automatically on change (Settings > Risk).

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Previously tagged data types are no longer in the main Data Types field; they now appear under Data Types (Legacy), separate from the new automatically populated Data Types field.
56. Export a complete log of admin activity seen Jul 22, 2026 · issue 022

    Nudge Security adds exportable admin audit log capturing OAuth revocations, role changes, and app connect/disconnect events.

    └──▷ HOW TO FIND IT
    Pull a CSV of all admin actions for a SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. audit or incident investigation.
    📍In the console, go to Settings › Audit event, review the log of administrative actions, then click Export to download as CSV.
57. Know your real vendor risk with inherent and residual risk scores, now in open beta seen Jul 22, 2026 · issue 022

    Nudge Security adds continuously updated inherent and residual risk scores for every SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. and AI vendor, now in open beta.

    └──▷ HOW TO FIND IT
    Review the full risk breakdown and recommended remediations for a specific app to decide what to fix next.
    📍In the Nudge Security console, open your App Inventory, select any SaaS or AI app, then click the Risk tab to view its inherent and residual risk scores, contributing risk factors, and recommended actions ranked by projected residual risk reduction.
    Filter your entire app inventory by risk level to quickly surface Critical or High residual-risk vendors across the organization.
    📍In the Nudge Security console, go to App Inventory and use the risk score filter to narrow the view to Critical or High residual risk apps.
    • Adds inherent and residual risk scores for every SaaS and AI vendor, mapped to Low/Medium/High/Critical levels and recalculated automatically as risk factors change.
    • Surfaces a transparent breakdown of risk drivers: vendor security posture, internal deployment/usage factors (e.g., critical downstream connections, AI agents), and compensating controls.
    • Provides recommended actions ranked by projected residual risk reduction so teams know what to remediate first.
    • Scores every discovered app on Day One without requiring vendor cooperation, covering the long tail of shadow IT and AI apps.
    • Continuously monitors for new risk signals — including new MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server connections and vendor breach disclosures — and updates scores in real time.

    +1 more show less

    • Integrates risk scores into the app inventory with filtering support and a dedicated Risk tab on each app overview.

    6 details in Everything

58. Prioritize your SaaS and AI inventory automatically with data types and business criticality tiers, now in open beta seen Jul 22, 2026 · issue 022

    Nudge Security adds automatic business criticality tiers and 27 data-type filters for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally./AI inventory, now in open beta.

    └──▷ HOW TO FIND IT
    Customize which data types are considered high-sensitivity to align automatic criticality tiers with your organization's governance model.
    📍In the console, go to Settings › Risk and adjust the data sensitivity tier assignments to match your organization's data governance model.
    • Automatically assigns each app a business criticality tier (Low, Medium, High, or Critical) based on inferred data types the vendor typically handles.
    • Filters SaaS and AI inventory across 27 distinct data types with no manual research required.
    • Enables customization of data sensitivity tiers to match your organization's data governance model via Settings > Risk.
    • Surfaces security posture findings selectively for Critical and High tier apps, reducing noise for lower-risk apps.
    • Displays business criticality tiers and data types within the app inventory view and individual app overviews.

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Previously tagged data types are moved to a Data Types (Legacy) field, separate from the new automatically populated Data Types field.
59. Prioritize your SaaS and AI inventory automatically with data types and business criticality tiers, now in open beta Jul 21, 2026 · release notes

    Nudge adds automatic business criticality tiers and 27 data types to SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally./AI inventory for prioritization (open beta)

    • Adds automatic assignment of business criticality tiers (Low, Medium, High, or Critical) to apps based on inferred data access using a proprietary model
    • Adds the ability to filter app inventory by 27 distinct data types without manual research
    • Adds configuration in Settings > Risk to tailor data sensitivity tiers which automatically recalculates business criticality
    • Adds filtering of security posture findings to surface them only for Critical and High tier apps
    • Adds display of business criticality tiers and data types in the app inventory and app overview views

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Previously tagged data types are now located under Data Types (Legacy) separate from the new automatically populated Data Types field
60. Know your real vendor risk with inherent and residual risk scores, now in open beta Jul 21, 2026 · release notes

    Nudge adds inherent and residual risk scores for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally./AI vendors with continuous monitoring

    • Introduces inherent and residual risk scores (Low/Medium/High/Critical) for every SaaS and AI vendor in the environment.
    • Adds continuous recalculation of risk scores as risk factors change, including new MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server connections and vendor breaches.
    • Ranks recommended actions by projected residual risk reduction to guide remediation priorities.
    • Enables viewing and filtering of risk scores within the app inventory or via the Risk tab on any app overview.

    4 details in Everything

61. Address sprawling OAuth and browser extension risk with new Nudge Security AI agents seen Jul 15, 2026 · issue 017

    Nudge Security adds two AI agents to automatically assess and remediate OAuth grant and browser extension risk.

    • New OAuth Grant Risk Analyst AI agent reviews newly discovered OAuth grants, flags overly permissive or high-risk ones, and resolves them by automatically revoking access or nudging the grantor — with human-in-the-loophuman-in-the-loopHuman in the loop, involving a person in an otherwise automated workflow. The person can review, approve, correct or supply information before work continues. oversight.
    • New Browser Extension Risk Analyst AI agent inspects installed browser extension artifacts and metadata, flags malicious, compromised, or misrepresented extensions, and orchestrates disable and uninstall workflows.

    2 details in Everything

62. Create Jira tickets from your Nudge Security findings seen Jul 13, 2026 · issue 014

    Nudge Security adds native Jira integration to create, map, and auto-close tickets directly from security findings.

    └──▷ HOW TO FIND IT
    Connect Jira to Nudge Security so your team can route findings into their existing ticketing workflow.
    📍In the Nudge Security console, go to Settings › Ticketing and connect your Jira instance.
    • New Jira integration creates tickets directly from any finding, pre-filled with finding details and fix recommendations.
    • Supports mapping tickets to Jira project, work type, priority, assignee, and reporter during creation.
    • Maintains a linked audit trail between Nudge Security findings and their associated Jira issues.

    3 details in Everything

63. Discover AI agents from the browser seen Jul 13, 2026 · issue 014

    Nudge Security can now discover AI agents built by employees on platforms without a public API, via its browser extension.

    └──▷ HOW TO FIND IT
    Enable browser-based agent discovery to start inventorying AI agents your employees are building across unsupported platforms.
    📍In the Nudge Security console, go to your browser extension settings and toggle on browser-based agent discovery. (Requires the Nudge Security browser extension to be deployed and enrollment in the AI agent discovery research preview.)
    Request access to the AI agent discovery research preview if not yet enrolled.
    📍In the product navigation, go to Identities › AI Agents tab and select the option to request research preview access.
    • Discovers AI agents employees create across platforms lacking public APIs — including Cursor automations, Retool, Zapier Agents, ChatGPT workspace agents, OpenAI Agents Workflows, Atlassian Rovo (Jira, Bitbucket), Zoom AI Workflows, and HyperAgent — via the browser extension.
    • Surfaces discovered agents in the AI agents inventory under Identities, showing creator, components, and risk insights for each agent.

    2 details in Everything

64. Discover and revoke risky external file shares in Google Drive seen Jul 13, 2026 · issue 014

    Nudge Security adds Google Drive external file share discovery and revocation in open beta.

    └──▷ HOW TO FIND IT
    Review all externally shared files and Shared Drives across your Google Workspace tenant to identify and revoke risky shares.
    📍In the Nudge Security console, go to Inventory › External File Shares. Connect the Google Drive connected app (one-time setup with in-product instructions), then use domain filters to prioritize cleanup by external company and take per-item revocation actions.
    • New Google Drive integration surfaces every externally shared file, folder, and Shared Drive across a Google Workspace tenant in a single view.
    • Enables filtering external shares by domain to see everything shared with a specific external company for targeted cleanup.
    • Per-item access controls let administrators tighten or revoke external share permissions with a confirmation step that details scope before changes are applied.

    3 details in Everything

65. Security posture findings now mapped to compliance frameworks seen Jul 13, 2026 · issue 014

    Nudge Security maps security posture findings to SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria., NIST CSFNIST CSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. 2.0, ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 27001, HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against., and OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 Agentic AI Security frameworks.

    └──▷ HOW TO FIND IT
    Quickly scope your SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. 2 audit prep by filtering all posture findings to only those that violate SOC 2 controls.
    📍In the console, go to Security Posture › Findings, then use the compliance framework filter to select SOC 2. Review each listed finding and follow guided remediation from the detail panel.
    Generate an audit-ready export covering all compliance frameworks for submission to an auditor or vCISO.
    📍In the console, go to Security Posture › Findings, apply any desired framework filters, then select Export to download a report with compliance framework and control columns included.
    • Maps security posture findings to five compliance frameworks: SOC 2, NIST CSFCSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. 2.0, ISO 27001, HIPAA, and OWASP Top 10 Agentic AI Security.
    • Adds compliance framework filtering on the Security Posture Findings view to surface every control violation across a SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. estate at a glance.
    • Enables drill-down into any finding to view the specific controls it violates alongside guided remediation in the same panel.
    • Exports audit-ready reports with compliance framework and control columns included.

    4 details in Everything

66. Strengthen your SaaS security posture with our latest connected apps for Automox, BeyondTrust, and Ping Identity seen Jul 13, 2026 · issue 014

    Nudge Security adds connected app integrations for Automox, BeyondTrust, and Ping Identity

    • New Automox connected app enables centralized visibility into accounts, activity, and misconfigurations for the endpoint management platform.
    • New BeyondTrust connected app brings privileged access managementprivileged access managementBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. activity and account data into the Nudge Security SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. inventory.
    • New Ping Identity connected app surfaces identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. accounts and misconfigurations alongside the rest of your SaaS stack.

    3 details in Everything

67. Strengthen your SaaS security posture with our latest connected apps for Clockify, Acronis, and OneLogin seen Jul 13, 2026 · issue 014

    Nudge Security adds connected app integrations for Clockify, Acronis, and OneLogin.

    • Adds connected app integration for Clockify, enabling centralized visibility into accounts, activity, and misconfigurations.
    • Adds connected app integration for Acronis, enabling centralized visibility into accounts, activity, and misconfigurations.
    • Adds connected app integration for OneLogin, enabling centralized visibility into accounts, activity, and misconfigurations.

    3 details in Everything

68. Strengthen your SaaS security posture with our latest connected apps for GitLab, Informatica, and Logz.io seen Jul 13, 2026 · issue 014

    Nudge Security adds connected app integrations for GitLab, Informatica, and Logz.io

    └──▷ HOW TO FIND IT
    Enable the GitLab connected app in Nudge Security to surface account misconfigurations and activity across your GitLab organization.
    📍In the Nudge Security console, go to Integrations, search for GitLab, and follow the connection prompts to authorize and link your GitLab organization.
    • Adds connected app integration for GitLab, enabling centralized visibility into accounts, activity, and misconfigurations.
    • Adds connected app integration for Informatica, extending SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. security posture coverage to the data integration platform.
    • Adds connected app integration for Logz.io, bringing log management and observability tooling into unified SaaS visibility.

    3 details in Everything

69. Strengthen your SaaS security posture with our latest connected apps for Greenhouse, Codacy, MuleSoft, and Oracle Cloud seen Jul 13, 2026 · issue 014

    Nudge Security adds connected apps for Greenhouse, Codacy, MuleSoft, and Oracle Cloud.

    • Adds connected app integration for Greenhouse to centralize visibility into accounts, activity, and misconfigurations.
    • Adds connected app integration for Codacy to centralize visibility into accounts, activity, and misconfigurations.
    • Adds connected app integration for MuleSoft to centralize visibility into accounts, activity, and misconfigurations.
    • Adds connected app integration for Oracle Cloud to centralize visibility into accounts, activity, and misconfigurations.

    4 details in Everything

70. Strengthen your SaaS security posture with our latest connected apps for LastPass, BambooHR, and Trello seen Jul 13, 2026 · issue 014

    Nudge Security adds connected app integrations for LastPass, BambooHR, and Trello.

    • Adds connected app integration for LastPass, enabling centralized visibility into accounts, activity, and misconfigurations.
    • Adds connected app integration for BambooHR, enabling centralized visibility into accounts, activity, and misconfigurations.
    • Adds connected app integration for Trello, enabling centralized visibility into accounts, activity, and misconfigurations.

    3 details in Everything

71. Strengthen your SaaS security posture with our latest connected apps for SentinelOne, Druva, GitGuardian, Kong, and Mural seen Jul 13, 2026 · issue 014

    Nudge Security adds connected app integrations for SentinelOne, Druva, GitGuardian, Kong, and Mural.

    • New SentinelOne connected app integration for centralized visibility into accounts, activity, and misconfigurations.
    • New Druva connected app integration for centralized visibility into accounts, activity, and misconfigurations.
    • New GitGuardian connected app integration for centralized visibility into accounts, activity, and misconfigurations.
    • New Kong connected app integration for centralized visibility into accounts, activity, and misconfigurations.
    • New Mural connected app integration for centralized visibility into accounts, activity, and misconfigurations.

    5 details in Everything

72. Discover and revoke risky external file shares in Google Drive Jul 8, 2026 · release notes

    Nudge Security adds Google Drive external share discovery and revocation via Inventory > External File Shares.

    └──▷ HOW TO FIND IT
    Navigate the new UI view to identify risky external shares in Google Workspace.
    📍Inventory › External File Shares
    • Adds Inventory > External File Shares view to spot orphaned Shared Drives, shares to personal email, files owned by deactivated employees, and shares with no activity in 90 days
    • Adds per-item actions to tighten or revoke access with scope confirmation for external file shares
    • Adds filtering capability to prioritize cleanup by domain or specific external company for external file shares

    3 details in Everything

73. Security posture findings now mapped to compliance frameworks Jun 25, 2026 · release notes

    Security posture findings mapped to SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria., NIST CSFNIST CSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. 2.0, ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 27001, HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against., and OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 Agentic AI Security frameworks.

    • Adds filtering of security posture findings by specific compliance framework
    • Enables exporting audit-ready reports with compliance framework and control columns
    • Shows specific controls violated within the finding detail panel

    3 details in Everything

74. Create Jira tickets from your Nudge Security findings Jun 24, 2026 · release notes

    Nudge Security adds Jira integration with auto-create and auto-close capabilities accessible via Settings > Ticketing.

    • Admins can connect Jira by navigating to Settings > Ticketing to enable ticket creation from findings
    • Findings can now create pre-filled Jira tickets mapped to project, work type, priority, assignee, and reporter

    2 details in Everything

75. Strengthen your SaaS security posture with our latest connected apps for Automox, BeyondTrust, and Ping Identity Jun 19, 2026 · release notes

    Nudge Security adds connected apps for Automox, BeyondTrust, and Ping Identity

    • Adds Automox as a supported integrated application for centralized visibility

    1 detail in Everything

76. Strengthen your SaaS security posture with our latest connected apps for GitLab, Informatica, and Logz.io Jun 17, 2026 · release notes

    Nudge Security adds connected apps for GitLab, Informatica, and Logz.io to centralize SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. visibility.

    • Adds support for a new GitLab connected app to Nudge Security integrations.
    • Adds support for a new Informatica connected app to Nudge Security integrations.
    • Adds support for a new Logz.io connected app to Nudge Security integrations.

    3 details in Everything

77. Strengthen your SaaS security posture with our latest connected apps for Greenhouse, Codacy, MuleSoft, and Oracle Cloud Jun 5, 2026 · release notes

    Nudge Security adds connected apps for Greenhouse, Codacy, MuleSoft, and Oracle Cloud

    • Adds Greenhouse as a new connected app integration
    • Adds Codacy as a new connected app integration
    • Adds MuleSoft as a new connected app integration
    • Adds Oracle Cloud as a new connected app integration

    4 details in Everything

78. Strengthen your SaaS security posture with our latest connected apps for SentinelOne, Druva, GitGuardian, Kong, and Mural May 29, 2026 · release notes

    Nudge adds new connected apps for SentinelOne, Druva, GitGuardian, Kong, and Mural

    • Adds support for the SentinelOne connected app to centralize visibility into accounts and misconfigurations.
    • Adds support for the Druva connected app to centralize visibility into accounts and misconfigurations.
    • Adds support for the GitGuardian connected app to centralize visibility into accounts and misconfigurations.
    • Adds support for the Kong connected app to centralize visibility into accounts and misconfigurations.
    • Adds support for the Mural connected app to centralize visibility into accounts and misconfigurations.

    5 details in Everything

79. Strengthen your SaaS security posture with our latest connected apps for Clockify, Acronis, and OneLogin May 21, 2026 · release notes

    Nudge Security adds support for Clockify, Acronis, and OneLogin connected apps to centralize SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. visibility.

    • Adds Clockify as a supported connected app integration
    • Adds Acronis as a supported connected app integration
    • Adds OneLogin as a supported connected app integration

    3 details in Everything

80. Discover AI agents from the browser May 19, 2026 · release notes

    Nudge Security extends its AI agent discovery capabilities to browser-built agents on platforms lacking public APIs.

    • Browser extension inventories agents from Cursor, Retool, Zapier, ChatGPT, OpenAI, Atlassian Rovo, Zoom, and HyperAgent.

    1 detail in Everything

81. Strengthen your SaaS security posture with our latest connected apps for LastPass, BambooHR, and Trello May 15, 2026 · release notes

    Adds new connected apps for LastPass, BambooHR, and Trello to Nudge Security

    • Adds LastPass as a supported connected app for centralizing visibility into accounts, activity, and misconfigurations
    • Adds BambooHR as a supported connected app for centralizing visibility into accounts, activity, and misconfigurations
    • Adds Trello as a supported connected app for centralizing visibility into accounts, activity, and misconfigurations

    3 details in Everything

82. Strengthen your SaaS security posture with our latest connected apps for Alteryx, Celonis, Confluent, Typeform, Lattice, JFrog, and Rippling May 12, 2026 · release notes

    Nudge Security adds integrated connected apps for Alteryx, Celonis, Confluent, Typeform, Lattice, JFrog, and Rippling

    • Adds a new Alteryx connected app to centralize visibility into accounts, activity, and misconfigurations.
    • Adds a new Celonis connected app to centralize visibility into accounts, activity, and misconfigurations.
    • Adds a new Confluent connected app to centralize visibility into accounts, activity, and misconfigurations.
    • Adds a new Typeform connected app to centralize visibility into accounts, activity, and misconfigurations.
    • Adds a new Lattice connected app to centralize visibility into accounts, activity, and misconfigurations.

    +2 more show less

    • Adds a new JFrog connected app to centralize visibility into accounts, activity, and misconfigurations.
    • Adds a new Rippling connected app to centralize visibility into accounts, activity, and misconfigurations.

    7 details in Everything

83. Strengthen your SaaS security posture with our latest connected apps for Domo, Envoy, Productboard, Help Scout, and Contentful Apr 30, 2026 · release notes

    Nudge Security adds connected apps for Domo, Envoy, Productboard, Help Scout, and Contentful

    • Adds a new connected app integration for Domo.
    • Adds a new connected app integration for Envoy.
    • Adds a new connected app integration for Productboard.
    • Adds a new connected app integration for Help Scout.
    • Adds a new connected app integration for Contentful.

    5 details in Everything

84. Global search now shows AI agents, browser extensions, Findings, and more Apr 30, 2026 · release notes

    Expanded global search capabilities add coverage for AI agents and browser extensions.

85. Connected app experience updates Apr 28, 2026 · release notes

    Redesigned connected app experience with category/capability filtering and alphabetical organization.

    • Adds ability to filter the connected app directory by category and capability
    • Organizes connected apps alphabetically for easier scanning

    2 details in Everything

86. Strengthen your SaaS security posture with our latest connected apps for Metabase, Apollo, YouTrack, Twingate, Pipedrive, Expensify, and Rollbar Apr 28, 2026 · release notes

    Nudge Security adds connected apps for Metabase, Apollo, YouTrack, Twingate, Pipedrive, Expensify, and Rollbar

    • Adds native connection support for Metabase, Apollo, YouTrack, Twingate, Pipedrive, Expensify, and Rollbar to centralize SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. visibility.
    • Allows users to connect these new applications via the platform's integrations page.

    2 details in Everything

87. Strengthen your SaaS security posture with our latest connected apps for Front, Rootly, 7shifts, Site24x7, Shortcut, and Teamwork Apr 14, 2026 · release notes

    Adds connected apps for Front, Rootly, 7shifts, Site24x7, Shortcut, and Teamwork to Nudge Security

    • Front connected app added
    • Rootly connected app added
    • 7shifts connected app added
    • Site24x7 connected app added
    • Shortcut connected app added

    +1 more show less

    • Teamwork connected app added

    6 details in Everything

88. Get visibility into AI agents built on Claude and LangSmith Fleet Apr 10, 2026 · release notes

    Adds visibility into AI agents by connecting to Claude managed agents and LangSmith Fleet.

    • Adds discovery of AI agents built on Claude and LangSmith Fleet, allowing connection via Settings > Connected Apps to see builder, connections, and authorizations.

    1 detail in Everything

89. Strengthen your SaaS security posture with our latest connected apps for Make, Harness, Deel, Sisense, and Temporal Cloud Apr 1, 2026 · release notes

    Nudge Security adds connected apps for Deel, Sisense, Temporal Cloud, Make, and Harness

    • Adds connected app support for Deel to centralize visibility into accounts, activity, and misconfigurations.
    • Adds connected app support for Sisense to centralize visibility into accounts, activity, and misconfigurations.
    • Adds connected app support for Temporal Cloud to centralize visibility into accounts, activity, and misconfigurations.
    • Adds connected app support for Make to centralize visibility into accounts, activity, and misconfigurations.
    • Adds connected app support for Harness to centralize visibility into accounts, activity, and misconfigurations.

    5 details in Everything

90. Discover and assess the risk of AI agents with Nudge Security Mar 24, 2026 · release notes

    Research preview adds AI agent discovery and risk assessment across connected apps like ChatGPT, Copilot, and Gemini

    • Adds ability to discover AI agents across connected apps including ChatGPT, Microsoft Copilot, Gemini, Salesforce Agentforce, ServiceNow, n8n, Tines, Abacus, and Workato
    • Adds UI fields showing who built an agent, what it's connected to, and what it's authorized to do
    • Adds capability to assign a technical contact to hold accountability for each agent
    • Surfaces agentic risks such as publicly accessible agents, hardcoded credentials, unauthenticated MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. connections, and connections to high-risk apps
    • Enables engaging creators directly by nudging the responsible contact to confirm purpose, justify use, and remediate risks

    5 details in Everything

91. Strengthen your SaaS security posture with our latest connected apps for Gong, Zoho, Basecamp, Clickhouse, and Airbyte Mar 17, 2026 · release notes

    New connected apps added for Airbyte, Basecamp, Zoho, ClickHouse, and Gong to Nudge Security.

    • Adds support for the Airbyte connected app
    • Adds support for the Basecamp connected app
    • Adds support for the Zoho connected app
    • Adds support for the ClickHouse connected app
    • Adds support for the Gong connected app

    5 details in Everything

92. Strengthen your SaaS security posture with our latest connected apps for Docusign, YuJa, Brex, Bitwarden, and Snyk and more. Mar 3, 2026 · release notes

    Nudge Security adds connected apps for Docusign, YuJa, Brex, Bitwarden, Snyk, and Grammarly.

    • Adds support for the Docusign connected app to centralize visibility into accounts and misconfigurations.
    • Adds support for the YuJa connected app to centralize visibility into accounts and misconfigurations.
    • Adds support for the Brex connected app to centralize visibility into accounts and misconfigurations.
    • Adds support for the Bitwarden connected app to centralize visibility into accounts and misconfigurations.
    • Adds support for the Snyk connected app to centralize visibility into accounts and misconfigurations.

    +1 more show less

    • Adds support for the Grammarly connected app to centralize visibility into accounts and misconfigurations.

    6 details in Everything

93. Find what you need faster with our redesigned product navigation menu Feb 24, 2026 · release notes

    Nudge Security unveils a redesigned product navigation menu to improve feature discoverability in the dashboard.

    • Adds a reorganized product navigation menu on the Nudge Security dashboard that groups related features more intuitively.

    1 detail in Everything

94. See how data flows from source SaaS apps to AI conversation tools Feb 19, 2026 · release notes

    Adds 'See how data flows from source SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. apps to AI conversation tools' card in the AI Usage Dashboard

    • Adds an interactive chart in the AI Usage Dashboard that maps file uploads and copy/paste actions from SaaS applications to AI conversation tools.
    • Allows ranking AI data flows by data volume, file count, or user count to identify which AI tools consume the most corporate data.
    • Enables spotting high-volume data movements and potential risks in the new AI Usage Dashboard card.

    3 details in Everything

95. Strengthen your SaaS security posture with our latest connected apps for Airtable, Drata, Ramp, KnowBe4, and more. Feb 17, 2026 · release notes

    Nudge adds connected apps for Airtable, Drata, Ramp, KnowBe4, Lucidchart, Retool, Workato, and Mailgun

96. Strengthen your SaaS security posture with our latest connected apps for Zendesk, Crowdstrike, Tines, monday.com, and more. Feb 10, 2026 · release notes

    Nudge Security adds connected apps for Zendesk, Crowdstrike, Tines, monday.com and others

97. Gain visibility into risky MCP connections with new OAuth risk insight Feb 5, 2026 · release notes

    Nudge Security extends OAuth risk insights to cover remote Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.) connections.

98. Strengthen your SaaS security posture with our latest connected apps for Anthropic, Cursor, n8n, Databricks, and more. Feb 3, 2026 · release notes

    New connected apps for Linear, Sumo Logic, MongoDB, Anthropic, Miro, n8n, Cursor, Postman, Smartsheet, Databricks, and Tableau

99. Strengthen your SaaS security posture with our latest connected apps Jan 27, 2026 · release notes

    Nudge adds 8 new connected apps for centralized SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. visibility

    • Adds Linode as a supported connected app integration
    • Adds Scaleway as a supported connected app integration
    • Adds Netlify as a supported connected app integration
    • Adds New Relic as a supported connected app integration
    • Adds LaunchDarkly as a supported connected app integration

    +3 more show less

    • Adds Dynatrace as a supported connected app integration
    • Adds Render as a supported connected app integration
    • Adds PandaDoc as a supported connected app integration

    8 details in Everything

100. Configure separate destinations for nudges and notifications Jan 26, 2026 · release notes

     Adds ability to configure separate destinations for employee nudges and admin notifications.

101. Get alerted when sensitive data is shared in AI conversations with new notification Jan 26, 2026 · release notes

     New notification capability alerts teams when sensitive data is shared in AI conversations

     • Adds the ability to create notifications that alert your team when sensitive data, like PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations., secrets, or financial info, is shared in AI conversations.
     • Allows configuring alerts based on the type of data detected or at the app level.
     • Enables routing these sensitive data alerts to Slack, Microsoft Teams, email, or a webhook.

     3 details in Everything

102. Strengthen your SaaS security posture with our latest connected apps Jan 13, 2026 · release notes

     Adds Vultr, Tailscale, Grafana, Buildkite, and Bitrise as new connected apps for centralized SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. visibility.

     • Adds support for the Vultr connected app
     • Adds support for the Tailscale connected app
     • Adds support for the Grafana connected app
     • Adds support for the Buildkite connected app
     • Adds support for the Bitrise connected app

     5 details in Everything

103. Connect the JumpCloud connected app to see SSO activity in Nudge Security Jan 12, 2026 · release notes

     New JumpCloud integration adds SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. activity visibility.

     • Connects to JumpCloud for automatic discovery of apps and accounts.

     1 detail in Everything

104. Monitor Workday for misconfigurations and identity and access issues with Nudge Security Jan 8, 2026 · release notes

     Nudge Security adds Workday as a new connected app for monitoring misconfigurations and identity risks.

     • Adds Workday as a new connected application to monitor user and identity risks, including missing MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone..

     1 detail in Everything

105. Monitor NetSuite for misconfigurations and identity and access vulnerabilities with Nudge Security Jan 8, 2026 · release notes

     Adds NetSuite connected app for monitoring misconfigurations and identity/access vulnerabilities

106. Default table sorting now shows high-priority items first Dec 29, 2025 · release notes

     Default table sorting now prioritizes high-risk and spend items at the top for faster triage.

     • Updates default sort order so clicking risk, spend, or MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. status columns places highest values first.

     1 detail in Everything

107. Inventory browser extensions installed across your organization Dec 18, 2025 · release notes

     Nudge adds Browser Extensions tab to App-to-App Integrations for organizational inventory of browser extensions.

     • Adds the Browser Extensions tab within the App-to-App Integrations section of the product to view detailed insights into extension landscape at user and extension level.
     • Enables identification of high-risk and outdated browser extensions across supported browsers.

     2 details in Everything

108. Detect sensitive data shared in AI chatbot conversations Dec 8, 2025 · release notes

     Nudge Security adds monitoring for sensitive data shared in AI chatbot conversations (ChatGPT, Claude, Gemini, etc.)

     • Adds detect-sensitive-data-shared-in-ai-chatbot-conversations capability to monitor secrets, PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations., and financial/healthcare data in AI chatbot tools.
     • Exposes copy/paste activity source detection for AI conversation monitoring.
     • Provides file upload metadata (name, source, size, type) capture for AI conversations.
     • Adds Browser Extension Settings interface for configuring detection settings and data storage preferences.

     4 details in Everything

109. Deploy the Nudge Security browser extension on Firefox for more complete SaaS & AI visibility and enforcement Nov 25, 2025 · release notes

     Nudge Security extends browser extension support to Firefox for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. & AI visibility.

     • Enables real-time monitoring of daily AI usage and access patterns in Firefox

     1 detail in Everything

110. New improvements for the Nudge Security browser extension Nov 13, 2025 · release notes

     Nudge Security adds deployment coverage matrix and improved MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. docs for its browser extension.

     • Adds a deployment coverage matrix that displays total unique users detected by the extension, broken down by operating system and browser type.
     • Updates detection event descriptions with direct links to areas of the product where extension-related data can be found.
     • Improves MDM deployment instructions with troubleshooting documentation linking to the help center.

     3 details in Everything

111. Create and manage custom fields directly in the UI Nov 6, 2025 · release notes

     Adds UI-based creation and management of custom fields for Apps and Accounts.

     • Admins can now create and manage custom fields for Apps and Accounts directly in the UI without needing to use the API
     • Adds a new Fields settings navigation path for organizing organization-specific details like security review status or risk scores

     2 details in Everything

112. Deploy the Nudge Security browser extension on AI browsers like ChatGPT Atlas, Dia, and Perplexity's Comet to expand your SaaS and AI visibility and enforcement. Nov 4, 2025 · release notes

     Nudge Security adds deployment support for ChatGPT Atlas, Dia, and Perplexity's Comet AI browsers.

113. Monitor Clickup for user, account, and instance details in Nudge Security Oct 28, 2025 · release notes

     Adds ClickUp as a connected app integration for monitoring user and identity risks.

     • Adds ClickUp as a new connected app to monitor user, account, and instance details in Nudge Security.

     1 detail in Everything

114. Reorder table columns Oct 20, 2025 · release notes

     Adds UI support for reordering table columns to prioritize key information.

115. New browser nudge delivers your AI acceptable use policy to help drive safe, compliant AI use in real-time. Oct 16, 2025 · release notes

     New browser nudge delivers your AI acceptable use policy in real-time when employees sign up for or log in to AI tools.

     • Adds browser nudge capability to deliver your AI Acceptable Use Policy (AUP) directly in the browser during employee signup or login events.

     1 detail in Everything

116. Gain visibility into AI adoption and usage trends with daily active user monitoring across AI chatbot tools Oct 8, 2025 · release notes

     Nudge Security adds a daily active user metric to its AI Usage dashboard to help organizations monitor employee adoption of AI chatbot tools.

117. Nudge Security now auto-approves apps when a JumpCloud or OneLogin SSO login is detected Oct 8, 2025 · release notes

     Nudge Security browser extension auto-approves apps on JumpCloud or OneLogin SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. login

     • Adds automatic app approval when a JumpCloud or OneLogin SSO login is detected

     1 detail in Everything

118. Deploy the Nudge Security browser extension on Brave to expand your real-time SaaS and genAI visibility and enforcement. Oct 6, 2025 · release notes

     Nudge Security adds native browser extension deployment support for Brave

119. Monitor Fivetran for user, account, and instance details in Nudge Security Oct 1, 2025 · release notes

     Nudge Security adds Fivetran connected app for monitoring user, account, and instance details.

120. Add Nudge Security to your Slack channels using Slack commands Sep 29, 2025 · release notes

     Nudge Security adds support for adding the app via /invite @Nudge Security or @Nudge mentions in Slack channels

     └──▷ HOW TO FIND IT
     Add Nudge Security to a specific channel without navigating settings.
     📍@Nudge Security
     • Enables inviting the Nudge Security app to any Slack channel using the @Nudge Security mention

     1 detail in Everything

121. Strengthen your AI governance and enforcement with Nudge Security’s AI Acceptable Use Policy playbook. Sep 24, 2025 · release notes

     Nudge Security adds in-product AI policy management, Slack/Teams delivery, signup nudges, and usage tracking.

     • Enables IT admins to create, update, and manage AI policies directly in the product
     • Adds the ability to deliver policies over Slack or Microsoft Teams
     • Allows setup of automatic policy nudges sent to employees upon first signup for an AI tool
     • Provides tracking of AUP acceptance across the workforce via the AI usage dashboard, Users table, and user details page

     4 details in Everything

122. Export your Nudge history to CSV Sep 23, 2025 · release notes

     Adds CSV export for Nudge history to support audit and trend analysis.

     • Exports Nudge history to CSV format
     • Enables export of Nudge history to track trends and support audits

     2 details in Everything

123. Get clearer visibility into user activity with OS and browser details Sep 23, 2025 · release notes

     Nudge Security extension now surfaces OS and browser type in user activity events and at the individual user level.

     • Browser extension now displays operating system and browser type for events such as key additions, file uploads, password resets, and file sharing.
     • OS and browser context is available at the individual user level for all users connected to the browser extension.

     2 details in Everything

124. Address risky behavior with real-time notifications for activity in not-permitted apps Sep 17, 2025 · release notes

     Adds real-time notification rules for activity in not-permitted apps via browser extension

     • Adds ability to configure notification rules based on app approval status
     • Adds real-time alerts when employees interact with not permitted apps (e.g., file uploads or OAuth grants) detected from the browser extension

     2 details in Everything

125. Monitor ServiceNow for misconfigurations, identity and access vulnerabilities, and data security risks with Nudge Security Sep 16, 2025 · release notes

     Adds ServiceNow integration to monitor misconfigurations and access risks

126. Evaluate AI and SaaS tools with Nudge Security’s new AI data training policy summary feature Sep 10, 2025 · release notes

     New AI data training policy summary card on app details page

127. Deliver nudges and receive notification on Microsoft Teams with new integration Sep 3, 2025 · release notes

     Nudge Security adds Microsoft Teams integration for delivering nudges and notifications

128. See and control which AI tools access your sensitive data with Nudge Security Aug 14, 2025 · release notes

     Nudge Security adds department-level visibility and direct status management for AI tool access in the usage dashboard

     • Adds department filtering to the AI usage dashboard to see which AI tools have access to sensitive data like email, files, and source code per department
     • Enables changing app status directly within the AI usage dashboard without leaving the interface

     2 details in Everything

129. Define and configure your personal app use policy with Nudge Security Jul 29, 2025 · release notes

     New onboarding playbook for defining personal app use policies with bulk categorization actions

     • Adds an updated onboarding playbook that identifies personal apps in the environment to help define a personal app use policy

     1 detail in Everything

130. Complete offboarding tasks faster with Nudge Security’s updated offboarding playbook Jul 10, 2025 · release notes

     Nudge Security's updated offboarding playbook now allows initiating more tasks regardless of user status, speeding up the process.

131. Get started with Nudge Security faster with new onboarding playbooks Jul 9, 2025 · release notes

     Nudge Security adds guided onboarding playbooks to surface and act on apps with sensitive data access.

     • Enables defining approved apps, reviewing file/email access, and removing unused accounts via new workflow

     1 detail in Everything

132. Get notified immediately when users respond to nudges Jul 8, 2025 · release notes

     Nudge Security adds immediate notifications for nudge responses via Slack, email, and webhooks

     • Adds Slack notification trigger for user nudge responses.
     • Adds email notification trigger for user nudge responses.
     • Adds webhook notification trigger for user nudge responses.

     3 details in Everything

133. Delete and edit old or unused app labels Jun 26, 2025 · release notes

     Nudge Security adds ability to permanently delete and edit old or unused app labels directly from the Apps and Accounts tables.

134. Know which vendors were breached in an app’s supply chain Jun 25, 2025 · release notes

     Nudge Security adds breached vendor identification in app supply chain breach alerts

     • Adds tooltip showing the impacted vendor name in the security tab when a supply chain breach is detected
     • Adds the impacted vendor name to the supply chain card view during a detected supply chain breach

     2 details in Everything

135. Stay ahead of upcoming app renewals with our latest notification and nudge. Jun 19, 2025 · release notes

     This release introduces proactive management capabilities for application subscriptions, allowing teams to anticipate renewal dates and receive detailed financial forecasts via automated nudges to their billing contacts.

136. Monitor Snowflake for misconfigurations, identity and access vulnerabilities, and data security risks in Nudge Security Jun 18, 2025 · release notes

     Nudge Security adds Snowflake connected app for monitoring misconfigurations, identity risks, and data security.

137. Add notes to your apps Jun 12, 2025 · release notes

     Nudge Security vApp allows admins to annotate app entries with custom notes, enhancing visibility of application context within the platform's user interface.

     • Adds a new field in the App Info card of the App Details Page for admins to add custom notes for applications

     1 detail in Everything

138. Automate SaaS and genAI guardrails in real-time with Nudge Security’s new browser extension. Jun 11, 2025 · release notes

     Nudge Security adds a browser extension for real-time SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. and genAI guardrails.

     • Adds a browser extension to monitor SaaS and genAI usage with real-time visibility of login activity, API key copying, and file uploads.
     • Enables detection of identity risks like weak passwords, MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. bypass attempts, and unapproved password managers via the new extension.
     • Delivers automated browser nudges to guide employees toward compliant SaaS and genAI choices.

     3 details in Everything

139. Identify apps with a high number of individual subscriptions in the spend dashboard May 21, 2025 · release notes

     Spend dashboard now highlights SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. apps with high subscription counts to aid consolidation.

     • Adds a new card to the spend dashboard identifying SaaS apps with many individual subscriptions.

     1 detail in Everything

140. Send bulk nudges directly from the apps and accounts table to engage users at scale May 20, 2025 · release notes

     Adds bulk nudge delivery from the apps and accounts table UI for scaling user engagement.

     • Enables bulk-selection in the apps and accounts table to deliver nudges to multiple users

     1 detail in Everything

141. Preview number of recipients before sending nudges May 19, 2025 · release notes

     Adds preview of recipient count before sending nudge notifications

     • Shows the recipient or total number of recipients when delivering nudges from the App and Account details pages

     1 detail in Everything

142. Monitor Salesforce for misconfigurations, app integrations, and identity and access vulnerabilities in Nudge Security May 7, 2025 · release notes

     Nudge Security adds Salesforce as a new integrated connected app for monitoring misconfigs and vulnerabilities.

     • Adds Salesforce as a new integrated connected app to monitor for misconfigurations, app integrations, and identity/access vulnerabilities.

     1 detail in Everything

143. Vendor security insights now available for apps Apr 23, 2025 · release notes

     Nudge Security adds summarized vendor security insights to app inventory with filtering capabilities

     • Shows positive and risky vendor security attributes on the Security tab of each app in your inventory.
     • Enables filtering the apps table based on specific vendor security criteria.

     2 details in Everything

144. View accounts linked to app instances in your organization Apr 21, 2025 · release notes

     Adds app instance filter to the accounts table on the app details page

145. Request additional information for a SaaS vendor from the their security profile page Apr 16, 2025 · release notes

     Request additional SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. vendor information and view profile update history from security profiles.

     • Adds the ability to request additional information for a SaaS vendor directly from their security profile page, flagging them for monthly internal review
     • Displays the last time a vendor's security profile was updated on the profile page

     2 details in Everything

146. Prioritize apps by criticality based on your organization's needs Apr 16, 2025 · release notes

     Add app criticality classification (low/medium/high/critical) from the app details page to prioritize apps based on organizational needs.

147. Engage with more users at once with the ability to bulk-nudge selected app users Apr 3, 2025 · release notes

     Adds bulk nudge capability for selected users from the accounts table.

     • Enables bulk-selecting and nudging multiple app users directly from the accounts table on the app details page.

     1 detail in Everything

148. Mark existing “rogue” AWS accounts as managed using the Manage AWS Footprint Playbook Apr 3, 2025 · release notes

     Manage AWS Footprint Playbook adds ability to recategorize rogue AWS accounts as managed.

149. Monitor Sentry for misconfigurations, app-to-app integrations, and user account details in Nudge Security Mar 31, 2025 · release notes

     Nudge Security adds Sentry as a new connected app for monitoring misconfigurations and user account details

150. Filter on labels on the apps and accounts tables. Mar 25, 2025 · release notes

     Filter by labels in apps and accounts tables via UI.

     • Adds the ability to filter on selected labels in the apps table
     • Adds label search capability in the apps and accounts tables

     2 details in Everything

151. Identify your least active users and apps with the ability to filter based on last account activity. Mar 25, 2025 · release notes

     New Last Account Activity filter on app/user pages and in Playbooks to identify least active accounts.

     • Adds a new Last Account Activity filter to the app and user pages for sorting and filtering accounts within a specified time range
     • Enables viewing Last Account Activity data in the App Usage Playbook
     • Enables viewing Last Account Activity data in the Remove Abandoned Accounts Playbook

     3 details in Everything

152. Start your Nudge Security journey strong with our new onboarding flow during the initial email scan Mar 24, 2025 · release notes

     New onboarding flow for trial users to configure SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. and explore features during initial email scan

     • Enhanced onboarding experience for trial users with a guided 5-minute configuration during the initial email scan.
     • Ability to connect Nudge Security to an SSO provider as part of the new onboarding flow.
     • In-app exploration paths for shadow SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. usage discovery and spend management capabilities.
     • New prompts to invite teammates and schedule a product expert call within the trial experience.

     4 details in Everything

153. Initiate an offboarding playbook via API Mar 14, 2025 · release notes

     Nudge Security adds Public API endpoint to initiate offboarding playbooks for employees

154. Monitor PagerDuty for user activity and details, along with app-to-app integrations in Nudge Security Feb 28, 2025 · release notes

     New PagerDuty connected app enables monitoring user activity and discovering risky app-to-app integrations.

155. Send notifications to multiple Slack channels Feb 27, 2025 · release notes

     Nudge Security now supports sending notifications to multiple Slack channels via Settings.

     • Adds multi-channel notification support for Slack in the Nudge Security settings.

     1 detail in Everything

156. Make bulk changes to SaaS accounts Feb 13, 2025 · release notes

     Nudge Security adds bulk selection to update multiple SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. accounts simultaneously via the UI.

157. Monitor Notion security risks, app-to-app integrations, and user activity in Nudge Security Feb 12, 2025 · release notes

     Nudge Security adds Notion connected app to monitor risks and user activity

     • Adds the Notion connected app to discover risky app-to-app integrations and monitor user activities

     1 detail in Everything

158. Initiate employee offboarding for suspended user identities. Feb 12, 2025 · release notes

     Nudge adds archived and suspended user support in its offboarding playbook.

     • Extends the offboarding playbook to include archived and suspended users from Google Workspace and Microsoft 365.

     1 detail in Everything

159. Stay in-the-know of global SaaS app and account activity in your organization Feb 5, 2025 · release notes

     Nudge Security adds customizable notification rules for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. account activity by country of origin.

     • Adds customizable notification rules to alert admins on SaaS app and account activity originating from companies headquartered in countries of security interest
     • Uses proprietary security vendor profiles to filter and target alerts based on organization-established standards

     2 details in Everything

160. Monitor Github for security risks, misconfigurations, and app-to-app integration risks in Nudge Security Jan 28, 2025 · release notes

     Adds Github connected app for monitoring security risks and misconfigurations

161. Gain even deeper visibility into your connected apps with the new app-to-app integrations table Jan 22, 2025 · release notes

     New app-to-app integrations table to visualize access sharing across SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. entities.

     • Adds the app-to-app integrations table to uncover how apps share access via API keys, service accounts, OAuth grants, and other non-human identitiesnon-human identitiesA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls.

     1 detail in Everything

162. Monitor Slack security risks, app-to-app integrations, and user activity in Nudge Security Jan 22, 2025 · release notes

     Adds Slack connected app for monitoring risks, integrations, and user activity

163. New! Monitor OpenAI, Cloudflare, and Fastly for risks and misconfigurations and take action directly within Nudge Security Dec 11, 2024 · release notes

     Nudge Security adds connected apps for monitoring OpenAI, Cloudflare, and Fastly risks.

     • Adds support for monitoring OpenAI configurations and user activities
     • Adds support for monitoring Cloudflare configurations and user activities
     • Adds support for monitoring Fastly configurations and user activities

     3 details in Everything

164. Drive SaaS savings with enhanced Spend dashboard insights Dec 4, 2024 · release notes

     Enhanced Spend dashboard adds high-level insights like total discovered SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. spend, cost center monitoring, and prioritized optimization interventions.

     • Track high-level insights such as total discovered SaaS spend, potential cost savings, total paid apps, and average spend per user in the Spend dashboard
     • Monitor overall SaaS spend by category and cost center directly within the enhanced Spend dashboard
     • Prioritize cost optimization interventions based on app spend and potential savings impact using the updated Spend dashboard views

     3 details in Everything

165. Safeguard your Okta infrastructure with our new Okta connected app Nov 13, 2024 · release notes

     Nudge Security adds Okta SaaS security posture managementSaaS security posture managementSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. via a new connected app integration.

166. Create Jira tickets for SaaS security posture findings with Tines Nov 6, 2024 · release notes

     New Tines story automates creation of Jira tickets from Nudge Security SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. security posture findings.

167. New security posture posture checks for Microsoft Sharepoint Oct 29, 2024 · release notes

     Nudge Security adds new Microsoft Sharepoint security posture checks and requires additional API scopes for existing M365 customers.

     • Adds new rules to surface Microsoft Sharepoint security posture risks and misconfigurations

     1 detail in Everything

168. Follow up with users more easily with re-nudging enhancements Oct 21, 2024 · release notes

     Nudge Security adds manual re-nudging from history, customizable automated re-nudge settings, and playbook integration.

     • Adds the ability to 'Re-nudge manually from the Nudge History page'
     • Adds customization for automated re-nudging settings, including count and wait time
     • Adds the ability to 'Re-nudge directly from playbooks, either in bulk or to individual users'

     3 details in Everything

169. Manage the authorizing user for your Microsoft 365 or Google Workspace integration Oct 15, 2024 · release notes

     Nudge Security now allows administrators to update the delegated permissions user for email discovery integrations.

170. Automatically re-nudge users who haven't responded and filter Nudge History to view replies Oct 1, 2024 · release notes

     Auto-ree nudes for unresponded users and filtered Nudge History view

     • Nudge Security automatically sends a second nudge after three days if the user hasn't responded, with nudges expiring after 30 days
     • Adds filtering capabilities to Nudge History by nudge type, response status, date range, app, or user

     2 details in Everything

171. Reveal shadow spend with new SaaS spend discovery capabilities Sep 24, 2024 · release notes

     Nudge Security adds SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. spend discovery from mailbox invoices for shadow IT visibility.

     • Adds SaaS spend discovery by extracting billing data (frequency, amount, renewal date, cost center) from user invoice attachments in the last two years
     • Adds per-app inventory of invoice details including invoice ID, payment status, payee, and service description to uncover hidden costs
     • Enables SaaS spend forecasting with estimated annual budget tracking alongside 12-month historical spend and projected usage-based costs

     3 details in Everything

172. Fix risks and configurations in Google Workspace and Microsoft 356 Sep 12, 2024 · release notes

     New SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. for Google Workspace and Microsoft 365 with Posture dashboard and remediation workflows

     • Adds SaaS security posture managementSaaS security posture managementSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. (SSPM) for Google Workspace and Microsoft 365 to detect misconfigurations, identity risks, and SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally.-to-SaaS integration risks.
     • Introduces a new Posture dashboard to highlight top findings, riskiest users, and remediation activities.
     • Adds Findings view with resolution outcomes tracking via remediation workflows.

     3 details in Everything

173. Create automated rules to govern app use by Approval Status Aug 28, 2024 · release notes

     Add Approval Status as a trigger for automated notification rules in Nudge Security.

174. AI Dashboard highlights OAuth integrations with AI Tools Aug 28, 2024 · release notes

     AI Usage dashboard highlights OAuth integrations for automated grant revocation

     • Adds a list of integrations associated with AI tools to the AI Usage dashboard to surface OAuth risk insights and discover opportunities to revoke OAuth grants automatically.

     1 detail in Everything

175. Filter and prioritize OAuth grants based on risk insights Aug 15, 2024 · release notes

     New filters to prioritize OAuth grants based on risk insights like vendor trust and scope sensitivity

     • Adds UI filters for OAuth grant prioritization based on app popularity, configuration choices, vendor trust signals, sensitive scopes, and deceptive practice indicators

     1 detail in Everything

176. Discover paid apps and track SaaS spend data Jul 25, 2024 · release notes

     Nudge Security adds automatic SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. spend discovery, billing owner identification, and a Spend card for app cost tracking.

     • Adds automatic categorization of apps as paid based on email invoices from the previous three years
     • Adds automatic identification of a billing owner and cost center for each paid app
     • Adds manual entry fields for estimated annual spend, billing frequency, and renewal date via the Spend card in App Overview
     • Adds the ability to sort, filter, and edit spend fields in bulk from the App view
     • Adds Settings > Organization Settings to customize the Google or Microsoft field used to allocate spend

     +1 more show less

     • Adds Settings > Spend Settings to add additional mailboxes for billing information extraction

     6 details in Everything

177. New Spend dashboard highlights opportunities to consolidate costs Jul 25, 2024 · release notes

     Nudge Security adds a Spend dashboard for SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. cost consolidation and optimization insights.

     • Adds a new Spend dashboard to identify redundant or inactive SaaS subscriptions and optimize costs
     • Enables tracking of upcoming renewal dates alongside app usage information within the Spend view
     • Introduces detection of paid accounts associated with unapproved apps in the Spend dashboard

     3 details in Everything

178. Visualize app usage by organizational unit Jun 27, 2024 · release notes

     Adds UI chart for app usage visualization by organizational dimensions in the App Overview pane.

179. Get deeper insight into OAuth risks May 30, 2024 · release notes

     Nudge Security adds OAuth risk insights for scopes, domains, trust signals and popularity.

     • Adds detection of restricted or sensitive OAuth scopes in grants
     • Adds detection of suspicious domains and email activities associated with OAuth apps
     • Adds assessment of vendor trust signals for OAuth apps
     • Adds visibility into an app's popularity within the organization and across other environments

     4 details in Everything

180. Discover redundant and duplicative app instances May 29, 2024 · release notes

     New Instances tab in App Overview for discovering and inventorying duplicate app instances

     • Adds an Instances tab to the App Overview page that displays instances defined by a unique subdomain
     • Associates individual accounts with the instances they have access to within the App Overview pane

     2 details in Everything

181. Easily ignore low-priority apps and accounts May 2, 2024 · release notes

     New ability to ignore specific apps and accounts from dashboards and counts while keeping them in attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. views.

     • Admins can now choose to ignore any app and its associated accounts from view in Nudge Security.

     1 detail in Everything

182. Filter apps by number of accounts Apr 17, 2024 · release notes

     Adds a filter to view organization apps by account count (greater/less than a value).

     • Adds the ability to filter apps by the number of associated accounts using a greater than or less than numeric threshold.

     1 detail in Everything

183. Sign into Nudge Security with Okta SSO Apr 5, 2024 · release notes

     Adds Okta SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. support and marketplace availability to Nudge Security for all customers.

     • Adds single sign-onsingle sign-onSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. with Okta to allow users to sign into Nudge Security using their Okta credentials.
     • Makes Nudge Security available in the Okta Marketplace for easier discovery and integration.

     2 details in Everything

184. Access security and compliance profiles for thousands of SaaS vendors Mar 13, 2024 · release notes

     Main dashboard search now surfaces security/compliance profiles for uninstalled SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. apps.

     • Added access to security profiles for external apps, exposing app category, description, org details, security program info, auth methods (including SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.), supply chain services, and breach history

     1 detail in Everything

185. Enhanced search results Mar 13, 2024 · release notes

     Search results on the Nudge Security dashboard are now organized by type (apps, accounts, resources, OAuth grants).

186. Investigate SaaS activities faster with improved SaaS events record Feb 27, 2024 · release notes

     Revamped SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. events record adds resource association and improved search/filter for events by type, time range, or user

     • Adds associated resources to the SaaS events record for both apps and accounts, enabling direct correlation of activities with specific resources.
     • Enables searching and filtering SaaS events by event type, time range, or user directly within the Events tab for SaaS apps and accounts.
     • Retires the Resources tab from the primary navigation as resource context is now integrated into the events view.

     3 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The Resources tab has been removed from the primary navigation; users must access resource-related event data via the Events tab instead.
187. Improved prioritization of apps for SSO onboarding Feb 8, 2024 · release notes

     Nudge Security adds filters for SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. support and auth types (SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider., SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave., SWA, OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user.) in Azure AD and Okta onboarding playbooks.

     • Adds filters to prioritize applications that support SSO within the Azure AD and Okta onboarding playbooks
     • Adds filtering by supported authentication types (SAML, SCIM, SWA, and OIDC) for targeting Okta onboarding

     2 details in Everything

188. Monitor app outages with new app health statuses Dec 20, 2023 · release notes

     Nudge Security introduces new app health statuses to monitor SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. application outages and operational state.

     • Adds new app health statuses that show the operational state of SaaS applications across your organization
     • Enables at-a-glance view of SaaS service disruptions for security and IT teams

     2 details in Everything

189. Safeguard against new Google OAuth vulnerability with automated alerts and filtering Dec 19, 2023 · release notes

     New automated alerts for shadow Google accounts and filter view on Workspace app overview

     • Adds automatic notification rule that alerts when employees create new shadow Google accounts.
     • Adds Account alias filter to Resources tab on the Google Workspace app overview page.

     2 details in Everything

190. Customize nudges to suit your organization's needs Nov 29, 2023 · release notes

     Customize nudge subject lines and body copy using variables via UI settings.

     • Adds the ability to edit subject line and body copy for each nudge template in Settings
     • Enables use of variables within nudge templates to insert context-specific copy

     2 details in Everything

191. Multi-select filter options Nov 15, 2023 · release notes

     Nudge Security adds multi-select filter options to allow selecting multiple values within each filter category.

     • Multi-select filter options now supported in UI filters (e.g., selecting multiple approval statuses at once)
     • Filter categories now accept multiple selected values instead of single selections

     2 details in Everything

192. Support for Google Single Sign-On (SSO) discovery Nov 13, 2023 · release notes

     Adds Google Single Sign-On (SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.) discovery to the SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. discovery engine for authentication pattern visibility

     • SaaS discovery engine now recognizes and analyzes Google SSO usage in authenticating user accounts

     1 detail in Everything

193. Add context to nudges with a new custom field Oct 31, 2023 · release notes

     Adds custom field support to nudges for adding context notes

     • Adds a custom_field to nudge objects that sends a contextual note to employees along with the nudge

     1 detail in Everything

194. Opt specific employees out of receiving nudges Oct 31, 2023 · release notes

     Adds Organization Settings feature to opt specific users out of receiving nudges

     • Excludes targeted users (e.g., senior executives, contractors) from receiving nudge communications

     1 detail in Everything

195. Filter OAuth grants by risk, permissions, and more Oct 31, 2023 · release notes

     New filters for OAuth grants by risk, permissions, and user status

     • Enables targeted discovery of high-risk OAuth grants and those associated with suspended or disabled user accounts through the filter interface.

     1 detail in Everything

196. Visualize AI usage trends with a new AI dashboard Oct 26, 2023 · release notes

     Nudge Security adds a new AI dashboard to visualize organizational AI usage trends and adoption.

     • Adds a new AI dashboard in the UI to visualize what AI tools are in use, who is using them, business unit adoption, prolific adopters, and applications leveraging AI functionality.

     1 detail in Everything

197. Additional insight into authentication methods and MFA Oct 3, 2023 · release notes

     Nudge adds detailed auth method insights, MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. status, and filtering for application accounts

     • Adds authentication method details (SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. providers, OAuth, username/password) and last activity to each application account insight view
     • Adds the ability to filter application accounts by authentication type in the UI

     2 details in Everything

198. Three new ways to customize nudges Oct 3, 2023 · release notes

     Adds logo insertion, sender specification, and custom footer support for Nudge Security emails and Slack messages

     • Allows specifying the nudge sender for Slack and email nudges
     • Enables adding a custom footer to nudges sent through email or Slack
     • Permits adding the company's logo to the header of nudges sent through email

     3 details in Everything

199. Filter applications by technical contact Sep 20, 2023 · release notes

     Nudge Security adds filtering applications by technical contact and bulk reassignment.

     • Adds the ability to filter application lists by technical contact in the UI

     1 detail in Everything

200. Enhanced Nudge Security dashboard Sep 20, 2023 · release notes

     Dashboard update adds SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. adoption visualization and breached app indicators.

     • Adds a new graph to visualize SaaS adoption rates
     • Displays which apps in the supply chain have been breached

     2 details in Everything

201. Onboard new AI tools safely with our new playbook Sep 12, 2023 · release notes

     Nudge Security adds an AI Acceptable Use Policy playbook for discovering AI tool usage and automating policy acknowledgement.

     • Adds a new playbook to discover AI tools used by employees
     • Enables sharing AI usage policy with users upon account creation
     • Automates collection of policy acknowledgment and user questions

     3 details in Everything

202. Run multiple concurrent offboarding playbooks Sep 11, 2023 · release notes

     Nudge Security now supports running multiple concurrent offboarding playbooks simultaneously.

     • Adds the ability to run multiple active offboarding playbooks concurrently

     1 detail in Everything

203. Easily add or update app context with bulk editing capabilities Sep 6, 2023 · release notes

     Adds bulk editing for app context fields (labels, category, etc.) in the App view

204. Audit SaaS usage at scale and avoid wasted SaaS spend Aug 23, 2023 · release notes

     Nudge Security adds a playbook to automate audit and cleanup of abandoned SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. accounts.

     • Adds an abandoned accounts playbook to automate auditing unused SaaS applications
     • Enables delegation of account removal tasks to app owners

     2 details in Everything

205. Visualize SaaS account adoption over time Aug 2, 2023 · release notes

     Nudge Security adds a new time-series chart to visualize SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. account adoption rates with flexible filtering.

     • Adds a new visualization feature allowing security teams to view the rate of adoption for each organization's applications over time, enabling analysis of user traction trends.
     • Enables filtering of the adoption chart by specific time ranges: last day, week, month, year, or all-time, providing granular insight into when users were added.

     2 details in Everything

206. Audit your applications' field history Aug 2, 2023 · release notes

     New audit capability for tracking modifications and timestamps of application and account fields.

     • Adds the ability to view a timestamped list of field history, including the specific user or automated process that initiated each modification.

     1 detail in Everything

207. Nudge technical owners to delete abandoned accounts Aug 2, 2023 · release notes

     Nudge adds automated nudges to technical owners for deleting suspended accounts.

     • Adds the ability to nudge technical contacts to delete or suspend abandoned accounts and reclaim unused licenses.
     • Automatically updates account statuses in Nudge Security once the technical contact confirms removal.

     2 details in Everything

208. Identify abandoned or inactive accounts automatically Aug 2, 2023 · release notes

     Nudge Security adds automatic inactive account detection after 90 days of SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. inactivity and new account status visualizations.

     • Adds automatic marking of accounts as Inactive when provisioned via SSO after 90 days without activity
     • Introduces a graph on each application’s overview page displaying account statuses (Active, Deleted, Revoked, Abandoned, Inactive)
     • Enables manual updates to account status or automatic updates from the SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. access review playbook and employee offboarding playbook

     3 details in Everything

209. Improved exporting for user groups Jul 20, 2023 · release notes

     Nudge Security adds Export CSV button on the Groups page to download group metadata including risk scores and permissions.

     • Adds an Export CSV button on the Groups page that downloads a CSV containing each group’s primary email, member count, account count, risk score, and join/read/manage permissions.

     1 detail in Everything

210. New user role provides more granular access controls Jul 20, 2023 · release notes

     New Organizational View plus Employee Offboarding user role enables offboarding playbook execution for non-admin users.

211. Nudge employees about their use of OAuth grants before revoking access Jul 20, 2023 · release notes

     New nudge workflow to verify OAuth grant usage before revocation via email or Slack.

212. A new playbook automates common SaaS offboarding tasks Jun 14, 2023 · release notes

     New playbook for automated SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. offboarding with workflow automation.

     • Introduces a new SaaS Offboarding playbook that automates common offboarding tasks in alignment with Google and Microsoft best practices.
     • Provides a single system of record for SaaS offboarding to streamline employee lifecycle changes.
     • Enables direct action within the Nudge Security platform to revoke OAuth grants, disable accounts, and reset passwords for departing employees.

     3 details in Everything

213. Quickly assess multi-factor authentication options with added security context May 24, 2023 · release notes

     Enhanced app security context with MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. summaries to accelerate review workflows.

214. Revoke OAuth grants for Google Workspace and Microsoft 365 within Nudge Security May 17, 2023 · release notes

     New UI capability to detect, investigate, and revoke risky OAuth grants for Google Workspace and Microsoft 365 directly in Nudge Security.

215. Get visibility of user groups at your organization Apr 26, 2023 · release notes

     New group analysis feature to identify active groups, associated accounts, and privacy settings.

     • Adds group analysis functionality to identify groups in use and discovered accounts created via those groups
     • Enables checking which users can see a group’s emails, revealing potential password reset capabilities for shared accounts
     • Supports ensuring appropriate privacy settings for each group

     3 details in Everything

216. Additional employee data for Google Workspace users Apr 17, 2023 · release notes

     Nudge Security adds automatic display of department, division, cost center, location, org name, and title to the Google Workspace user summary view in the UI.

     • Displays employee department, division, cost center, location, organization name, and title in the user summary view for Google Workspace users
     • Updates these profile fields automatically using metadata from Google Workspace

     2 details in Everything

217. Enhanced Amazon Web Services (AWS) dashboard views Apr 17, 2023 · release notes

     Nudge Security adds AWS Organizations and unmanaged account views with search, filter, and export capabilities

     • Adds a new dashboard view listing AWS Organizations with nested associated accounts
     • Adds a new dashboard view listing unmanaged AWS accounts not in an Organization
     • Enables search, filter, and export functionality for the new AWS dashboard views

     3 details in Everything

218. New Slack integration helps you reach users right where they’re working Mar 29, 2023 · release notes

     Nudge Security adds a new Slack integration to send nudges, track responses, and route custom alerts directly to users.

     • Adds the ability to send user nudges directly within the Slack app for immediate response
     • Enables tracking of user nudge responses within the Nudge Security dashboard
     • Supports receiving custom notifications in Slack for events like supply chain breaches or new application signups

     3 details in Everything

219. Improved exporting capabilities Mar 28, 2023 · release notes

     New Export CSV button added to view screens for one-click data export

     • Adds an Export CSV button in the upper right hand corner of each screen to simplify data exports
     • Exports now include app name, labels, category, number of accounts, first user, and date first seen for organizations

     2 details in Everything

220. New centralized view to help you track nudges Mar 28, 2023 · release notes

     New centralized nudge history view in the Nudge Security console to track organization-wide and per-application nudges

     • Adds a centralized page displaying the history of all nudges sent by an organization
     • Enables viewing nudge history for each individual application at the organization
     • Shows when, why, and who sent each nudge, along with whether users have seen them and their responses to queries
     • Displays the time elapsed since users were last nudged to help determine if additional outreach is needed

     4 details in Everything

221. Now generally available: social media accounts in your SaaS attack surface Mar 27, 2023 · release notes

     Social media tab in SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. dashboard now generally available for all customers.

     • Adds social media accounts to the SaaS attack surface dashboard
     • Enables discovery of employees creating personal social media accounts using corporate emails

     2 details in Everything

222. New SSO playbook enhances support for Azure AD Mar 15, 2023 · release notes

     New automated SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. playbook for Azure AD onboarding and admin tracking

     • Adds a new SSO playbook to automate the onboarding of SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. applications to Azure AD SSO.
     • Enables tracking of which organization apps are enrolled vs unenrolled in Azure AD SSO.
     • Identifies unenrolled apps that are already integrated with Azure AD to prioritize onboarding efforts.
     • Kicks off an automated workflow to notify each app's primary admin and track their responses.

     4 details in Everything

223. New playbook to automate SOC 2 access reviews Feb 28, 2023 · release notes

     New SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. access review playbook adds smart app categorization and audit-ready reporting capabilities.

     • Adds an interactive tour for the new SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. 2 access review workflow.
     • Enables capture and classification of in-scope SOC 2 assets with automatic smart app categorization.
     • Generates print-ready reports for SOC 2 access reviews to demonstrate audit processes.

     3 details in Everything

224. New attack surface dashboard Feb 9, 2023 · release notes

     New attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. dashboard for monitoring cloud and SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. exposure

     • Adds the new attack surface dashboard to visualize external-facing SaaS apps, domains, supply chain infrastructure, and corporate social media accounts

     1 detail in Everything

225. New OAuth risk scoring & improved OAuth classification Feb 2, 2023 · release notes

     New OAuth risk scoring feature with customizable notification rules based on risk thresholds.

     • Introduces a new OAuth risk scoring model to assess grant severity.
     • Allows building custom notification rules using flexible OAuth criteria including an OAuth risk score threshold.

     2 details in Everything