https://cybertoolchain.io/tools/nudge-security New releases and features in Nudge Security, tracked by The Cyber Toolchain. en Tue, 03 Nov 2026 00:00:00 GMT https://www.nudgesecurity.com/changelog/detect-cryptocurrency-wallet-addresses-ai-conversations https://www.nudgesecurity.com/changelog/detect-cryptocurrency-wallet-addresses-ai-conversations Tue, 03 Nov 2026 00:00:00 GMT Nudge Security's AI conversation monitoring now detects cryptocurrency wallet addresses and related identifiers shared with AI tools⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enable cryptocurrency wallet address detection in AI conversation monitoring via Browser Extension Settings to catch when employees share crypto data with AI tools.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-app-for-duo-security https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-app-for-duo-security Tue, 03 Nov 2026 00:00:00 GMT Nudge Security adds a Duo Security connected app to centralize visibility into accounts, activity, and misconfigurations⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a Duo Security connected app integration to surface accounts, activity, and misconfigurations from Duo Security inside Nudge Security.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/discover-and-govern-ai-agents-across-23-agentic-platforms https://www.nudgesecurity.com/changelog/discover-and-govern-ai-agents-across-23-agentic-platforms Mon, 02 Nov 2026 00:00:00 GMT Nudge Security adds AI agent discovery and governance across 23 agentic platforms via API and browser extension⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Access the full AI agent inventory at `Identities > AI agents`, where each agent shows its creator, platform, integrations, permissions, and approval status regardless of which discovery channel found it.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Flag risky AI agents that are publicly accessible, carry hardcoded credentials, use unauthenticated MCP connections, or whose creators have left the organization. • Send a nudge to an agent's creator to collect a plain-language explanation of the agent's purpose and required access, with the answer saved to the agent's record. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog https://www.nudgesecurity.com/changelog Thu, 29 Oct 2026 07:54:59 GMT Nudge Security: Nudge Security now discovers AI agents your team builds on Notion, available in the AI agent discovery research preview — enable the `Notion AI agents`⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Nudge Security now blocks sending nudges to deleted, archived, or suspended users and accounts, with the nudge button disabled and a message explaining why delivery is not possible. • Bulk nudge sends now report which recipients were skipped due to deleted, archived, or suspended status. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/stop-nudging-deleted-archived-suspended-users https://www.nudgesecurity.com/changelog/stop-nudging-deleted-archived-suspended-users Tue, 27 Oct 2026 00:00:00 GMT Nudge Security now blocks nudges to deleted, archived, or suspended users, with inline explanations and bulk-skip notifications.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Disables the nudge button with an explanatory message when the target user or account is deleted, archived, or suspended.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Reports skipped recipients when sending bulk nudges to a mix of active and inactive users or accounts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog https://www.nudgesecurity.com/changelog Tue, 20 Oct 2026 07:54:54 GMT Nudge Security adds custom SSO domain tracking to surface SSO coverage and enable auto-approval of apps signed into via those domains.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds custom SSO domain configuration under `Settings > Browser extension`, letting the browser extension recognise logins through those domains and auto-fill the SSO provider in the app inventory — no IdP connected-app required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables filtering the app inventory to show which apps use SSO, based on logins detected through configured custom SSO domains. • Enables auto-approval of apps that users sign into through configured custom SSO domains. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/discover-ai-agents-built-on-notion https://www.nudgesecurity.com/changelog/discover-ai-agents-built-on-notion Tue, 20 Oct 2026 00:00:00 GMT Nudge Security now discovers AI agents built on Notion, surfacing creator, components, and risk insights in the AI agents inventory.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables the `Notion AI agents` connected app in Nudge Security to automatically discover and inventory AI agents your team builds on Notion, including creator, components, and risk insights, via the AI Agents tab under Identities.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/set-custom-sso-domains https://www.nudgesecurity.com/changelog/set-custom-sso-domains Tue, 13 Oct 2026 00:00:00 GMT Nudge Security lets you define custom SSO domains so the browser extension auto-fills SSO provider and enables SSO-based app filtering and auto-approval.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds custom SSO domain configuration via `Settings > Browser extension`, letting the browser extension recognise logins through those domains and automatically fill in the SSO provider for each app — even without a connected identity provider.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables filtering the app inventory by SSO coverage once custom SSO domains are configured. • Enables auto-approval of apps that users sign into through a configured custom SSO domain. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog https://www.nudgesecurity.com/changelog Mon, 05 Oct 2026 07:55:54 GMT Nudge Security: Enables both AI agents via `Automations > AI Agents` in the Nudge Security console. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog https://www.nudgesecurity.com/changelog Sun, 04 Oct 2026 07:49:23 GMT Nudge Security launches AI agents for automated OAuth grant revocation and browser extension risk remediation at scale.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the OAuth Grant Risk Analyst AI agent, accessible via Automations > AI Agents, which reviews new OAuth grants as they are discovered, revokes overly permissive or high-risk ones automatically, or nudges the OAuth grantor to remove access, with human-in-the-loop oversight.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the Browser Extension Risk Analyst AI agent, accessible via Automations > AI Agents, which inspects browser extension artifacts and metadata to flag malicious, compromised, or misrepresented extensions and orchestrates disable and uninstall workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/adaptive-risk-management-for-saas-and-ai https://www.nudgesecurity.com/changelog/adaptive-risk-management-for-saas-and-ai Wed, 30 Sep 2026 00:00:00 GMT Nudge Security launches adaptive risk management with automatic app tiering, dynamic risk scores, and a new Risk dashboard.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a `Dashboards > Risk` view to quickly identify where exposure is concentrated across your SaaS and AI estate and track changes over time.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces automatic app tiering that prioritizes apps based on organizational adoption and the sensitivity of up to 29 inferred data types, with no manual entry required. • Adds always-on dynamic app risk scores driven by 30 internal and external factors, updating automatically without vendor participation. • Adds adaptive controls that adjust security decisions automatically through native controls, policy-driven nudges, agent-powered workflows, guided remediation, and third-party security integrations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/address-sprawling-oauth-and-browser-extension-risk-with-nudge-security-ai-agents-now-live https://www.nudgesecurity.com/changelog/address-sprawling-oauth-and-browser-extension-risk-with-nudge-security-ai-agents-now-live Wed, 30 Sep 2026 00:00:00 GMT Nudge Security launches AI agents for automated OAuth grant revocation and browser extension risk remediation at scale.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the `OAuth Grant Risk Analyst` AI agent, which reviews new OAuth grants as they are discovered, automatically revokes overly permissive or high-risk access, or nudges the OAuth grantor to remove it, with human-in-the-loop oversight.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the `Browser Extension Risk Analyst` AI agent, which inspects artifacts and metadata behind installed browser extensions, flags malicious, compromised, or misrepresented extensions, and orchestrates disable and uninstall workflows. • AI agents are accessible via `Automations > AI Agents` in the Nudge Security console. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog https://www.nudgesecurity.com/changelog Sat, 26 Sep 2026 07:48:30 GMT Nudge Security adds batched password-manager nudges and in-browser device-code phishing warnings across 10 OAuth providers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a batched 'Use approved password manager' nudge: filter the accounts inventory by observed password manager (including 'not approved'), multi-select, and each employee receives one consolidated nudge listing all their affected accounts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds an in-browser nudge that warns employees on OAuth device code authorization pages for Microsoft, Google, GitHub, GitLab, Salesforce, AWS, Docker, Zoom, Vercel, and OpenAI — every acknowledgment is recorded as a nudge response. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog https://www.nudgesecurity.com/changelog Fri, 25 Sep 2026 07:51:28 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog https://www.nudgesecurity.com/changelog Thu, 24 Sep 2026 07:52:06 GMT Nudge Security: Adds a 'Use approved password manager' bulk nudge: filter accounts inventory by password manager (including unapproved ones), multi-select, and send one batched nudge per employee listing all affected accounts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/prevent-device-code-phishing-in-browser-nudge https://www.nudgesecurity.com/changelog/prevent-device-code-phishing-in-browser-nudge Fri, 18 Sep 2026 00:00:00 GMT Nudge Security adds an in-browser warning on OAuth device code pages to block device code phishing attacks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a new in-browser nudge that fires on every visit to an OAuth device code authorization page for Microsoft, Google, GitHub, GitLab, Salesforce, AWS, Docker, Zoom, Vercel, and OpenAI, warning employees never to enter a code provided by someone else.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Records every employee acknowledgment of the device code phishing nudge as a nudge response for audit and tracking. • Configure detection and enable the device code phishing nudge in `Browser Extension Settings`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/bulk-nudge-approved-password-manager https://www.nudgesecurity.com/changelog/bulk-nudge-approved-password-manager Fri, 18 Sep 2026 00:00:00 GMT Nudge Security adds bulk 'Use approved password manager' nudge — one batched message per employee across all flagged accounts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables bulk nudging of employees to migrate credentials into an approved password manager by filtering the accounts inventory by password manager observed at login, multi-selecting accounts, and sending the `Use approved password manager` nudge — each employee receives one batched nudge listing all their affected accounts rather than one per account.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog https://www.nudgesecurity.com/changelog Wed, 16 Sep 2026 07:42:16 GMT Nudge Security: Adds Safari support for the Nudge Security browser extension, extending SaaS and AI discovery, identity risk detection, and in-browser nudges to the default browser on company Macs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog https://www.nudgesecurity.com/changelog Tue, 15 Sep 2026 13:01:22 GMT Nudge Security browser extension now supports Safari, enabling SaaS/AI visibility and enforcement on company Macs via Apple Business Manager and MDM.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Safari browser extension support with silent rollout through Apple Business Manager and MDM, expanding SaaS and AI visibility to the default browser on company Macs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Monitors SaaS and AI activity in real time via the Safari extension, including daily AI usage, logins, access patterns, and file uploads. • Detects identity and access risks through the Safari extension, covering weak or reused passwords, SSO or MFA bypass attempts, shared credentials, and risky password manager use. • Delivers automated in-browser nudges on Safari to guide employees toward safer SaaS and AI behaviors, with customization available. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/deploy-the-nudge-security-browser-extension-on-safari https://www.nudgesecurity.com/changelog/deploy-the-nudge-security-browser-extension-on-safari Tue, 08 Sep 2026 00:00:00 GMT Nudge Security browser extension now supports Safari, enabling SaaS and AI visibility on every company Mac. • Supports deploying the Nudge Security browser extension on Safari via Apple Business Manager and MDM for silent rollout across company Macs, with step-by-step instructions available in Nudge Security settings. • Monitors SaaS and AI activity in real time through the Safari extension, including daily AI usage, logins, access patterns, and file uploads. • Detects identity and access risks via the Safari extension, including weak or reused passwords, SSO or MFA bypass attempts, shared credentials, and risky password manager use. • Delivers automated, customizable in-browser nudges on Safari to guide employees toward safer SaaS and AI behaviors. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog https://www.nudgesecurity.com/changelog Sun, 23 Aug 2026 17:00:33 GMT Nudge Security now discovers AI agents built on Datadog and HubSpot via browser-based agent discovery. • Discovers AI agents built on Datadog and HubSpot as part of the AI agent discovery research preview, surfaced through the browser extension. • Access to the research preview can be requested from the `AI Agents` tab under Identities. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/discover-ai-agents-built-on-datadog-and-hubspot https://www.nudgesecurity.com/changelog/discover-ai-agents-built-on-datadog-and-hubspot Wed, 19 Aug 2026 17:44:52 GMT Nudge Security now discovers AI agents built on Datadog and HubSpot via its browser extension, surfacing them in the AI agents inventory. • Discovers AI agents your team builds on Datadog and HubSpot through browser-based detection, flowing each agent into the AI agents inventory under `Identities` with creator, components, and risk insights. • Requires browser-based agent discovery to be enabled in browser extension settings; accessible as part of the AI agent discovery research preview. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog https://www.nudgesecurity.com/changelog Sun, 16 Aug 2026 08:54:07 GMT Nudge Security adds a risk dashboard, passkey adoption tracking, and in-browser AI data-loss nudges with optional enforcement. • New `Dashboards > Risk` dashboard (open beta) shows residual risk scores, a trend chart filterable to business-critical apps, a business-criticality-vs-residual-risk matrix with drill-down, and a ranked highest-risk-apps table built automatically from Nudge's per-app risk scoring. • New `Dashboards > Passkey usage` dashboard surfaces passkey adoption rate, top apps using passkeys, storage provider breakdown (toggle between passkey count and user count), device-loss survivability, and per-login verification status — populated by the browser extension. • Passkey usage is also surfaced per individual employee on their user details page. • New in-browser nudge (`Settings > In-browser nudges`) intercepts sensitive data (PII, secrets, financial info) detected in AI-tool conversations, shows the employee exactly what was found, and offers one-click redaction; optional enforcement mode blocks sending until sensitive data is redacted. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/see-your-risk-posture-at-a-glance-with-our-new-risk-dashboard-now-in-open-beta https://www.nudgesecurity.com/changelog/see-your-risk-posture-at-a-glance-with-our-new-risk-dashboard-now-in-open-beta Sat, 15 Aug 2026 08:46:41 GMT Nudge Security adds a Risk dashboard (open beta) at Dashboards > Risk, surfacing residual risk scores and business criticality across your SaaS inventory. • New Risk dashboard at `Dashboards > Risk` (open beta) displays tiles for apps assessed, business-critical apps, overall residual risk, and apps missing approval — built automatically from Nudge's business criticality tiers and residual risk scores. • Risk trend chart within the dashboard lets you filter historical risk over time to business-critical apps only. • Business criticality vs. residual risk matrix lets you click into any cell to see the exact apps behind that risk concentration. • Highest-risk apps ranking table surfaces the apps that need attention first, ordered by risk score. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/nudge-employees-in-the-browser-before-they-share-sensitive-data-in-ai-conversations https://www.nudgesecurity.com/changelog/nudge-employees-in-the-browser-before-they-share-sensitive-data-in-ai-conversations Fri, 14 Aug 2026 09:22:27 GMT Nudge Security adds in-browser sensitive data detection and optional redaction enforcement for AI conversations. • Adds in-browser nudges via the browser extension that detect PII, secrets, or financial info typed into AI conversations and prompt employees to redact in one click or justify sending — configurable at `Settings > In-browser nudges`. • Adds optional enforcement mode (configurable at `Settings > In-browser nudges`) that makes redaction the only way to send, preventing unredacted sensitive data from leaving the browser. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/track-passkey-adoption-and-storage-in-the-new-passkey-usage-dashboard https://www.nudgesecurity.com/changelog/track-passkey-adoption-and-storage-in-the-new-passkey-usage-dashboard Fri, 14 Aug 2026 09:22:27 GMT Nudge Security adds a Passkey usage dashboard to track org-wide passkey adoption, storage location, and per-user detail. • Adds the `Dashboards > Passkey usage` dashboard, showing org-wide passkey adoption rate, top apps used with passkeys, and per-provider storage breakdown with a toggle between number of passkeys and number of users. • Surfaces device-loss survivability and login-verification status for each passkey detected by the browser extension. • Adds per-employee passkey usage detail on each user's user details page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog https://www.nudgesecurity.com/changelog Fri, 31 Jul 2026 16:20:12 GMT Nudge Security adds Amazon Quick Suite AI monitoring, agent discovery, and enforced SSO login restrictions. • Detects sensitive data (secrets, PII, financial, health) shared in Amazon Quick Suite AI conversations via browser extension monitoring. • Discovers AI agents built on Amazon Quick and surfaces them in the AI agents inventory under Identities, with creator, components, and risk insights. • Enables organizations to enforce SSO-only login, disabling Google and Microsoft sign-in methods so all authentication routes through the configured IdP (e.g., Okta) with its MFA and conditional access controls. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/detect-sensitive-data-shared-in-amazon-quick-suite https://www.nudgesecurity.com/changelog/detect-sensitive-data-shared-in-amazon-quick-suite Thu, 30 Jul 2026 15:46:25 GMT Nudge Security AI conversation monitoring now detects sensitive data entered into Amazon Quick Suite chats. • Detects secrets, PII, financial data, and health data shared in Amazon Quick Suite (Amazon's agentic AI platform) via AI conversation monitoring. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/discover-ai-agents-built-on-amazon-quick https://www.nudgesecurity.com/changelog/discover-ai-agents-built-on-amazon-quick Thu, 30 Jul 2026 15:46:25 GMT Nudge Security now discovers AI agents built on Amazon Quick, surfacing creator, components, and risk insights in your AI agents inventory. • Discovers AI agents your team builds on Amazon Quick (AWS's agentic AI platform) via browser extension, adding them to the AI agents inventory under Identities with creator, components, and risk insights. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/enforce-sso-login-for-nudge-security https://www.nudgesecurity.com/changelog/enforce-sso-login-for-nudge-security Wed, 29 Jul 2026 15:45:40 GMT Nudge Security now lets admins enforce SSO-only login, disabling Google/Microsoft sign-in and routing all auth through your IdP. • Adds SSO login enforcement that disables alternative sign-in methods (Sign in with Google, Sign in with Microsoft) org-wide, routing all logins through your configured IdP (e.g., Okta) to inherit its MFA, conditional access, and deprovisioning controls. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog https://www.nudgesecurity.com/changelog Thu, 23 Jul 2026 16:01:07 GMT Nudge Security adds admin audit log export, inherent/residual risk scores, and automatic business criticality tiers for SaaS and AI apps. • Exports a complete admin activity log as CSV, capturing OAuth revocations, role changes, field/setting updates, and app connect/disconnect events (Settings > Audit event). • Introduces inherent and residual risk scores (Low/Medium/High/Critical) for every SaaS and AI vendor, with transparent factor breakdowns covering vendor security posture, internal deployment risk, and compensating controls — now in open beta. • Continuously recalculates risk scores as conditions change (e.g., new MCP server connections, vendor breach disclosures) and surfaces recommended actions ranked by projected residual risk reduction. • Automatically assigns business criticality tiers (Low/Medium/High/Critical) to every app based on inferred data types, enabling inventory filtering across 27 distinct data types with no manual research — now in open beta. • Allows customization of data sensitivity tiers per organization's data governance model, with business criticality recalculating automatically on change (Settings > Risk). Breaking changes: • Previously tagged data types are no longer in the main Data Types field; they now appear under Data Types (Legacy), separate from the new automatically populated Data Types field. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/export-a-complete-log-of-admin-activity https://www.nudgesecurity.com/changelog/export-a-complete-log-of-admin-activity Wed, 22 Jul 2026 15:27:34 GMT Nudge Security adds exportable admin audit log capturing OAuth revocations, role changes, and app connect/disconnect events. • New audit log records every administrative action — OAuth revocations (with reason), role changes, field and setting updates, and app connect/disconnect events — exportable as CSV for SOC 2 and compliance evidence. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/know-your-real-vendor-risk-with-inherent-and-residual-risk-scores-now-in-open-beta https://www.nudgesecurity.com/changelog/know-your-real-vendor-risk-with-inherent-and-residual-risk-scores-now-in-open-beta Wed, 22 Jul 2026 15:27:34 GMT Nudge Security adds continuously updated inherent and residual risk scores for every SaaS and AI vendor, now in open beta. • Adds inherent and residual risk scores for every SaaS and AI vendor, mapped to Low/Medium/High/Critical levels and recalculated automatically as risk factors change. • Surfaces a transparent breakdown of risk drivers: vendor security posture, internal deployment/usage factors (e.g., critical downstream connections, AI agents), and compensating controls. • Provides recommended actions ranked by projected residual risk reduction so teams know what to remediate first. • Scores every discovered app on Day One without requiring vendor cooperation, covering the long tail of shadow IT and AI apps. • Continuously monitors for new risk signals — including new MCP server connections and vendor breach disclosures — and updates scores in real time. • Integrates risk scores into the app inventory with filtering support and a dedicated Risk tab on each app overview. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/data-types-and-business-criticality-tiers-open-beta https://www.nudgesecurity.com/changelog/data-types-and-business-criticality-tiers-open-beta Wed, 22 Jul 2026 15:27:34 GMT Nudge Security adds automatic business criticality tiers and 27 data-type filters for SaaS/AI inventory, now in open beta. • Automatically assigns each app a business criticality tier (Low, Medium, High, or Critical) based on inferred data types the vendor typically handles. • Filters SaaS and AI inventory across 27 distinct data types with no manual research required. • Enables customization of data sensitivity tiers to match your organization's data governance model via Settings > Risk. • Surfaces security posture findings selectively for Critical and High tier apps, reducing noise for lower-risk apps. • Displays business criticality tiers and data types within the app inventory view and individual app overviews. Breaking changes: • Previously tagged data types are moved to a 'Data Types (Legacy)' field, separate from the new automatically populated 'Data Types' field. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/address-sprawling-oauth-and-browser-extension-risk-with-new-nudge-security-ai-agents https://www.nudgesecurity.com/changelog/address-sprawling-oauth-and-browser-extension-risk-with-new-nudge-security-ai-agents Wed, 15 Jul 2026 22:57:40 GMT Nudge Security adds two AI agents to automatically assess and remediate OAuth grant and browser extension risk. • New OAuth Grant Risk Analyst AI agent reviews newly discovered OAuth grants, flags overly permissive or high-risk ones, and resolves them by automatically revoking access or nudging the grantor — with human-in-the-loop oversight. • New Browser Extension Risk Analyst AI agent inspects installed browser extension artifacts and metadata, flags malicious, compromised, or misrepresented extensions, and orchestrates disable and uninstall workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/create-jira-tickets-from-your-findings https://www.nudgesecurity.com/changelog/create-jira-tickets-from-your-findings Mon, 13 Jul 2026 10:06:56 GMT Nudge Security adds native Jira integration to create, map, and auto-close tickets directly from security findings. • New Jira integration creates tickets directly from any finding, pre-filled with finding details and fix recommendations. • Supports mapping tickets to Jira project, work type, priority, assignee, and reporter during creation. • Maintains a linked audit trail between Nudge Security findings and their associated Jira issues. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/discover-ai-agents-from-the-browser https://www.nudgesecurity.com/changelog/discover-ai-agents-from-the-browser Mon, 13 Jul 2026 10:06:56 GMT Nudge Security can now discover AI agents built by employees on platforms without a public API, via its browser extension. • Discovers AI agents employees create across platforms lacking public APIs — including Cursor automations, Retool, Zapier Agents, ChatGPT workspace agents, OpenAI Agents Workflows, Atlassian Rovo (Jira, Bitbucket), Zoom AI Workflows, and HyperAgent — via the browser extension. • Surfaces discovered agents in the AI agents inventory under Identities, showing creator, components, and risk insights for each agent. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/google-drive-external-share-discovery https://www.nudgesecurity.com/changelog/google-drive-external-share-discovery Mon, 13 Jul 2026 10:06:56 GMT Nudge Security adds Google Drive external file share discovery and revocation in open beta. • New Google Drive integration surfaces every externally shared file, folder, and Shared Drive across a Google Workspace tenant in a single view. • Enables filtering external shares by domain to see everything shared with a specific external company for targeted cleanup. • Per-item access controls let administrators tighten or revoke external share permissions with a confirmation step that details scope before changes are applied. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/security-posture-findings-now-mapped-to-compliance-frameworks https://www.nudgesecurity.com/changelog/security-posture-findings-now-mapped-to-compliance-frameworks Mon, 13 Jul 2026 10:06:56 GMT Nudge Security maps security posture findings to SOC 2, NIST CSF 2.0, ISO 27001, HIPAA, and OWASP Top 10 Agentic AI Security frameworks. • Maps security posture findings to five compliance frameworks: SOC 2, NIST CSF 2.0, ISO 27001, HIPAA, and OWASP Top 10 Agentic AI Security. • Adds compliance framework filtering on the Security Posture Findings view to surface every control violation across a SaaS estate at a glance. • Enables drill-down into any finding to view the specific controls it violates alongside guided remediation in the same panel. • Exports audit-ready reports with compliance framework and control columns included. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-automox-beyondtrust-and-ping-identity https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-automox-beyondtrust-and-ping-identity Mon, 13 Jul 2026 10:06:56 GMT Nudge Security adds connected app integrations for Automox, BeyondTrust, and Ping Identity • New Automox connected app enables centralized visibility into accounts, activity, and misconfigurations for the endpoint management platform. • New BeyondTrust connected app brings privileged access management activity and account data into the Nudge Security SaaS inventory. • New Ping Identity connected app surfaces identity provider accounts and misconfigurations alongside the rest of your SaaS stack. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-clockify-acronis-and-onelogin https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-clockify-acronis-and-onelogin Mon, 13 Jul 2026 10:06:56 GMT Nudge Security adds connected app integrations for Clockify, Acronis, and OneLogin. • Adds connected app integration for Clockify, enabling centralized visibility into accounts, activity, and misconfigurations. • Adds connected app integration for Acronis, enabling centralized visibility into accounts, activity, and misconfigurations. • Adds connected app integration for OneLogin, enabling centralized visibility into accounts, activity, and misconfigurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-gitlab-informatica-and-logz-io https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-gitlab-informatica-and-logz-io Mon, 13 Jul 2026 10:06:56 GMT Nudge Security adds connected app integrations for GitLab, Informatica, and Logz.io • Adds connected app integration for GitLab, enabling centralized visibility into accounts, activity, and misconfigurations. • Adds connected app integration for Informatica, extending SaaS security posture coverage to the data integration platform. • Adds connected app integration for Logz.io, bringing log management and observability tooling into unified SaaS visibility. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-greenhouse-codacy-mulesoft-and-oracle-cloud https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-greenhouse-codacy-mulesoft-and-oracle-cloud Mon, 13 Jul 2026 10:06:56 GMT Nudge Security adds connected apps for Greenhouse, Codacy, MuleSoft, and Oracle Cloud. • Adds connected app integration for Greenhouse to centralize visibility into accounts, activity, and misconfigurations. • Adds connected app integration for Codacy to centralize visibility into accounts, activity, and misconfigurations. • Adds connected app integration for MuleSoft to centralize visibility into accounts, activity, and misconfigurations. • Adds connected app integration for Oracle Cloud to centralize visibility into accounts, activity, and misconfigurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-lastpass-bamboohr-and-trello https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-lastpass-bamboohr-and-trello Mon, 13 Jul 2026 10:06:56 GMT Nudge Security adds connected app integrations for LastPass, BambooHR, and Trello. • Adds connected app integration for LastPass, enabling centralized visibility into accounts, activity, and misconfigurations. • Adds connected app integration for BambooHR, enabling centralized visibility into accounts, activity, and misconfigurations. • Adds connected app integration for Trello, enabling centralized visibility into accounts, activity, and misconfigurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-sentinelone-druva-gitguardian-kong-and-mural https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-sentinelone-druva-gitguardian-kong-and-mural Mon, 13 Jul 2026 10:06:56 GMT Nudge Security adds connected app integrations for SentinelOne, Druva, GitGuardian, Kong, and Mural. • New SentinelOne connected app integration for centralized visibility into accounts, activity, and misconfigurations. • New Druva connected app integration for centralized visibility into accounts, activity, and misconfigurations. • New GitGuardian connected app integration for centralized visibility into accounts, activity, and misconfigurations. • New Kong connected app integration for centralized visibility into accounts, activity, and misconfigurations. • New Mural connected app integration for centralized visibility into accounts, activity, and misconfigurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/security-posture-findings-now-mapped-to-compliance-frameworks https://www.nudgesecurity.com/changelog/security-posture-findings-now-mapped-to-compliance-frameworks Thu, 25 Jun 2026 00:00:00 GMT Security posture findings mapped to SOC 2, NIST CSF 2.0, ISO 27001, HIPAA, and OWASP Top 10 Agentic AI Security frameworks. • Adds filtering of security posture findings by specific compliance framework • Enables exporting audit-ready reports with compliance framework and control columns • Shows specific controls violated within the finding detail panel Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/create-jira-tickets-from-your-findings https://www.nudgesecurity.com/changelog/create-jira-tickets-from-your-findings Wed, 24 Jun 2026 00:00:00 GMT Nudge Security adds Jira integration with auto-create and auto-close capabilities accessible via Settings > Ticketing. • Admins can connect Jira by navigating to Settings > Ticketing to enable ticket creation from findings • Findings can now create pre-filled Jira tickets mapped to project, work type, priority, assignee, and reporter Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-automox-beyondtrust-and-ping-identity https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-automox-beyondtrust-and-ping-identity Fri, 19 Jun 2026 00:00:00 GMT Nudge Security adds connected apps for Automox, BeyondTrust, and Ping Identity • Adds Automox as a supported integrated application for centralized visibility Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-gitlab-informatica-and-logz-io https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-gitlab-informatica-and-logz-io Wed, 17 Jun 2026 00:00:00 GMT Nudge Security adds connected apps for GitLab, Informatica, and Logz.io to centralize SaaS visibility. • Adds support for a new GitLab connected app to Nudge Security integrations. • Adds support for a new Informatica connected app to Nudge Security integrations. • Adds support for a new Logz.io connected app to Nudge Security integrations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-greenhouse-codacy-mulesoft-and-oracle-cloud https://www.nudgesecurity.com/changelog/strengthen-your-saas-security-posture-with-our-latest-connected-apps-for-greenhouse-codacy-mulesoft-and-oracle-cloud Fri, 05 Jun 2026 00:00:00 GMT Nudge Security adds connected apps for Greenhouse, Codacy, MuleSoft, and Oracle Cloud • Adds `Greenhouse` as a new connected app integration • Adds `Codacy` as a new connected app integration • Adds `MuleSoft` as a new connected app integration • Adds `Oracle Cloud` as a new connected app integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/nudge-security