Featured on Mitiga Mic podcast
I recently sat down with Field CISO Brian Contos to talk about securing SaaS in the age of AI on the Mitiga Mic podcast. Securing SaaS has always been challenging for a number of reasons. Fundamental security features such as logging and strong identity support (hello SSO tax) vary considerably across platforms. General preventative controls are thin. Platform features can sometimes feel like they come out of nowhere, and disabling them isn’t always easy or intuitive.
The attack surface has grown to now include copilots, agentic workflows connecting MCP servers, and more. Let’s not forget the shadows SaaS that creeps in or the abandoned platforms that remain once re-orgs happen or business priorities shift.
My advice is to start by understanding the SaaS estate you actually have, prioritize based on what matters to the business, and get scrappy. Procurement and expense systems are surprisingly good sources of signal. Get friendly with your Finance and Procurement teams.
Give it a listen!