nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

🗓️ Weekly Updates: LastPass Pulse

7-12-2026: Weekly Update: LastPass Pulse: SaaS Discovery

Do You Know Which SaaS Apps Are Really Being Used in Your Organization?

Employees often adopt tools on their own; from free AI assistants to trial subscriptions and personal accounts used for work. While convenient, these unapproved apps can create security risks, increase costs, and make compliance more difficult.

In a 2025 survey, 55% of employees reported adopting SaaS applications without involving their security team. (linked)

That's where SaaS Discovery comes in. It helps organizations identify all the applications being used across the business; including shadow IT and unauthorized AI tools, so companies can:

Uncover hidden security risks
Understand where company data is stored
Eliminate duplicate subscriptions and unused licenses
Maintain an accurate inventory for compliance and audits
Improve visibility into employee technology usage

There are many approaches to SaaS discovery, from enterprise-grade solutions that use CASBs, network monitoring, endpoint agents, and API integrations, to lighter-weight options designed for small and midsize businesses.

At LastPass, we believe visibility shouldn't require a complex security stack. Our browser-based SaaS discovery approach helps organizations gain insight into the applications their teams are actually using, making it easier to strengthen security, reduce costs, and stay in control.

Key SaaS Protect Capabilities

Set SaaS Protect usage rules for users and groups, helping enforce approved application usage across your organization.
Persistent Monitoring enables admins to collect SaaS Monitoring events and enforce SaaS Protect usage rules even when users do not have an active LastPass browser extension session.
Admins can generate and share a sign-up link for multiple users at once, then track, approve, or decline responses directly from the Admin Console.

We’ve rounded up some insightful security articles and resources from our blog and across the web—click on the titles below to explore them.

From our Blog:

How to Create and Enforce a Password Management Policy (with a Free Template)
Your 2026 Agentic AI Security Checklist: 10 Controls to Validate Before You Deploy

From the web:

MITechNews.com, “How to Audit and Protect Digital Business Assets Before Succession” by Mike Brennan
Cybersecurity Dive, “Critical flaw in SimpleHelp exploited in attacks targeting sensitive credentials” by David Jones
Cyber Security News, “Hackers Use Recruiter Phishing Emails and Fake Career Pages to Harvest Gmail Logins” by Tushar Subhra Dutta
CSO Online, “Cybercriminals exploit India's tax filing season with a dual-malware campaign” by Shweta Sharma
Help Net Security, “Thousands of malicious AI skills found capable of stealing data, running malware” by Anamarija Pogorelec

New in our Support Site:

Don't miss any updates! If you click follow on the right hand side, we can send you these weekly updates.