Changelog

The Nudge Security browser extension now surfaces and displays the operating system and browser type for extension-generated events, including key additions, file uploads, password resets, file sharing, and more. This information is also available at the individual user level for anyone connected to the browser extension.

‍

With this added detail, you get a clearer picture of how users are accessing resources across different devices and browsers. Deploy the browser extension today to start capturing this context. This helps your team:

• See how and where activity is happening across devices and browsers.
• Pinpoint OS or browser-specific issues that may create vulnerabilities.
• Strengthen threat hunting and incident response with richer forensic data.

Let’s take a look:

IT admins can now configure notification rules based on app approval status to get real-time alerts when employees interact with not permitted apps, like uploading files or granting OAuth access for not permitted applications detected from the browser extension.

Nudge Security is expanding our capabilities to strengthen your SaaS application security and data protection with the addition of our most recent connected app: ServiceNow.

‍

With the new ServiceNow connected app, you can now gain deeper insight into user and identity risks, data risks, and misconfigurations and take action on your findings, allowing you to further strengthen your SaaS security posture.

‍

For more information, refer to our dedicated ServiceNow Connected App webpage or head straight to the product. To learn more about connected apps and how to integrate them today, read our blog.

‍

New to Nudge Security and ready to start connecting your critical SaaS applications? Start exploring with a 14-day free trial.

You can now get notifications for security findings, including those associated with connected apps and the browser extension, delivered straight to Slack, Teams, or your inbox. You can choose what to be notified about based on finding type, status, associated app, or severity so you only see the alerts that matter to you. This way, you'll know right away when something needs attention and can take action faster.

‍

Let’s set one up:

We’ve added a new card to the security tab of the app details page. This new card summarizes each app’s AI data training policy, including whether your data is used for training, available opt-out options, retention periods, and other relevant information. This makes it easier for teams to evaluate SaaS and AI tools by showing how each app handles data without requiring a review of lengthy documentation.

We’ve added a new finding that surfaces weak passwords found in accounts for business apps you’ve labeled as "high" or "critical." Admins can directly nudge users from the finding to reset their password.

This finding, along with additional real-time SaaS usage insights, is only available when you deploy the browser extension. Get deployed now, or learn more about the Nudge Security browser extension here.

You can now deliver nudges and receive notifications on Microsoft Teams. We've expanded our communication platform coverage, allowing organizations using Microsoft Teams to engage their workforce and communicate with stakeholders where important conversations happen. Start nudging now, or check out our feature page for more information.

‍

Let’s take a look:

Our new AI governance playbook guides you through evaluating and categorizing AI tools discovered in your estate. The playbook helps you configure rules and policies that align with your developing governance framework. During this workflow you can:

• Review unapproved AI applications
• Remove not permitted AI applications
• Revoke unnecessary access permissions
• Establish guardrails for managing new AI applications as they’re introduced

Nudge Security now shows you which AI tools have access to sensitive data like email, files, and source code in the AI usage dashboard. You can easily see this information by department and change app status directly in the dashboard, helping you reduce the risk of sensitive data exposure to AI tools.

Our updated onboarding playbook helps you set up a personal app use policy based on the apps we've identified in your environment. You can easily bulk categorize personal apps as “acceptable” or “not permitted,” and take action on them directly within the workflow. This proactive flow helps you mitigate potential risk tied to personal app use and enforce your organization’s policy.