How does Push discover SaaS?

Push uses two methods to provide a full inventory of your SaaS estate. To get full visibility, you must set up an API integration with your primary work platform(s) and install the Push browser extension on employee browsers in your environment.

They each play a role in providing full visibility:

The API integration provides visibility into:

• SaaS applications that your employees access via social login, such as Sign In with Google and Sign In with Microsoft.

• Third-party OAuth integrations they consent to.

• Security risks associated with these platforms, such as a lack of MFA protection and suspicious mail rules created by employee accounts.

Learn more about setting up an API integration and the required permissions in our documentation.

The Push browser extension provides visibility into:

• SaaS applications that your employees access with a username and password.

• Security risks associated with these logins such as leaked, reused, shared or weak credentitals.

Learn more about installing the browser extension and deployment options in our documentation.