Topic starter
22/06/2026 10:23 am
TL;DR: Demand for SaaS and AI governance across the workforce is rising as embedded AI, integrations, and non-human identities create a governance gap that traditional controls do not inventory well, according to Nudge Security. Nudge Security raised $22.5 million in Series A funding led by Cerberus Ventures while reporting 3x ARR growth for two consecutive years and nearly 200 customers.
Editorial analysis by NHI Mgmt Group, based on content published by Nudge Security: “Nudge Security Raises $22.5M Series A to Secure Workforce AI and SaaS”.
Key questions
Q: Where does workforce SaaS governance fail when embedded AI and integrations multiply?
A: It fails when governance is limited to approved app lists and named users.
Q: Why do non-human identities create extra risk in SaaS environments?
A: Non-human identities often carry durable access, broad permissions, and weaker behavioural oversight than human users.
Q: What are the signs that SaaS governance is lagging AI adoption?
A: Common signs include surprise AI-enabled apps, unexplained integrations, inconsistent ownership of app-to-app connections, and access reviews that cover people but not delegated identities.
Practitioner guidance
- Inventory apps, integrations, and delegated identities together Build a single view of SaaS applications, embedded AI features, OAuth grants, API keys, and automation accounts so that ownership and scope can be reviewed in one place.
- Extend access reviews beyond named users Include service accounts, tokens, and app-to-app connections in recertification so machine access is reviewed on the same cycle as employee access.
- Add lifecycle offboarding for SaaS connections Revoke integrations, machine credentials, and stale delegated access when users leave teams, apps change owners, or tools are retired.
Bottom line: Workforce SaaS governance now has to cover human users, embedded AI, and non-human identities in one control model.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
22/06/2026 11:17 am
Workforce SaaS governance is becoming an identity problem, not just an application problem. The article reflects a market in which discovery, access review, and offboarding must now account for apps, integrations, and delegated machine access together. That is a structural change in governance scope, and it pushes IAM and SaaS teams to treat connected services as first-class identity objects.
A few things that frame the scale:
- 1 in 3 organisations encountered suspicious AI agent activity in 2025, and 99.4% experienced a SaaS or AI ecosystem incident.
A question worth separating out:
Q: How should teams respond when SaaS tools accumulate hidden machine access?
A: They should treat hidden machine access as an identity lifecycle issue and remove stale delegated privileges as part of offboarding and recertification. That includes revoking obsolete tokens, documenting owners for each integration, and bringing app connections into the same governance cadence used for human access.
👉 Read our full editorial: Nudge Security's funding round reflects AI and SaaS governance demand