Nudge Security helps IT and security teams keep track of the SaaS and AI tools employees adopt on their own. It finds the apps, accounts, OAuth grants and AI agents created across an organisation, checks them for risk, and supports identity governance tasks such as access reviews and offboarding.
The platform is aimed at the “Workforce Edge”: the attack surface that grows each time an employee signs up for a new tool, connects one app to another or builds an agent. Instead of blocking those tools, it prompts employees to fix risky settings themselves.
At A Glance
| Vendor | Nudge Security |
|---|---|
| Category | SaaS and AI security, identity governance |
| Identities covered | Employee SaaS accounts, non-human identities, OAuth grants, AI agents |
| Deployment | SaaS, connected to Google Workspace or Microsoft 365, with an optional browser extension |
| Agentic AI | Discovery of AI agents on agent platforms and from the browser |
| Customers | Netflix, KarmaCheck, Watershed, Snowflake |
| Founded | 2021, Austin, Texas |
| Market classification | Identity Security Posture Management; also Identity Governance & Administration |
What Nudge Security Does
Employees take up SaaS and AI tools faster than IT can follow, so most organisations have no complete record of what is in use or who has access to it. Nudge Security builds a historical inventory of apps, accounts, identities and spend from the automated emails that SaaS providers send when an account is created or changed. In effect, email serves as the security event log for SaaS.
That inventory feeds posture checks, risk scoring and governance workflows. Automated guardrails then reach the employee directly, in the browser, Slack or Teams, and ask them to enable MFA, remove an unused grant or review a new AI tool. Discovery of SaaS and AI apps, integrations and human and non-human identities starts on the first day of deployment.
Products
SaaS And AI Discovery
Discovery gives a running list of every SaaS and AI app in use, with the accounts behind each one. Security teams see unmanaged accounts, which sign-in methods each account uses, and whether SSO and MFA are in place. OAuth grants and their scopes are listed too, so overly permissive or inactive grants can be revoked. Group and individual SaaS identities are monitored over time.
AI Governance
AI governance is for organisations that want to allow AI tools while keeping sensitive data out of them. It applies policy-driven guardrails, guided remediation and risk alerts, and watches AI conversations for sensitive data shared with chatbots through file uploads or copy and paste. Risk assessments update continuously so teams know which tools to look at first.
AI Agent Discovery
AI Agent Discovery is for teams that need to know which agents employees have built and what those agents can reach. It records each agent’s permissions, resources and capabilities, the systems it connects to and the person who created it. It flags publicly accessible agents, hardcoded credentials and unauthenticated MCP connections, and routes each finding to the agent’s creator to fix. Through the browser extension it also finds agents on platforms with no public API, including Cursor automations, Retool, Zapier Agents, ChatGPT workspace agents, OpenAI Agents Workflows, Atlassian Rovo, Zoom AI Workflows and HyperAgent.
Security Posture And Identity Governance
This module covers the governance work that follows discovery:
- SaaS security posture management for misconfigurations and identity risks
- User access reviews and employee offboarding
- Third-party risk management, with vendor reviews and supply chain breach alerts
- SaaS sprawl and cost management
How It Works
Setup is a single connection to Google Workspace or Microsoft 365, with no network proxies or complex API integrations required.
| Component | What it does |
|---|---|
| Email-based discovery | A read-only connection to the email platform picks out machine-generated messages from SaaS providers and uses them to build the inventory. |
| Connected apps | API connections to platforms such as Okta add account, login, configuration and SSO data and support posture checks. |
| Browser extension | Runs in the employee’s browser, where it delivers guardrails and collects agent data that platform APIs do not expose. |
| Workflow delivery | Nudges and findings reach employees through the browser and chat, and tickets go to the service desk. A public API is available for other tooling. |
Identities And Systems Covered
| Human identities | Employee SaaS accounts, including unmanaged accounts and their SSO and MFA status. |
|---|---|
| Non-human identities | Discovered alongside human accounts, from the same sources. |
| OAuth grants | App-to-app integrations, grants and scopes created by employees. |
| AI agents | Agents built on Microsoft Copilot Studio, Salesforce Agentforce, n8n and other platforms, held in an AI agents inventory. |
| Identity providers | Okta and Microsoft Entra ID. |
| SaaS platforms | Microsoft 365, Google Workspace, Salesforce, Snowflake and Zoom, among others. |
Integrations
| Area | Integrations |
|---|---|
| Collaboration | Slack, Microsoft Teams |
| Ticketing | Jira, ServiceNow |
Company Background
| Founded | 2021. |
|---|---|
| Headquarters | Austin, Texas, United States. |
| Leadership | Russell Spitler, Co-Founder and CEO; Jaime Blasco, Co-Founder and CTO. |
| Funding | A $16.5 million seed round with Ballistic Ventures and Forgepoint Capital, then a $22.5 million Series A in November 2025 led by Cerberus Ventures, with Ballistic Ventures, Forgepoint Capital and Squadra Ventures. |
| Growth | Nearly 200 reported customers since launch, with a reported tripling of ARR in each of two consecutive years. |
| Recognition | Mentioned in the inaugural 2024 Gartner Magic Quadrant for SaaS management platforms. |
Note: This overview is compiled from Nudge Security’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.