Josys Discovered Apps reveal the Shadow IT apps used within an organization by identifying and assessing the associated risks through their Risk Scoring System. As the scoring system is limited to the baseline evaluation, to fully understand SaaS sprawl risks and apps with unknown or incomplete risk profiles, Josys has integrated advanced AI technologies to provide comprehensive app insights. This enables understanding the reasons why apps are high-risk and focuses on Generative AI to uncover emerging threats. As a result, an intelligent overview of discovered apps is presented to the IT Admin to make informed decisions. Please read our blog on AI-Powered SaaS Risk Analyzer Controls Risk with Confidence to learn more.
SaaS Risk Analysis - an AI-Powered Risk Feature
This feature provides comprehensive information on the security and risky profiles associated with the discovered apps. This enables IT Admin to evaluate the risks and make informed decisions during license procurement, application purchases, and SaaS assessments.
Unlike the traditional security assessment approach that depends on network probes (SSL, TLS, CSP, Cipher strength, CVE), Josys uses publicly accessible crowdsourced data aligned with the ScuBA framework to detect security threat details.
AI Risk analyzer risk level parameters
Risk level determination based on security score
Low Risk: 81-100
Medium Risk: 61-80
High Risk: 0-60
Steps to Access SaaS Risk Analysis
Step 1: Navigate to the Discovered Apps from the Apps menu and click App Risk Assessment.
Step 2: Search for the app and click Review App for the respective app.
Here’s how security risk information is structured for the app.
1. Risk Profile Overview: Displays the Risk Level of the apps, followed by their Security Score, app review-based Rating, Category, and an explanation contributing to the risk level assigned to the app.
2. Gen AI (Generative): Covers data privacy details while sharing information with third-party GenAI vendors and using data for model training. Click ⓘ to learn more about it.
3. Security Postures: Provides a comprehensive view of security practices, including:
- Access controls such as RBAC (Role-Based Access Control), SSO (Single Sign-On) support, and MFA (Multi-Factor Authentication) to ensure secure user access.
- SSO Support to ensure secure authentication.
- Audit Logs for monitoring the app usage activity and ensuring compliance.
- IP Reputation Status
- Data Protection Rating
- Status Page
4. App URLs
5. Operational Risk includes the details of privacy risks and exposure of the application’s attack surface, and the status of disaster recovery and business continuity plans.
6. Legal & Compliance provides the privacy policy, data policy and procedures, and terms and conditions information.
7. App Details includes detailed information about the app.
8. Report Data Errors allows users to report any AI-generated errors.
