{"id":125946,"date":"2023-02-15T09:00:00","date_gmt":"2023-02-15T17:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?p=125946"},"modified":"2023-11-15T10:37:05","modified_gmt":"2023-11-15T18:37:05","slug":"microsoft-shifts-to-a-comprehensive-saas-security-solution","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/","title":{"rendered":"Microsoft shifts to a comprehensive SaaS security solution"},"content":{"rendered":"\n<p>Software as a service (SaaS) apps are ubiquitous, hybrid work is the new normal, and protecting them and the important data they store is a big challenge for organizations. Today, 59 percent of security professionals find the SaaS sprawl challenging to manage<sup>1<\/sup> and have identified cloud misconfigurations as the top risk in their environment.<sup>2<\/sup> <\/p>\n\n\n\n<p>To combat these attacks effectively, security teams need a new approach that protects their data within cloud apps beyond the traditional scope of cloud access security brokers (CASBs). That\u2019s why <a href=\"https:\/\/www.microsoft.com\/security\/business\/siem-and-xdr\/microsoft-defender-cloud-apps\">Microsoft Defender for Cloud Apps<\/a> is now delivering full protection of SaaS applications. This includes new investments in SaaS Security Posture Management (SSPM), advanced threat protection as part of Microsoft\u2019s extended detection and response (XDR) solution, and app-to-app protection\u2014while continuing to build upon other powerful <a href=\"https:\/\/www.microsoft.com\/security\/business\/security-101\/what-is-a-cloud-access-security-broker-casb\">CASB capabilities<\/a> like Shadow IT discovery and information protection.<\/p>\n\n\n\n<p>Today, we are excited to announce that Defender for Cloud Apps is extending its SSPM capabilities to some of the most critical apps organizations use today, including Microsoft 365, Salesforce,<sup>3<\/sup> ServiceNow,<sup>4<\/sup> Okta,<sup>5<\/sup> GitHub, and more.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A holistic SaaS security approach<\/h2>\n\n\n\n<p>Historically, CASBs have been the main tool to address SaaS security needs with Shadow IT discovery, visibility into cloud app usage, and protection against app-based threats as the main use cases. However, the uptick in app usage combined with employees accessing company resources outside of the corporate perimeter has introduced new attack vectors. That\u2019s why Defender for Cloud Apps now delivers capabilities to address these new attack vectors across prevention and protection for a more holistic approach throughout the app usage lifecycle. The addition of SSPM enables security teams to improve the organization\u2019s security posture; app-to-app protection addresses a new threat scenario where apps exchange data directly; and the integration into the <a href=\"https:\/\/www.microsoft.com\/security\/business\/siem-and-xdr\/microsoft-365-defender\">Microsoft 365 Defender<\/a> XDR solution enables powerful correlation of signal and visibility across the full kill chain of advanced attacks. These new sets of capabilities, combined with the traditional CASB scenarios, make up the Microsoft approach to holistic SaaS security and will help organizations effectively protect against app-based threats.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1432\" height=\"805\" src=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Picture11.png\" alt=\"Microsoft\u2019s approach to SaaS Security and the core product pillars: discovery, SaaS Security posture management, information protection, threat protection and app to app protection.\" class=\"wp-image-126001\" srcset=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Picture11.png 1432w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Picture11-300x169.png 300w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Picture11-1024x576.png 1024w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Picture11-768x432.png 768w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Picture11-687x385.png 687w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Picture11-1083x609.png 1083w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Picture11-767x431.png 767w, https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Picture11-539x303.png 539w\" sizes=\"(max-width: 1432px) 100vw, 1432px\" \/><\/figure>\n\n\n\n<p>In a recent research paper, <a href=\"https:\/\/aka.ms\/omdiareport\" target=\"_blank\" rel=\"noreferrer noopener\">Omdia applauds Microsoft\u2019s vision of a broader security offering for SaaS and suspects that other vendors will need to emulate its offering<\/a>, analyst firm Omdia recognized this new approach, confirming the need for a holistic strategy to protect cloud apps.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SaaS Security Posture Management is critical to prevention<\/h2>\n\n\n\n<p>Prevention and optimizing their organization\u2019s security posture has become a critical focus area for security teams to limit the number of breaches. A key challenge in securing SaaS apps, however, is that security teams need to research configuration best practices for each app individually, which creates significant overhead. To streamline this process, <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/security-compliance-and-identity\/strengthen-the-security-posture-of-your-saas-apps-with-defender\/ba-p\/3554893\" target=\"_blank\" rel=\"noreferrer noopener\">Defender for Cloud Apps launched SSPM<\/a> in June 2022 to surface misconfigurations and provide recommendations to strengthen an app\u2019s posture.<\/p>\n\n\n\n<p>In preview starting today, Defender for Cloud Apps now provides security posture management for Microsoft 365, Salesforce, ServiceNow, Okta, GitHub, and more. Not only are we expanding the breadth of app coverage but also the depth of assessments and capabilities for each application<strong>. <\/strong>Here is what to expect:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Seamless integration with the Defender for Cloud Apps connector experience<\/strong>: If you have already connected any of these apps to Defender for Cloud, the new SSPM capabilities automatically light up without any additional deployment.<\/li>\n\n\n\n<li><strong>Alignment to best practices and benchmarks: &nbsp;<\/strong>We recommend actions based on industry standards like the Center for Internet Security and follow best practices set by the specific app provider (for example, Salesforce Security Health Check).<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Protect inter-app data exchange with application governance<\/h2>\n\n\n\n<p>In recent years, there has been an increase in attacks involving OAuth applications. Back in April 2022, Github fell victim to a campaign where an attacker used stolen OAuth app tokens to gain access to private user code repositories and began cloning them to exfiltrate data.<sup>6<\/sup> The main challenge with an OAuth app is that it\u2019s difficult to see the level of permissions and the type of data it can access. They often behave unnoticed while still having extensive permissions to access data in other apps on behalf of an employee, which makes them easily susceptible to a compromise.<\/p>\n\n\n\n<p>Defender for Cloud Apps recognizes this open attack vector and the need for stronger app-to-app protection. With the main issue being visibility and governing these apps, upkeeping app hygiene is critical. To help organizations fill this gap, we will soon release a new capability that will allow security teams to gain visibility into unused apps, credentials, and expired credentials. Identified by <a href=\"https:\/\/www.microsoft.com\/security\/business\/identity-access\/azure-active-directory\">Microsoft Azure Active Directory<\/a>, they will be able to see these vulnerabilities and implement a predefined policy with detailed remediation actions, to easily resolve these potential risks.<\/p>\n\n\n\n<p>Unused OAuth apps and credentials can be a backdoor for an adversary to gain access to an organization\u2019s environment to exfiltrate data or use privileged credentials to access sensitive data in another app. By using these new capabilities in Defender for Cloud Apps, organizations will be able to drastically reduce their potential OAuth attack surface.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Defend against advanced attacks using app signal in Microsoft XDR<\/h2>\n\n\n\n<p>While cloud apps continue to be a target for adversaries trying to exfiltrate corporate data, sophisticated attacks often cross modalities\u2014moving laterally from email as the most common entry point, to compromise endpoints, and identities, before ultimately gaining access to in-app data. While CASBs address alert <a href=\"https:\/\/www.microsoft.com\/security\/business\/security-101\/what-is-a-security-operations-center-soc\">security operations center (SOC)<\/a> teams by identifying anomalies like a <a href=\"https:\/\/learn.microsoft.com\/defender-cloud-apps\/policies-threat-protection#detect-mass-download-data-exfiltration\" target=\"_blank\" rel=\"noreferrer noopener\">mass download activity<\/a>, this approach leaves SOC teams without enough context to prioritize their investigation effectively.<\/p>\n\n\n\n<p>That\u2019s why Defender for Cloud Apps is natively integrated into Microsoft 365 Defender. The <a href=\"https:\/\/www.microsoft.com\/security\/business\/security-101\/what-is-xdr\">XDR technology<\/a> correlates signals from the Microsoft Defender suite across endpoints, identities, email, and SaaS apps to provide incident-level detection, investigation, and powerful response capabilities like automatic attack disruption. The integration of SaaS security into an XDR experience gives SOC teams full kill chain visibility and improves operational efficiency with better prioritization and shorter response times to ultimately protect the organization more effectively.<\/p>\n\n\n\n<p>As an integral part of the Microsoft 365 Defender XDR solution, organizations can satisfy both: their SaaS security use cases, as well as leverage the SaaS signals and insights for effective SOC processes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Get started on your SaaS security journey with Microsoft<\/h2>\n\n\n\n<p>It is critical that you protect data and assets by implementing SaaS security principles in your security strategy while empowering users to stay productive.<\/p>\n\n\n\n<p>Microsoft\u2019s unique approach helps security professionals easily start no matter where they are in their app protection journey. Learn how to protect your organization\u2019s apps across the SaaS app management lifecycle through a set of simple steps and best practices:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Explore <a href=\"https:\/\/www.microsoft.com\/security\/business\/siem-and-xdr\/microsoft-defender-cloud-apps\">Microsoft Defender for Cloud Apps<\/a>.<\/li>\n\n\n\n<li>Deep dive into <a href=\"https:\/\/aka.ms\/SSPMandAppHygiene\" target=\"_blank\" rel=\"noreferrer noopener\">SSPM and app hygiene capabilities<\/a>.<\/li>\n\n\n\n<li>Join our upcoming <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/security-compliance-and-identity\/microsoft-defender-for-cloud-apps-saas-security-ama\/ec-p\/3723092#M369\" target=\"_blank\" rel=\"noreferrer noopener\">Ask Microsoft Anything session<\/a> to engage directly with the product team.<\/li>\n<\/ul>\n\n\n\n<p>To learn more about Microsoft Security solutions,&nbsp;<a href=\"https:\/\/www.microsoft.com\/security\/\">visit our&nbsp;website<\/a>.&nbsp;Bookmark the&nbsp;<a href=\"https:\/\/www.microsoft.com\/security\/blog\/\">Security blog<\/a>&nbsp;to keep up with our expert coverage on security matters. Also, follow us on LinkedIn (<a href=\"https:\/\/www.linkedin.com\/showcase\/microsoft-security\/\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Security<\/a>) and Twitter (<a href=\"https:\/\/twitter.com\/@MSFTSecurity\" target=\"_blank\" rel=\"noreferrer noopener\">@MSFTSecurity<\/a>)&nbsp;for the latest news and updates on cybersecurity.<\/p>\n\n\n\n<div style=\"height:45px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\"\/>\n\n\n\n<p><sup>1<\/sup><a href=\"https:\/\/www.bettercloud.com\/stateofsaasops23\/\" target=\"_blank\" rel=\"noreferrer noopener\">2023 State of SaaSOps<\/a>, Better Cloud. 2023.<\/p>\n\n\n\n<p><sup>2<\/sup><a href=\"https:\/\/www.upguard.com\/blog\/saas-security-risks\" target=\"_blank\" rel=\"noreferrer noopener\">Top 7 SaaS Security Risks (and How to Fix Them)<\/a>, Catherine Chipeta. June 13, 2022.<\/p>\n\n\n\n<p><sup>3<\/sup><a href=\"https:\/\/learn.microsoft.com\/defender-cloud-apps\/connect-salesforce\" target=\"_blank\" rel=\"noreferrer noopener\">Connect Salesforce to Microsoft Defender for Cloud Apps<\/a>, Microsoft Learn. February 5, 2023.<\/p>\n\n\n\n<p><sup>4<\/sup><a href=\"https:\/\/learn.microsoft.com\/defender-cloud-apps\/connect-servicenow\" target=\"_blank\" rel=\"noreferrer noopener\">Connect ServiceNow to Microsoft Defender for Cloud Apps<\/a>, Microsoft Learn. February 5, 2023.<\/p>\n\n\n\n<p><sup>5<\/sup><a href=\"https:\/\/learn.microsoft.com\/defender-cloud-apps\/connect-okta\" target=\"_blank\" rel=\"noreferrer noopener\">Connect Okta to Microsoft Defender for Cloud Apps<\/a>, Microsoft Learn. February 5, 2023.<\/p>\n\n\n\n<p><sup>6<\/sup><a href=\"https:\/\/github.blog\/2022-04-15-security-alert-stolen-oauth-user-tokens\/\" target=\"_blank\" rel=\"noreferrer noopener\">Security alert: Attack campaign involving stolen OAuth user tokens issued to two third-party integrators<\/a>, Mike Hanley. April 15, 2022.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Learn how Microsoft Security is transforming its cloud access security broker to a software as a service security solution, empowering organizations to adopt a modern approach to protecting cloud apps.<\/p>\n","protected":false},"author":162,"featured_media":125948,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"_classifai_error":"","footnotes":""},"content-type":[3662],"topic":[3683,3685],"products":[3690,3692,3693,3702,3703],"threat-intelligence":[],"tags":[],"coauthors":[3551],"class_list":["post-125946","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","content-type-news","topic-security-management","topic-siem-and-xdr","products-microsoft-defender","products-microsoft-defender-for-cloud-apps","products-microsoft-defender-xdr","products-microsoft-entra","products-microsoft-entra-id","review-flag-1-1694638265-354","review-flag-2-1694638266-864","review-flag-3-1694638266-241","review-flag-4-1694638266-512","review-flag-5-1694638266-171","review-flag-6-1694638266-691","review-flag-7-1694638266-851","review-flag-lever-1694638263-909","review-flag-new-1694638263-340"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.9 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Microsoft shifts to a comprehensive SaaS security solution | Microsoft Security Blog<\/title>\n<meta name=\"description\" content=\"Microsoft Defender for Cloud Apps is now delivering full protection of SaaS applications, including new investments in SSPM, advanced threat protection, and app-to-app protection.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft shifts to a comprehensive SaaS security solution | Microsoft Security Blog\" \/>\n<meta property=\"og:description\" content=\"Microsoft Defender for Cloud Apps is now delivering full protection of SaaS applications, including new investments in SSPM, advanced threat protection, and app-to-app protection.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-02-15T17:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-11-15T18:37:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Win17_15021_00_N15-1-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"451\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Maayan Bar-Niv\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Win17_15021_00_N15-1-1.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Maayan Bar-Niv\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/\"},\"author\":[{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/maayan-bar-niv\/\",\"@type\":\"Person\",\"@name\":\"Maayan Bar-Niv\"}],\"headline\":\"Microsoft shifts to a comprehensive SaaS security solution\",\"datePublished\":\"2023-02-15T17:00:00+00:00\",\"dateModified\":\"2023-11-15T18:37:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/\"},\"wordCount\":1252,\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Win17_15021_00_N15-1-1.jpg\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/\",\"name\":\"Microsoft shifts to a comprehensive SaaS security solution | Microsoft Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Win17_15021_00_N15-1-1.jpg\",\"datePublished\":\"2023-02-15T17:00:00+00:00\",\"dateModified\":\"2023-11-15T18:37:05+00:00\",\"description\":\"Microsoft Defender for Cloud Apps is now delivering full protection of SaaS applications, including new investments in SSPM, advanced threat protection, and app-to-app protection.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#primaryimage\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Win17_15021_00_N15-1-1.jpg\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Win17_15021_00_N15-1-1.jpg\",\"width\":800,\"height\":451,\"caption\":\"Microsoft Cyber Defense Operations Center.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft shifts to a comprehensive SaaS security solution\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"name\":\"Microsoft Security Blog\",\"description\":\"Expert coverage of cybersecurity topics\",\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\",\"name\":\"Microsoft Security Blog\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Security Blog\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft shifts to a comprehensive SaaS security solution | Microsoft Security Blog","description":"Microsoft Defender for Cloud Apps is now delivering full protection of SaaS applications, including new investments in SSPM, advanced threat protection, and app-to-app protection.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft shifts to a comprehensive SaaS security solution | Microsoft Security Blog","og_description":"Microsoft Defender for Cloud Apps is now delivering full protection of SaaS applications, including new investments in SSPM, advanced threat protection, and app-to-app protection.","og_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/","og_site_name":"Microsoft Security Blog","article_published_time":"2023-02-15T17:00:00+00:00","article_modified_time":"2023-11-15T18:37:05+00:00","og_image":[{"width":800,"height":451,"url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Win17_15021_00_N15-1-1.jpg","type":"image\/jpeg"}],"author":"Maayan Bar-Niv","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Win17_15021_00_N15-1-1.jpg","twitter_misc":{"Written by":"Maayan Bar-Niv","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#article","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/"},"author":[{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/maayan-bar-niv\/","@type":"Person","@name":"Maayan Bar-Niv"}],"headline":"Microsoft shifts to a comprehensive SaaS security solution","datePublished":"2023-02-15T17:00:00+00:00","dateModified":"2023-11-15T18:37:05+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/"},"wordCount":1252,"publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Win17_15021_00_N15-1-1.jpg","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/","name":"Microsoft shifts to a comprehensive SaaS security solution | Microsoft Security Blog","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Win17_15021_00_N15-1-1.jpg","datePublished":"2023-02-15T17:00:00+00:00","dateModified":"2023-11-15T18:37:05+00:00","description":"Microsoft Defender for Cloud Apps is now delivering full protection of SaaS applications, including new investments in SSPM, advanced threat protection, and app-to-app protection.","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#primaryimage","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Win17_15021_00_N15-1-1.jpg","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/02\/Win17_15021_00_N15-1-1.jpg","width":800,"height":451,"caption":"Microsoft Cyber Defense Operations Center."},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/02\/15\/microsoft-shifts-to-a-comprehensive-saas-security-solution\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/"},{"@type":"ListItem","position":2,"name":"Microsoft shifts to a comprehensive SaaS security solution"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","name":"Microsoft Security Blog","description":"Expert coverage of cybersecurity topics","publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization","name":"Microsoft Security Blog","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","width":512,"height":512,"caption":"Microsoft Security Blog"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/"}}]}},"msxcm_display_generated_audio":false,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Security Blog","distributor_original_site_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/125946"}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/users\/162"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/comments?post=125946"}],"version-history":[{"count":0,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/125946\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media\/125948"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media?parent=125946"}],"wp:term":[{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/content-type?post=125946"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/topic?post=125946"},{"taxonomy":"products","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/products?post=125946"},{"taxonomy":"threat-intelligence","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/threat-intelligence?post=125946"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/tags?post=125946"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/coauthors?post=125946"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}