| Access control | All security checks involving how users enter a specific app, including excessive or inappropriate permissions |
| Account governance | Ensures user accounts are created, managed, and secured according to policy |
| AI governance | Controls how AI systems are used, secured, and monitored to prevent misuse and data leakage |
| API governance | Controls and monitors how APIs are exposed, accessed, and managed to avoid risks such as unauthorized access or data leaks |
| App governance | Manages permissions, configurations, and risks associated with applications and integrations |
| Authentication | Ensures that only legitimate users or systems can gain access, so there are no unauthorized entry points. |
| Authorization | Defines what authenticated users or systems are allowed to do, ensuring there are no excessive or insufficient privileges. |
| Configuration management | Enforces and maintains secure baseline configurations for systems and applications to prevent vulnerabilities from drift or weak settings |
| Data access | Acceptable methods of retrieving data from other apps, or making sensitive data accessible to authorized users |
| Data classification | Methods ensuring that information is categorized and handled according to sensitivity level. These security checks enforce policies for secure storage, transmission, and access to prevent leakage or unauthorized data exposure. |
| Data governance | Policies for managing and classifying organizational data to prevent exposure, misuse, or regulatory violations |
| Data protection | Ensures technical controls such as encryption and masking are enforced to keep data secure, with misconfiguration potentially leading to data breaches. |
| Device security | Correct configuration of physical and virtual devices to protect against unauthorized access, vulnerabilities, and exposure resulting from mismanaged hardware or endpoints. |
| Domain security | Protects domain configuration, DNS settings, and domain ownership against hijacking or misuse |
| Email security | Methods that protect email systems from threats and data leakage, to minimize exposure from phishing or unauthorized access |
| Endpoint governance | Ensures devices accessing corporate resources meet security and compliance requirements |
| External sharing | Controls and monitors how data is shared outside the organization to prevent exposure |
| Incident response | Defines how security events are detected, managed, escalated, and resolved |
| Integration governance | Manages and secures how systems, services, or applications connect and share data |
| Monitoring | Provides continuous visibility into system activity, configurations, and potential security issues |
| Network boundary | Protects the perimeter between internal and external networks with proper segmentation and controls |
| Network security | Secures internal networks through policies, access restrictions, and threat prevention technologies |
| Non-human access | Methods to secure and configure automated accounts, service identities, and machines to prevent privilege escalation or unauthorized activities by scripts or bots. |
| Platform governance | Oversees policy and controls for the overall SaaS environment to uniformly manage security, compliance, and access risks. |
| Privacy | Compliance score for security checks that protect personal or regulated data |
| Privileged access | Manages and restricts high-level access to critical systems to reduce insider and external risk |
| Resilience | Ensures systems are configured for availability and recovery, so the SaaS environment is not exposed to downtime or service disruptions |
| Secret management | Methods for secure storage, rotation, and access controls of sensitive credentials such as API keys and passwords. These security checks ensure that secrets are not exposed, hardcoded, or accessible to unauthorized entities. |
| Secure SDLC | Integrates security practices throughout the software development lifecycle |
| Session security | Controls how user or system sessions are handled to prevent unauthorized access through session hijacking or timeouts |
| User lifecycle | Ensures users are onboarded, updated, and offboarded securely and consistently |
| Vendor management | Evaluates and monitors third-party vendors to ensure they meet security and compliance standards |
| Vulnerability management | Methods that keep your SaaS apps safe from cyberattacks and data breaches |
Pass
Fail
N/A
Info
Critical 
Low
