SaaS Security Posture Management for Startups

Secure every SaaS tool your company relies on with practical, command-driven hardening.

1. When to Use This Skill

• SOC 2 preparation — auditors need evidence of MFA, access controls, and OAuth governance.
• Suspicious OAuth app — an employee authorized a third-party app with broad scopes.
• SaaS sprawl — teams sign up for tools with company email and nobody tracks them.
• Post-incident hardening — after phishing or credential leaks, tighten every surface.

2. SaaS Inventory Audit

Google Workspace — OAuth Grants

gam all users show tokens > oauth_tokens_audit.csv