shadow-it
(9)
Nudge Security
Nudge Security is an Austin-based cybersecurity company that helps organizations discover and govern the SaaS and AI applications their employees adopt, often without IT's knowledge. Founded in 2021 by Russell Spitler and Jaime Blasco, the platform combines Day One SaaS and AI app discovery, security posture management, identity governance, third-party risk, and spend management, then reaches employees directly with 'security nudges' via browser, Slack, and Teams to guide safer choices without blocking work. It raised a $22.5M Series A in November 2025 and serves nearly 200 customers.
Torii
Torii is a SaaS Management Platform (SMP) that helps IT and finance teams discover, optimize, and govern the software running across their organization. Founded in 2016 by three serial entrepreneurs, Torii pioneered a discovery-first approach that surfaces shadow IT - and, more recently, shadow AI - through browser extensions, SSO, direct integrations, and financial data. On top of that visibility it layers spend analytics, license optimization, and no-code automation for tasks like onboarding, offboarding, and renewals. Headquartered in New York with R&D in Israel, Torii counts customers such as Instacart, Bumble, and Palo Alto Networks, and was named a Leader in Gartner's 2025 Magic Quadrant for SaaS Management Platforms.
Valence Security
Valence Security is a SaaS and AI security company that helps enterprises find and fix risks created by SaaS and AI sprawl. Its platform unifies SaaS discovery, SaaS Security Posture Management (SSPM), AI Security Posture Management (AI-SPM), and Identity Threat Detection and Response (ITDR), then pairs that visibility with one-click and collaborative remediation workflows that engage business users to actually close gaps. Founded in 2021 and backed by Microsoft's M12, YL Ventures, and Porsche Ventures, Valence positions itself as a leader in securing the modern, agentic SaaS estate.
CyCognito
CyCognito is a cybersecurity company that builds an external exposure management platform. It maps an organization's internet-facing attack surface the way an attacker would - discovering unknown, unmanaged, and forgotten assets across cloud, web, and APIs, then testing and prioritizing the risks that actually matter. Founded in 2017 by former Israeli intelligence (Unit 8200) operators, CyCognito counts large enterprises like Tesco, Colgate-Palmolive, Panasonic and Hitachi among its customers, and raised a $100M Series C in 2021 at an $800M valuation.
BRM
BRM is an AI-powered vendor management and procurement platform that gives finance, legal, and IT teams a complete, organized view of every vendor, contract, and renewal. Its AI 'SuperAgents' automatically discover vendors across a company's email, ERP, corporate cards, and other systems, extract contract terms, build a live renewal calendar, monitor compliance, and even help negotiate renewals - replacing the spreadsheets and manual data entry that procurement has long depended on.
dope.security
dope.security is a Mountain View cybersecurity startup that rebuilt the Secure Web Gateway (SWG) so it runs directly on the endpoint instead of routing traffic through a vendor's cloud datacenter. Founded in 2021 by ex-Symantec and Forcepoint product leader Kunal Agarwal, its 'fly-direct' architecture inspects web traffic on-device, claiming faster performance, fewer outages, and better privacy than legacy cloud proxies. The company has expanded from its core dope.swg product into AI-powered data protection with CASB Neural and DOPAMINE DLP, backed by roughly $20M from GV (Google Ventures) and Boldstart Ventures.
Productiv
Productiv is a SaaS and AI portfolio governance platform that helps enterprise IT teams discover, measure, and right-size every application employees actually use - including the AI tools nobody told them about. Founded in 2018 in Palo Alto, the company has raised $73M and now counts companies like DocuSign, Robinhood and Okta among its customers.
Zluri
Zluri is a next-gen SaaS Management and Identity Governance platform that helps IT and security teams discover every app and identity inside an enterprise, automate joiner-mover-leaver workflows, and run access reviews without spreadsheets. Founded in 2020 and headquartered in San Francisco with engineering in Bengaluru, it serves 250+ enterprise customers including Monday.com, Tipalti, Whoop, Razorpay, and Traveloka.
Spin.AI
Spin.AI is an AI-powered SaaS security and data-protection company based in Palo Alto. Its SpinOne platform unifies SaaS Security Posture Management, ransomware defense, automated backup and recovery, and browser extension risk control for Google Workspace, Microsoft 365, Salesforce, and Slack - serving more than 1,500 organizations across 100+ countries.