Obsidian Security, a leading authority in SaaS security, unveiled its SaaS AI agent defense, providing enterprises with the first purpose-built solution to govern AI agent access across SaaS environments. As SaaS becomes one of the most targeted layers of the enterprise technology stack, Obsidian is tackling the blind spot created by unmanaged AI integrations and excessive privileges, which can amplify enterprise risk.
“The AI agent shift is well underway, and we’re seeing the risks firsthand as we help our customers scale adoption securely,” said Hasan Imam, CEO at Obsidian.
Recent incidents underscore the urgency for robust SaaS security. In the Salesforce attack (UNC6040), threat actors leveraged voice phishing campaigns to gain initial access and run bulk API queries, resulting in large-scale data theft and extortion. Similarly, the Salesloft Salesforce supply chain breach (UNC6395) highlighted vulnerabilities in SaaS-to-SaaS integrations, where a compromised chatbot triggered unauthorized access across Salesforce and downstream services such as Google Workspace, Slack, Amazon S3, and Microsoft Azure. These breaches demonstrate the growing threat of data exfiltration via SaaS integrations.
AI Authority Trend: Algolia Launches Agent Studio for Scalable AI Agents
The rapid adoption of AI agents further intensifies these challenges. Low-code and no-code platforms—including Microsoft Copilot Studio, ChatGPT Enterprise, Salesforce Agentforce, and n8n—enable employees to deploy agents that autonomously chain tasks, query data, and execute decisions. Often, these agents carry broad privileges, long-lasting tokens, and move sensitive data at machine speed. If compromised, they can quickly leak information, escalate access, and spread laterally across SaaS applications, causing extensive damage.
“87% of enterprises have Microsoft Copilot enabled, more than half the agents access sensitive data, 90% are over-permissioned, and move 16 times more data than humans accessing SaaS applications. These risks are not theoretical, they’re active risks inside enterprises today, often without their awareness,” Hasan Imam added.
Traditional security tools fail to monitor machine-driven activity, contextualize privileges, or enforce controls at the pace of autonomous agents. “The difference between a major intrusion and successful containment comes down to speed,” said Sunil Seshadri, EVP and CSO at HealthEquity and ex-CISO at Wells Fargo, Visa, and NYSE. “Most security teams already struggle to react to incidents fast enough and AI agents raise the stakes even higher… Obsidian flips that dynamic by detecting issues in near real-time, faster than most security tools are able to.”
AI Authority Trend: Zenity and Slalom Join Forces for Secure Enterprise-Wide AI Agent Adoption
Obsidian’s solution leverages the industry’s most comprehensive SaaS threat dataset, integrating over 500 curated real-world threats with deep SaaS and AI platform visibility through the Obsidian Knowledge Graph. This live map provides security teams with real-time insight into agent activity, privileges, and workflows, enabling them to stop unauthorized actions and safeguard enterprise data.
“In customer deployments, our continuously learning Knowledge Graph revealed that AI agents in SaaS environments were typically granted ten times more permissions than needed… visibility only Obsidian can deliver,” said Khanh Tran, Chief Product Officer at Obsidian.
Key capabilities of this release include unmatched visibility and access cleanup, continuous observability and compliance, and prevention of misuse or privilege escalation. Current integrations include Microsoft Copilot Studio, ChatGPT Enterprise, Salesforce Agentforce, and n8n, with more platforms planned for the future.
AI Authority Trend: AudioCodes Expands Voice CPaaS Offering with AI Agents
To share your insights, please write to us at sudipto@intentamplify.com
