[{"data":1,"prerenderedAt":1206},["ShallowReactive",2],{"application-flags":3,"navbar":7,"always-visible-banner":36,"navbar-about-highlight":108,"navbar-resource-highlight":182,"blog/push-it-real-good-why-im-excited-to-join-pushs-board":226},[4],{"name":5,"enabled":6},"maintenanceMode",false,[8],{"createdDate":9,"id":10,"name":11,"modelId":12,"published":13,"query":14,"data":15,"variations":20,"lastUpdated":21,"firstPublished":22,"testRatio":23,"createdBy":24,"lastUpdatedBy":25,"folders":26,"meta":27,"rev":35},1742208588866,"1c7a4e423bf54ac1a328bb4063459ef2","Banner","1c6207a5f24948ab82d4a0b17f251193","published",[],{"type":16,"url":17,"text":18,"link":19},"web-banner","https://pushsecurity.com/resources/browser-attacks-report","Get our latest report analyzing browser attack techniques in 2026",{},{},1774258294825,1742208637545,1,"CydmZnOWU1XuAaLhEDCoYNM4Z8W2","jKjF9r5jcvXU8tzZEfFQm31Iyvr2",[],{"kind":28,"lastPreviewUrl":29,"breakpoints":30,"hasAutosaves":34},"data","",{"xsmall":31,"small":32,"medium":33},320,640,768,true,"ga0kpxjhh76",{"createdDate":37,"id":38,"name":39,"modelId":40,"published":13,"stageModifiedSincePublish":6,"query":41,"data":42,"variations":97,"lastUpdated":98,"firstPublished":99,"testRatio":23,"createdBy":100,"lastUpdatedBy":101,"folders":102,"meta":103,"rev":107},1774965361051,"fd266d0172cc47429be7ad10f48c99ad","always visible banner","0678d178ec8b41efb8a23c09dba7874d",[],{"ctaText":43,"text":44,"url":29,"blocks":45,"state":93},"ewrererw","testrfesssssssssss",[46,73,81],{"@type":47,"@version":48,"id":49,"component":50,"responsiveStyles":63},"@builder.io/sdk:Element",2,"builder-ca12c06a52de41d7b8743da53118cd38",{"name":51,"tag":51,"options":52,"isRSC":62},"TopBannerContent",{"text":53,"ctaText":54,"url":55,"mainText":56,"cta":59},"New Webinar Series: Join John Hammond, Troy Hunt, and Matt Johansen for the State of Browser Attacks","Save Your Spot","https://pushsecurity.com/webinar/state-of-browser-security",{"content":57,"fontSize":58},"\u003Cp>Meet Push's browser security experts at BlackHat 2026.\u003C/p>","text-base",{"content":60,"fontSize":58,"url":61},"\u003Cp>Book a meeting →\u003C/p>","https://pushsecurity.com/events/blackhat-2026-meeting",null,{"large":64},{"display":65,"flexDirection":66,"position":67,"flexShrink":68,"boxSizing":69,"marginTop":70,"marginBottom":70,"fontSize":71,"fontWeight":72},"flex","column","relative","0","border-box",".56rem","1.125rem","700",{"@type":47,"@version":48,"id":74,"component":75,"responsiveStyles":79},"builder-a2e1f4b9f30b464bb814d7f5de5b0aa7",{"name":76,"options":77,"isRSC":62},"Custom Code",{"code":78,"scriptsClientOnly":6},"\u003Cstyle>\n  .top-banner.bg-web-orange{background:rgb(114, 79, 255);}\n\u003C/style>\n",{"large":80},{"display":65,"flexDirection":66,"position":67,"flexShrink":68,"boxSizing":69},{"id":82,"@type":47,"tagName":83,"properties":84,"responsiveStyles":88},"builder-pixel-o503s4fpvk","img",{"src":85,"aria-hidden":86,"alt":29,"role":87,"width":68,"height":68},"https://cdn.builder.io/api/v1/pixel?apiKey=f3a1111ff5be48cdbb123cd9f5795a05","true","presentation",{"large":89},{"height":68,"width":68,"display":90,"opacity":68,"overflow":91,"pointerEvents":92},"block","hidden","none",{"deviceSize":94,"location":95},"large",{"path":29,"query":96},{},{},1783541846936,1774968080803,"ST0tXQM8slWpFrmioqKHmENB2qe2","kYgMv6WsbvfmlOUYqR2SFwGzw6e2",[],{"kind":104,"lastPreviewUrl":105,"hasLinks":6,"breakpoints":106,"hasErrors":6,"hasAutosaves":6},"component","https://pushsecurity.com/?builder.space=f3a1111ff5be48cdbb123cd9f5795a05&builder.user.permissions=read%2Ccreate%2Cpublish%2CeditDesigns%2CeditLayouts%2CeditLayers%2CeditContentPriority%2CeditFolders%2CcreateProjects%2CsendPullRequests&builder.user.role.name=Designer&builder.user.role.id=creator&builder.cachebust=true&builder.preview=always-visible-banner&builder.noCache=true&builder.allowTextEdit=true&__builder_editing__=true&builder.overrides.always-visible-banner=fd266d0172cc47429be7ad10f48c99ad&builder.overrides.fd266d0172cc47429be7ad10f48c99ad=fd266d0172cc47429be7ad10f48c99ad&builder.options.locale=Default",{"xsmall":31,"small":32,"medium":33},"kyujw1aptq",[109,145],{"createdDate":110,"id":111,"name":112,"modelId":113,"published":13,"stageModifiedSincePublish":6,"query":114,"data":115,"variations":138,"lastUpdated":139,"firstPublished":140,"testRatio":23,"createdBy":24,"lastUpdatedBy":24,"folders":141,"meta":142,"rev":144},1776247359804,"9136a8f18b3b4a6ba29b8653a99372b1","testimonial-inductive-automation","20d9eaa352304613b3d1a794b400703d",[],{"link":116,"type":117,"testimonialLink":118,"testimonial":119},{},"testimonial","/customer-stories/inductive-automation",{"@type":120,"id":121,"model":117,"value":122},"@builder.io/core:Reference","f028f2b685bb47cd8bf9e82a26dd5a79",{"query":123,"folders":124,"createdDate":125,"id":121,"name":126,"modelId":127,"published":13,"data":128,"variations":132,"lastUpdated":133,"firstPublished":134,"testRatio":23,"createdBy":100,"lastUpdatedBy":100,"meta":135,"rev":137},[],[],1735823466309,"We found Push to be more accurate when compared to competitors and the browser agent offered features that others couldn’t match.","42035571a56940ac98bff4544aa79aa5",{"author":129,"jobTitle":130,"quote":126,"image":131},"Jason Waits","\u003Cp>CISO at Inductive Automation\u003C/p>","https://cdn.builder.io/api/v1/image/assets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2Ff04c0c0689ce4a89ac0f0708d78c0a07",{},1735910703862,1735823501152,{"kind":28,"lastPreviewUrl":29,"breakpoints":136,"hasAutosaves":34},{"small":32,"medium":33},"e8bsg4qrgtu",{},1776247404986,1776247404973,[],{"breakpoints":143,"kind":28,"lastPreviewUrl":29,"hasAutosaves":6},{"xsmall":31,"small":32,"medium":33},"g9lqcuxphw7",{"createdDate":146,"id":147,"name":148,"modelId":113,"published":13,"meta":149,"stageModifiedSincePublish":6,"query":151,"data":152,"variations":178,"lastUpdated":179,"firstPublished":180,"testRatio":23,"createdBy":24,"lastUpdatedBy":24,"folders":181,"rev":144},1776255761419,"05a9322735fc427db12e2740e4302300","Report: 2026 Browser Attack Techniques",{"breakpoints":150,"kind":28,"lastPreviewUrl":29,"hasAutosaves":6},{"xsmall":31,"small":32,"medium":33},[],{"testimonial":153,"link":172,"type":175,"title":148,"description":176,"image":177},{"@type":120,"id":154,"model":117,"value":155},"192acbb1f9ca4cac918c0ec435a8bae3",{"query":156,"folders":157,"createdDate":158,"id":154,"name":159,"modelId":127,"published":13,"data":160,"variations":166,"lastUpdated":167,"firstPublished":168,"testRatio":23,"createdBy":100,"lastUpdatedBy":24,"meta":169,"rev":171},[],[],1728981467463,"Push does for identity what CrowdStrike did for the endpoint",{"video":161,"jobTitle":162,"author":163,"qoute":29,"quote":164,"image":165},"https://cdn.builder.io/o/assets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2F8b30e8ca50064058bbaef0f3c6164575%2Fcompressed?apiKey=f3a1111ff5be48cdbb123cd9f5795a05&token=8b30e8ca50064058bbaef0f3c6164575&alt=media&optimized=true","\u003Cp>Deputy CISO at Microsoft\u003C/p>\u003Cp>Former LinkedIn, Slack, Palantir\u003C/p>","Geoff Belknap","Push does for identity what CrowdStrike did for the endpoint.","https://cdn.builder.io/api/v1/image/assets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2F748f0ad0a5064a00a13f4721fcc8dea1",{},1742902158597,1728981782923,{"kind":28,"lastPreviewUrl":29,"breakpoints":170,"hasAutosaves":34},{"small":32,"medium":33},"ulhc0im1hfo",{"text":173,"url":174},"Download now","/resources/browser-attacks-report","resource","Learn about the latest techniques being used in the wild.","https://cdn.builder.io/api/v1/image/assets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2F7b4a5ebf81d64e8c9d7fc35f6c96c4a9",{},1776255810913,1776255810900,[],[183,205],{"createdDate":184,"id":185,"name":148,"modelId":186,"published":13,"meta":187,"stageModifiedSincePublish":6,"query":189,"data":190,"variations":200,"lastUpdated":201,"firstPublished":202,"testRatio":23,"createdBy":24,"lastUpdatedBy":24,"folders":203,"rev":204},1776256900280,"1f429607996e4e5fae8fe3f9b9610e55","4829faa81e7c4ee8bd2d000e160e8d3c",{"breakpoints":188,"kind":28,"lastPreviewUrl":29,"hasAutosaves":6},{"xsmall":31,"small":32,"medium":33},[],{"testimonial":191,"link":199,"type":175,"title":148,"description":176,"image":177},{"@type":120,"id":154,"model":117,"value":192},{"query":193,"folders":194,"createdDate":158,"id":154,"name":159,"modelId":127,"published":13,"data":195,"variations":196,"lastUpdated":167,"firstPublished":168,"testRatio":23,"createdBy":100,"lastUpdatedBy":24,"meta":197,"rev":171},[],[],{"video":161,"jobTitle":162,"author":163,"qoute":29,"quote":164,"image":165},{},{"kind":28,"lastPreviewUrl":29,"breakpoints":198,"hasAutosaves":34},{"small":32,"medium":33},{"text":173,"url":174},{},1776256937553,1776256937540,[],"xggsv10v1q9",{"createdDate":206,"id":207,"name":208,"modelId":186,"published":13,"stageModifiedSincePublish":6,"query":209,"data":210,"variations":220,"lastUpdated":221,"firstPublished":222,"testRatio":23,"createdBy":24,"lastUpdatedBy":24,"folders":223,"meta":224,"rev":204},1776256949234,"ce043785b71b4ece98eac811ecf4ba10","inductive-automation",[],{"link":211,"type":117,"testimonial":212,"testimonialLink":118},{},{"@type":120,"id":121,"model":117,"value":213},{"query":214,"folders":215,"createdDate":125,"id":121,"name":126,"modelId":127,"published":13,"data":216,"variations":217,"lastUpdated":133,"firstPublished":134,"testRatio":23,"createdBy":100,"lastUpdatedBy":100,"meta":218,"rev":137},[],[],{"author":129,"jobTitle":130,"quote":126,"image":131},{},{"kind":28,"lastPreviewUrl":29,"breakpoints":219,"hasAutosaves":34},{"small":32,"medium":33},{},1776256974140,1776256974130,[],{"breakpoints":225,"kind":28,"lastPreviewUrl":29,"hasAutosaves":6},{"xsmall":31,"small":32,"medium":33},{"id":227,"title":228,"authorsCollection":229,"content":237,"extension":613,"faqItemsCollection":614,"faqTitle":62,"featured":6,"hashTags":62,"meta":616,"metaTitle":617,"ogImage":62,"publishedDate":618,"relatedBlogPostsCollection":619,"slug":1185,"stem":1186,"subtitle":62,"summary":1187,"synopsis":1197,"sys":1198,"tagsCollection":1201,"__hash__":1205},"blog/blog/push-it-real-good-why-im-excited-to-join-pushs-board.json","Push it real good: Why I’m excited to join Push’s board",{"items":230},[231],{"fullName":232,"firstName":233,"jobTitle":234,"profilePicture":235},"Jon Oberheide","Jon","Push board member, co-founder and former CTO Duo Security",{"url":236},"https://images.ctfassets.net/y1cdw1ablpvd/2KPJNN6IWpB4rDtsnox5BH/77ea22710f9ae8c989ba4e05f5d7dcc3/jon-oberheide.jpeg",{"json":238,"links":603},{"data":239,"content":240,"nodeType":602},{},[241,278,329,388,396,416,423,443,450,457,464,471,478,511,541,548,555,562,582],{"data":242,"content":243,"nodeType":277},{},[244,249,260,264,273],{"data":245,"marks":246,"value":247,"nodeType":248},{},[],"Software has been eating the world for the past decade. And boy, it turns out that software is still SUPER hungry (like, ","text",{"data":250,"content":252,"nodeType":259},{"uri":251},"https://www.youtube.com/watch?v=QETfA9_b7wM",[253],{"data":254,"marks":255,"value":258,"nodeType":248},{},[256],{"type":257},"underline","Audrey II hungry","hyperlink",{"data":261,"marks":262,"value":263,"nodeType":248},{},[],"), as we’ve seen countless new SaaS apps spring up across the software ecosystem. This is great news for organizations of all shapes and sizes. Embracing modern SaaS enables employees to be more productive, use the apps they love, and, as many companies have been recently pressured, ",{"data":265,"content":267,"nodeType":259},{"uri":266},"https://www.washingtonpost.com/business/interactive/2023/tech-layoffs-company-memos/",[268],{"data":269,"marks":270,"value":272,"nodeType":248},{},[271],{"type":257},"do more with less",{"data":274,"marks":275,"value":276,"nodeType":248},{},[],". But it’s less of a fun time for security teams that are trying to grapple with this sprawl of shadow IT…and have always had to do more with less!","paragraph",{"data":279,"content":280,"nodeType":277},{},[281,285,294,298,307,311,325],{"data":282,"marks":283,"value":284,"nodeType":248},{},[],"The sprawl of SaaS apps is not just a raw increase of apps in-use in a modern enterprise (which is often wildly underestimated by CIOs/CISOs), but also the result of bottoms-up adoption of new apps. Driven by the ",{"data":286,"content":288,"nodeType":259},{"uri":287},"https://openviewpartners.com/product-led-growth/",[289],{"data":290,"marks":291,"value":293,"nodeType":248},{},[292],{"type":257},"product-led growth",{"data":295,"marks":296,"value":297,"nodeType":248},{},[]," (PLG) movement, employees now frequently sign-up in a self-service manner for new SaaS apps and put them immediately into use on an individual or team level, without the traditional review, procurement, and management by corporate IT/security teams. Move fast, and cross your fingers that you don’t ",{"data":299,"content":301,"nodeType":259},{"uri":300},"https://hbr.org/2019/01/the-era-of-move-fast-and-break-things-is-over",[302],{"data":303,"marks":304,"value":306,"nodeType":248},{},[305],{"type":257},"break too many things",{"data":308,"marks":309,"value":310,"nodeType":248},{},[],"? Push has ",{"data":312,"content":318,"nodeType":324},{"target":313},{"sys":314},{"id":315,"type":316,"linkType":317},"1t9lzEIIB2PNrN1pyG3RRy","Link","Entry",[319],{"data":320,"marks":321,"value":323,"nodeType":248},{},[322],{"type":257},"written about this shift","entry-hyperlink",{"data":326,"marks":327,"value":328,"nodeType":248},{},[]," in more detail, which is worth reading. ",{"data":330,"content":331,"nodeType":277},{},[332,336,345,349,358,362,371,375,384],{"data":333,"marks":334,"value":335,"nodeType":248},{},[],"These unsanctioned/unmanaged SaaS apps represent a growing attack surface. While the problems of shadow IT are not necessarily new, I would argue that the true security risk, which perhaps was not fully-appreciated previously, has recently come to the forefront through high-profile ",{"data":337,"content":339,"nodeType":259},{"uri":338},"https://circleci.com/blog/jan-4-2023-incident-report/",[340],{"data":341,"marks":342,"value":344,"nodeType":248},{},[343],{"type":257},"supply chain compromises",{"data":346,"marks":347,"value":348,"nodeType":248},{},[],". Whether it’s a single user getting ",{"data":350,"content":352,"nodeType":259},{"uri":351},"https://pushsecurity.com/blog/consent-phishing-the-emerging-phishing-technique-that-can-bypass-2fa",[353],{"data":354,"marks":355,"value":357,"nodeType":248},{},[356],{"type":257},"OAuth phished",{"data":359,"marks":360,"value":361,"nodeType":248},{},[],", password reuse across SaaS apps targeted by ",{"data":363,"content":365,"nodeType":259},{"uri":364},"https://www.microsoft.com/en-us/security/blog/2022/09/22/malicious-oauth-applications-used-to-compromise-email-servers-and-spread-spam/",[366],{"data":367,"marks":368,"value":370,"nodeType":248},{},[369],{"type":257},"credential stuffing",{"data":372,"marks":373,"value":374,"nodeType":248},{},[],", or a breach of a ",{"data":376,"content":378,"nodeType":259},{"uri":377},"https://www.proofpoint.com/us/blog/cloud-security/dangerous-consequences-threat-actors-abusing-microsofts-verified-publisher",[379],{"data":380,"marks":381,"value":383,"nodeType":248},{},[382],{"type":257},"third-party integration",{"data":385,"marks":386,"value":387,"nodeType":248},{},[]," plugged into your Google Workspace or Microsoft 365, the risks are now clear and present.",{"data":389,"content":390,"nodeType":395},{},[391],{"data":392,"marks":393,"value":394,"nodeType":248},{},[],"Work with employees, not around them","heading-2",{"data":397,"content":398,"nodeType":277},{},[399,403,412],{"data":400,"marks":401,"value":402,"nodeType":248},{},[],"Despite SaaS sprawl and the proliferation of related attacks, I’ve always had a belief that users are good-intentioned, want to be productive in their job, and desire to keep their organization secure. We can’t ask users to walk a terrifying tightrope of security (“don’t get phished”, “don’t open attachments”, “don’t click links”, “don’t plug things into your computer”, etc) and still do their actual job effectively. In the modern day, you either design a ",{"data":404,"content":406,"nodeType":259},{"uri":405},"https://www.oreilly.com/library/view/oscon-2017/9781491976227/video306724.html",[407],{"data":408,"marks":409,"value":411,"nodeType":248},{},[410],{"type":257},"paved path",{"data":413,"marks":414,"value":415,"nodeType":248},{},[]," for your users to be able to move quickly and safely, or you risk the consequences when they go off-roading.",{"data":417,"content":418,"nodeType":277},{},[419],{"data":420,"marks":421,"value":422,"nodeType":248},{},[],"When there is no paved path for those good-intentioned users to get their job done, it’s no surprise that they find creative ways to work around poorly-designed security controls. For example, if an employee has to jump through a lot of hoops to get on the corporate VPN and access an internal Sharepoint instance in order to collaborate with colleagues, they’re likely to just sign-up for and use a self-service Box/Dropbox/Trello tenant. A violation of corporate security policy? Perhaps. A shadow IT risk to the organization? Sure. But they’re not being malicious, they’re just trying to get their job done.",{"data":424,"content":425,"nodeType":277},{},[426,430,439],{"data":427,"marks":428,"value":429,"nodeType":248},{},[],"Enter, Push Security. Push is tackling these challenges of shadow IT, helping to simplify SaaS security while meeting users where they are and enlisting them in the solution. Push allows security teams to get complete, real-time visibility into the SaaS apps in use in their enterprise, automates the fixing of any risky issues by involving the end user, and provides real-time guidance to head off new issues before they even happen. See ",{"data":431,"content":434,"nodeType":324},{"target":432},{"sys":433},{"id":315,"type":316,"linkType":317},[435],{"data":436,"marks":437,"value":438,"nodeType":248},{},[],"Adam’s blog post ",{"data":440,"marks":441,"value":442,"nodeType":248},{},[],"for a double-click on all the capabilities of the Push platform.",{"data":444,"content":445,"nodeType":277},{},[446],{"data":447,"marks":448,"value":449,"nodeType":248},{},[],"Push’s vision particularly resonated with me, as it is a natural extension of the user-centric security that we built at Duo. Push allows security teams to go beyond just front door entrance of application access (eg. authentication) and look deeper into latent risks presented by SaaS applications themselves, the data contained within, and their risky app-to-app interconnectedness. And, often, the best first step after identifying the litany of unsanctioned apps in use in your organization is to quickly get the critical ones safely under your umbrella of SSO/MFA (via Duo, Okta, Azure AD, etc), which I know was a common challenge for our many customers at Duo.",{"data":451,"content":452,"nodeType":395},{},[453],{"data":454,"marks":455,"value":456,"nodeType":248},{},[],"CASB and SSPM aren’t enough",{"data":458,"content":459,"nodeType":277},{},[460],{"data":461,"marks":462,"value":463,"nodeType":248},{},[],"Past attempts to tackle these problems, notably CASB vendors, have had limited success. It’s clear the network/proxy-based CASB approach is not a survivable architecture for the modern world of cloud and mobility. Even an API-only integration, the approach taken by some SSPM vendors, is necessary but not sufficient for the scope of the problem space. ",{"data":465,"content":466,"nodeType":277},{},[467],{"data":468,"marks":469,"value":470,"nodeType":248},{},[],"For example, it’s not enough to just know that Box is an app in-use by your users. Many organizations that have their corporate Box tenant “managed” with SSO/MFA/etc, but may be unaware of the 10+ shadow non-managed Box tenants that their users have created and are actively sharing documents through. Do you think you have just one Box, Slack, Monday, etc? Push, with its unique architecture of plugging into your SaaS apps as well as interfacing with the user via a browser extension, can achieve this accurate, fine-grained visibility into SaaS usage.",{"data":472,"content":473,"nodeType":395},{},[474],{"data":475,"marks":476,"value":477,"nodeType":248},{},[],"Automate fixes by involving the end user, your employees",{"data":479,"content":480,"nodeType":277},{},[481,485,494,498,507],{"data":482,"marks":483,"value":484,"nodeType":248},{},[],"Push is also unique in enlisting the end user, not just in identifying the problems of SaaS sprawl, but in remediating discovered issues. This user-centric approach naturally resonated with my experience at Duo. After all, ",{"data":486,"content":488,"nodeType":259},{"uri":487},"https://www.youtube.com/watch?v=JN0Hj0pKZ7U",[489],{"data":490,"marks":491,"value":493,"nodeType":248},{},[492],{"type":257},"Duo Push",{"data":495,"marks":496,"value":497,"nodeType":248},{},[]," and our ",{"data":499,"content":501,"nodeType":259},{"uri":500},"https://duo.com/blog/mobile-device-security-made-easy-with-duos-security-checkup",[502],{"data":503,"marks":504,"value":506,"nodeType":248},{},[505],{"type":257},"Security Checkup",{"data":508,"marks":509,"value":510,"nodeType":248},{},[]," were just low-fidelity mechanisms to ask your users to engage positively in your security program. ",{"data":512,"content":513,"nodeType":277},{},[514,518,527,531,537],{"data":515,"marks":516,"value":517,"nodeType":248},{},[],"Push takes this philosophy much further with their ",{"data":519,"content":521,"nodeType":259},{"uri":520},"https://pushsecurity.com/kb/10004/",[522],{"data":523,"marks":524,"value":526,"nodeType":248},{},[525],{"type":257},"ChatOps feature",{"data":528,"marks":529,"value":530,"nodeType":248},{},[],", creating a direct, interactive interface to users. Sometimes users just need a gentle ",{"data":532,"marks":533,"value":536,"nodeType":248},{},[534],{"type":535},"italic","push",{"data":538,"marks":539,"value":540,"nodeType":248},{},[]," in the right direction, to make good security decisions or improve the organization’s security hygiene. Push can help users adopt existing security controls (eg. MFA), identify risky configurations (eg. malicious mail forwarding), and reduce attack surface (eg. unused or risky OAuth integrations). Interfacing directly with users can increase fidelity (who knows better ground truth than the user themselves), increase remediation speed, and allow your security program to scale without hiring a bunch of analysts to run down endless lists of alerts. Of course, you're not just handing over the keys to the user, but selectively using their superpowers to augment your centralized visibility and control.",{"data":542,"content":543,"nodeType":277},{},[544],{"data":545,"marks":546,"value":547,"nodeType":248},{},[],"In essence, Push has created that paved path to allow your users to move quickly, but also with the appropriate guardrails for when they go off-roading. Maybe those guardrails are a 10-foot reinforced concrete wall for your security-sensitive organization. Maybe they’re a light safety barrier to help try to keep users on track. And maybe your org really embraces speed and employee autotomy, so you just want an “invisible fence” to be alerted when users go off the track. Regardless of your security culture, Push gives you the necessary visibility of your shadow IT to make informed risk decisions appropriate for your business and enact the right controls.",{"data":549,"content":550,"nodeType":395},{},[551],{"data":552,"marks":553,"value":554,"nodeType":248},{},[],"Securing SaaS for everyone, not just large enterprises",{"data":556,"content":557,"nodeType":277},{},[558],{"data":559,"marks":560,"value":561,"nodeType":248},{},[],"Lastly, the explosion of SaaS is not a uniquely enterprise phenomena, but felt by companies of all shapes and sizes. As I experienced at Duo, designing security products for ease-of-use can be a game-changer for small/medium-sized organizations that lack the staff, time, and budget to manage complex security tools. But, whether you’re a SMB or a F500 enterprise, everyone is strapped for resources and wants to maximize the security impact of their limited team, not create more busy-work and alerts to run down. Push has built a platform that is easy to try, deploy, and manage, whether you’re a small business with a one-person security team or a large enterprise looking to scale your SaaS security across tens of thousands of employees.",{"data":563,"content":564,"nodeType":277},{},[565,569,578],{"data":566,"marks":567,"value":568,"nodeType":248},{},[],"I felt conviction about Push early on when I first met co-founders Adam, Tyrone, and Jacques in 2021. Not just excitement around the problem space and product philosophy, but a personal resonance with the team. Deep technical founders and security practitioners, fed up with the ",{"data":570,"content":572,"nodeType":259},{"uri":571},"https://www.markerbench.com/blog/2005/05/04/Escaping-the-Hamster-Wheel-of-Pain/",[573],{"data":574,"marks":575,"value":577,"nodeType":248},{},[576],{"type":257},"hamster-wheel-of-pain",{"data":579,"marks":580,"value":581,"nodeType":248},{},[]," of detection and response, and eager to battle the status quo of the security industry with a fresh and positive approach. It sure felt familiar! That conviction grew as I observed their early development and progress, when I joined in the seed round led by Decibel last year, and when I saw the customer adoption after their product launch less than a year ago. So, with their recent Series A round, led by Karim Faris at GV, I’m honored to join the board of Push and continue supporting a great team and product.",{"data":583,"content":584,"nodeType":277},{},[585,589,598],{"data":586,"marks":587,"value":588,"nodeType":248},{},[],"\nBut, hey, don’t just take my word for it, ",{"data":590,"content":592,"nodeType":259},{"uri":591},"https://pushsecurity.com/signup",[593],{"data":594,"marks":595,"value":597,"nodeType":248},{},[596],{"type":257},"sign up for free today",{"data":599,"marks":600,"value":601,"nodeType":248},{},[]," and bring some sanity to your SaaS security.","document",{"entries":604},{"block":605,"inline":606,"hyperlink":607},[],[],[608],{"sys":609,"__typename":610,"title":611,"slug":612},{"id":315},"BlogPosts","From launch to series A ","from-launch-to-series-a","json",{"items":615},[],{},"Jon Oberheide Joins Push Security's Board","2023-04-17T00:00:00.000Z",{"items":620},[621],{"__typename":610,"sys":622,"content":623,"title":611,"synopsis":1165,"hashTags":62,"publishedDate":1166,"slug":612,"tagsCollection":1167,"authorsCollection":1177},{"id":315},{"json":624},{"data":625,"content":626,"nodeType":602},{},[627,660,667,674,693,700,707,713,747,754,761,777,784,791,836,842,850,857,864,880,887,894,901,907,914,921,928,935,942,948,955,998,1005,1012,1018,1025,1032,1039,1045,1052,1059,1066,1072,1079,1086,1093,1100,1116,1132],{"data":628,"content":629,"nodeType":277},{},[630,634,642,646,656],{"data":631,"marks":632,"value":633,"nodeType":248},{},[],"We’re proud to share that we’ve locked in our ",{"data":635,"content":637,"nodeType":259},{"uri":636},"https://techcrunch.com/2023/04/03/push-security-raises-15m-to-help-saas-users-lower-their-online-vulnerability/",[638],{"data":639,"marks":640,"value":641,"nodeType":248},{},[],"Series A round",{"data":643,"marks":644,"value":645,"nodeType":248},{},[],", led by GV (Google Ventures). We’ve learned a lot about what our customers need since we ",{"data":647,"content":651,"nodeType":324},{"target":648},{"sys":649},{"id":650,"type":316,"linkType":317},"1LWXA4OL7v5bqsS4acnnpr",[652],{"data":653,"marks":654,"value":655,"nodeType":248},{},[],"launched in July 2022",{"data":657,"marks":658,"value":659,"nodeType":248},{},[]," - they want to help employees use SaaS more securely, of course, but they also need centralized visibility and the ability to make good decisions around the use of SaaS by knowing how their employees are using it. ",{"data":661,"content":662,"nodeType":277},{},[663],{"data":664,"marks":665,"value":666,"nodeType":248},{},[],"Most security-savvy organizations have a fairly good handle on IT-owned and managed SaaS platforms (like Microsoft 365, Google Workspace, Salesforce, Slack, etc) and many have started using newer security solutions that discover the SaaS work apps that employees have started using and often integrated with those IT-owned platforms. ",{"data":668,"content":669,"nodeType":395},{},[670],{"data":671,"marks":672,"value":673,"nodeType":248},{},[],"The rise of PLG and how it impacts security ",{"data":675,"content":676,"nodeType":277},{},[677,681,689],{"data":678,"marks":679,"value":680,"nodeType":248},{},[],"What they’ve been missing is the ",{"data":682,"content":683,"nodeType":259},{"uri":287},[684],{"data":685,"marks":686,"value":688,"nodeType":248},{},[687],{"type":257},"rise of product-led growth",{"data":690,"marks":691,"value":692,"nodeType":248},{},[]," (PLG) - a popular sales motion that relies on the product itself as the primary driver for customer acquisition and conversion. Potential buyers sign up, integrate it, and experience the product value before going through any sales-cycle. ",{"data":694,"content":695,"nodeType":277},{},[696],{"data":697,"marks":698,"value":699,"nodeType":248},{},[],"The impact this has on security is that where in the past, employees would have needed to go centrally through procurement, which gives the security team an opportunity to assess the risk and determine whether or not the service would invalidate the organization’s security compliance. With PLG, employees can (and do) onboard sensitive applications themselves directly. This shift in buying behavior has contributed to a sharp increase of SaaS sprawl and shadow IT.",{"data":701,"content":705,"nodeType":706},{"target":702},{"sys":703},{"id":704,"type":316,"linkType":317},"1Dw4V0Fd0wI8yB6juzyWjg",[],"embedded-entry-block",{"data":708,"content":712,"nodeType":706},{"target":709},{"sys":710},{"id":711,"type":316,"linkType":317},"61Oj6GzX4amLxEJ5fPDJCq",[],{"data":714,"content":715,"nodeType":277},{},[716,720,726,730,735,739,743],{"data":717,"marks":718,"value":719,"nodeType":248},{},[],"PLG is also the norm for app-to-app integrations as well. In our data, we found that",{"data":721,"marks":722,"value":725,"nodeType":248},{},[723],{"type":724},"bold"," ",{"data":727,"marks":728,"value":729,"nodeType":248},{},[],"around 37% of Microsoft 365 app integrations were IT-approved and owned. ",{"data":731,"marks":732,"value":734,"nodeType":248},{},[733],{"type":724},"The rest (63%) were all employee-owned and consented to. ",{"data":736,"marks":737,"value":738,"nodeType":248},{},[],"That’s just looking at app-to-app integrations to the M365 tenant, so it doesn’t include all the SaaS apps accessed through the browser.",{"data":740,"marks":741,"value":725,"nodeType":248},{},[742],{"type":724},{"data":744,"marks":745,"value":746,"nodeType":248},{},[],"Sure, some of those apps are used by a whole team and may be on IT’s radar if the department head went through the proper security measures. But many may just be used by one person or a team is just signing up for a free trial. And even for those free/trial instances, the apps need to integrate with business apps and data to work and test, so they can present as much risk as any other app used in your environment.",{"data":748,"content":749,"nodeType":395},{},[750],{"data":751,"marks":752,"value":753,"nodeType":248},{},[],"What’s the risk of SaaS sprawl?",{"data":755,"content":756,"nodeType":277},{},[757],{"data":758,"marks":759,"value":760,"nodeType":248},{},[],"The unknowns - the old trope that you can’t protect what you don’t know is cliche for a reason - it’s true. Not every SaaS app or integration carries massive risk, but most apps employees are using to get important work done accesses sensitive data or need to integrate with business data, which is then shared with a third party in each instance.",{"data":762,"content":763,"nodeType":277},{},[764,768,773],{"data":765,"marks":766,"value":767,"nodeType":248},{},[],"Each app becomes an asset that security teams need to protect and each new account employees create forms part of the company’s public-facing attack surface. With PLG, apps are adopted ",{"data":769,"marks":770,"value":772,"nodeType":248},{},[771],{"type":535},"before ",{"data":774,"marks":775,"value":776,"nodeType":248},{},[],"security get a chance to onboard them onto SSO, so weak user accounts employees have created are a potential entry point for an attacker.",{"data":778,"content":779,"nodeType":277},{},[780],{"data":781,"marks":782,"value":783,"nodeType":248},{},[],"This can be a high ROI technique for an attacker. Instead of burning client-side exploits and C2 infrastructure, an attacker kicks off an automated password scan against all popular SaaS apps and gets alerted each time they access an account. Attackers are also utilizing credential stuffing by taking a single compromised employee password and trying it against every popular SaaS service to extend their access. ",{"data":785,"content":786,"nodeType":277},{},[787],{"data":788,"marks":789,"value":790,"nodeType":248},{},[],"The sensitivity of these applications vary depending on their capability, but some particularly high-risk examples we’ve come across include:",{"data":792,"content":793,"nodeType":835},{},[794,805,815,825],{"data":795,"content":796,"nodeType":804},{},[797],{"data":798,"content":799,"nodeType":277},{},[800],{"data":801,"marks":802,"value":803,"nodeType":248},{},[],"Apps that access employee email - attackers can use this access to do account resets and compromise other SaaS apps.","list-item",{"data":806,"content":807,"nodeType":804},{},[808],{"data":809,"content":810,"nodeType":277},{},[811],{"data":812,"marks":813,"value":814,"nodeType":248},{},[],"Compromising development or testing tools that have access to API keys and production systems.",{"data":816,"content":817,"nodeType":804},{},[818],{"data":819,"content":820,"nodeType":277},{},[821],{"data":822,"marks":823,"value":824,"nodeType":248},{},[],"Compromising data warehouses, or any independent SaaS app that integrates back with that data warehouse.",{"data":826,"content":827,"nodeType":804},{},[828],{"data":829,"content":830,"nodeType":277},{},[831],{"data":832,"marks":833,"value":834,"nodeType":248},{},[],"Compromising marketing apps that can be used to control public facing assets such as the company social media account or website. ","ordered-list",{"data":837,"content":838,"nodeType":277},{},[839],{"data":840,"marks":841,"value":29,"nodeType":248},{},[],{"data":843,"content":844,"nodeType":849},{},[845],{"data":846,"marks":847,"value":848,"nodeType":248},{},[],"The Solution ","heading-1",{"data":851,"content":852,"nodeType":395},{},[853],{"data":854,"marks":855,"value":856,"nodeType":248},{},[],"Complete, real time, centralized visibility",{"data":858,"content":859,"nodeType":277},{},[860],{"data":861,"marks":862,"value":863,"nodeType":248},{},[],"To get a handle on the SaaS sprawl and shadow IT that the PLG movement has caused, security teams need complete visibility of every business application (SaaS apps, cloud apps, app-to-app integrations, etc.) employees are adopting, integrating with company data, and accessing through the browser.",{"data":865,"content":866,"nodeType":277},{},[867,871,876],{"data":868,"marks":869,"value":870,"nodeType":248},{},[],"Alongside visibility, security teams also need the option to turn on notifications to keep them up to date about potential security concerns around SaaS use in their organization. This provides security teams with near real-time visibility so they’re notified when someone has signed up for a new app. If an employee or team has been using an app for weeks or months, it can be much more difficult to migrate them to a more secure platform if security decides the risks outweigh the benefits for that app. It also means that security teams get to be part of the decision-making process again. So, even though the PLG model has put security in the mode of constantly having to play catch-up to do risk assessments ",{"data":872,"marks":873,"value":875,"nodeType":248},{},[874],{"type":535},"after",{"data":877,"marks":878,"value":879,"nodeType":248},{},[]," the app has been adopted, security teams can reclaim their role in the procurement process with timely notifications. ",{"data":881,"content":882,"nodeType":277},{},[883],{"data":884,"marks":885,"value":886,"nodeType":248},{},[],"The thing is, the notifications need to have enough information to be meaningful rather than just acting as another alert to distract them from their work. Enter channel messaging for security teams. ",{"data":888,"content":889,"nodeType":277},{},[890],{"data":891,"marks":892,"value":893,"nodeType":248},{},[],"Our new channel messaging feature tells security teams about new SaaS being onboarded, of course, but also provides useful security insights about that activity. If a new app is added to or integrated with the company’s Google Workspace or Microsoft 365 tenant, we can tell you in Slack or Teams, and we’ll also let you know if it’s low-risk or if it merits more investigation. ",{"data":895,"content":896,"nodeType":277},{},[897],{"data":898,"marks":899,"value":900,"nodeType":248},{},[],"In the case of app-to-app integrations, we’ve decided against providing an abstract risk score, which isn’t actually very helpful, and focused instead on tangible information on what data the integration exposes, so the security team can make the right risk assessment for their organization. See the example below:",{"data":902,"content":906,"nodeType":706},{"target":903},{"sys":904},{"id":905,"type":316,"linkType":317},"4e6ERBq2KkDpM8VxwIW3zV",[],{"data":908,"content":909,"nodeType":277},{},[910],{"data":911,"marks":912,"value":913,"nodeType":248},{},[],"We’ll also flag you if an integration is high-risk because it’s asking for excessive data permissions. For instance, one interesting data point we’ve discovered since launch: 23% of the Microsoft app-to-app integrations we discovered granted access to high-risk assets or data, such as email inboxes, and shared drives like OneDrive. For Google workspace, 17% were equally high-risk.",{"data":915,"content":916,"nodeType":277},{},[917],{"data":918,"marks":919,"value":920,"nodeType":248},{},[],"Security teams need complete SaaS visibility and foundational insights into the security impact of those apps used in their business. Couple that visibility with a user-centric approach to security and you’ve got baseline SaaS security covered, whether you’re a small business with no dedicated team or you’re an enterprise with a highly skilled, dedicated team that’s overburdened with constant alerts and struggling to make actual improvements to your company’s security posture.",{"data":922,"content":923,"nodeType":395},{},[924],{"data":925,"marks":926,"value":927,"nodeType":248},{},[],"Automate the fix by involving the user",{"data":929,"content":930,"nodeType":277},{},[931],{"data":932,"marks":933,"value":934,"nodeType":248},{},[],"The most sensible way we’ve found to scale SaaS security in an employee-adopted apps world is to put users at the center of helping to improve security. We prompt users at the right time to encourage them to take an action that will benefit an organization’s security, like updating their software or securing their user account with MFA or a stronger password.",{"data":936,"content":937,"nodeType":277},{},[938],{"data":939,"marks":940,"value":941,"nodeType":248},{},[],"This shared responsibility model is nothing new, really. It’s a concept that was pioneered by Slack, Netflix, and Duo Security before us. The way we’re applying it to securing employee SaaS use, however, is pretty novel. To us, a user-centric approach doesn’t simply mean building in ChatOps in Slack and Teams - it’s building in a variety of ways to notify and interact with the user when the time is right for them to take action. ",{"data":943,"content":947,"nodeType":706},{"target":944},{"sys":945},{"id":946,"type":316,"linkType":317},"5wZDwVTGbh5f4qliO2ft3E",[],{"data":949,"content":950,"nodeType":277},{},[951],{"data":952,"marks":953,"value":954,"nodeType":248},{},[],"Our approach involves the user from beginning to end:",{"data":956,"content":957,"nodeType":997},{},[958,977,987],{"data":959,"content":960,"nodeType":804},{},[961],{"data":962,"content":963,"nodeType":277},{},[964,968,973],{"data":965,"marks":966,"value":967,"nodeType":248},{},[],"We provide real-time guidance to help prevent problems ",{"data":969,"marks":970,"value":972,"nodeType":248},{},[971],{"type":535},"before they happen",{"data":974,"marks":975,"value":976,"nodeType":248},{},[]," (in the browser),",{"data":978,"content":979,"nodeType":804},{},[980],{"data":981,"content":982,"nodeType":277},{},[983],{"data":984,"marks":985,"value":986,"nodeType":248},{},[],"We nudge employees to self-remediate issues that have already happened, and",{"data":988,"content":989,"nodeType":804},{},[990],{"data":991,"content":992,"nodeType":277},{},[993],{"data":994,"marks":995,"value":996,"nodeType":248},{},[],"We provide an overview for each employee, so the security team can see each employee’s security state for their SaaS use.","unordered-list",{"data":999,"content":1000,"nodeType":395},{},[1001],{"data":1002,"marks":1003,"value":1004,"nodeType":248},{},[],"Real-time guidance",{"data":1006,"content":1007,"nodeType":277},{},[1008],{"data":1009,"marks":1010,"value":1011,"nodeType":248},{},[],"Our just-in-time notifications act like password-checkers in the browser, but they’re more robust in that security teams can fully customize which words and phrases employees can’t use in their passwords as they’re creating new accounts; it might be company name, location, common words, street address, and so on). This helps prevent employees from creating weak passwords like those that were leaked in a password dump after a breach. Here’s how we’re doing that in the browser:",{"data":1013,"content":1017,"nodeType":706},{"target":1014},{"sys":1015},{"id":1016,"type":316,"linkType":317},"59eQuuZH8RICARjwXAJrWw",[],{"data":1019,"content":1020,"nodeType":277},{},[1021],{"data":1022,"marks":1023,"value":1024,"nodeType":248},{},[],"These simple measures help employees pick stronger passwords from the start, cutting down on the need for any nudges on ChatOps or any notifications to security. Why fix issues when you can prevent them from ever happening?",{"data":1026,"content":1027,"nodeType":395},{},[1028],{"data":1029,"marks":1030,"value":1031,"nodeType":248},{},[],"Notifications",{"data":1033,"content":1034,"nodeType":277},{},[1035],{"data":1036,"marks":1037,"value":1038,"nodeType":248},{},[],"We use notifications in ChatOps (Slack or Teams) when employees can fix security issues with one click without the need for security to talk to them directly. An example of this is using a chat to check if an employee is still using a dormant or inactive app. If they’re not using it, they can automatically eliminate it from the company’s attack surface by clicking the “I’m not using it, you can remove” button. ",{"data":1040,"content":1044,"nodeType":706},{"target":1041},{"sys":1042},{"id":1043,"type":316,"linkType":317},"6deX1SbkDVkXGT7FthM9pd",[],{"data":1046,"content":1047,"nodeType":395},{},[1048],{"data":1049,"marks":1050,"value":1051,"nodeType":248},{},[],"Employee SaaS security overview",{"data":1053,"content":1054,"nodeType":277},{},[1055],{"data":1056,"marks":1057,"value":1058,"nodeType":248},{},[],"The final component of user-centric security is to provide a personal view of an employee’s overall security state. Security teams can see each employee’s SaaS security state for a quick view of where they need to fix security issues and where they’re in the clear. This user security dashboard is really handy for visibility over particularly high-risk employees (usually those who use a lot of different SaaS apps and those who work with highly sensitive data - like legal teams, executives, HR, finance, etc.). ",{"data":1060,"content":1061,"nodeType":277},{},[1062],{"data":1063,"marks":1064,"value":1065,"nodeType":248},{},[],"By displaying this information in a single, clean, easy to read panel, both employees and security teams can work together to take actions to fix issues quickly and easily.",{"data":1067,"content":1071,"nodeType":706},{"target":1068},{"sys":1069},{"id":1070,"type":316,"linkType":317},"7IZDuJ7c2takbu4OaKLsKB",[],{"data":1073,"content":1074,"nodeType":849},{},[1075],{"data":1076,"marks":1077,"value":1078,"nodeType":248},{},[],"How to apply a user-centric approach in your organization",{"data":1080,"content":1081,"nodeType":277},{},[1082],{"data":1083,"marks":1084,"value":1085,"nodeType":248},{},[],"\nWe’ve found that many companies believe in a user-centric approach to security in theory, but what that looks like in practice is less clear. That’s partly because there’s confusion around how to apply a concept that feels like a design principle to your organization’s security strategy. Most people we talk to like the idea of equipping employees to help secure the apps they’re using, but how to make that work in their environment is a bit scary, since it directly impacts every person in the company. ",{"data":1087,"content":1088,"nodeType":277},{},[1089],{"data":1090,"marks":1091,"value":1092,"nodeType":248},{},[],"Part of the problem is that “user-centric” has become a bit of a buzzword in marketing, with a lot of the vendors saying they’re user-centric when that really means they’ve just built a Slack or Teams integration that can message employees. Turning that feature on without thinking about how it’ll impact all of the employees in the business is a recipe for disaster. ",{"data":1094,"content":1095,"nodeType":277},{},[1096],{"data":1097,"marks":1098,"value":1099,"nodeType":248},{},[],"After speaking with customers and prospects since launch, we’ve discovered how important it is that we clearly explain how employees are going to be contacted and with what information. To adopt a user-centric approach that actually leads to measurable improvements in security, you need a tool that reaches out to employees with the right messaging at the right time and in the right place, whether that’s via ChatOps or in the browser, where they’re working.",{"data":1101,"content":1102,"nodeType":849},{},[1103,1107,1112],{"data":1104,"marks":1105,"value":1106,"nodeType":248},{},[],"Equipping employees is ",{"data":1108,"marks":1109,"value":1111,"nodeType":248},{},[1110],{"type":535},"part",{"data":1113,"marks":1114,"value":1115,"nodeType":248},{},[]," of the solution, not the whole solution ",{"data":1117,"content":1118,"nodeType":277},{},[1119,1123,1128],{"data":1120,"marks":1121,"value":1122,"nodeType":248},{},[],"User-centric approaches are a tool in the security team’s toolbox, a practical way to bring employees into the process - not a way to outsource the technical security burden to people with no security expertise. You don’t get to outsource security to employees and employees should ",{"data":1124,"marks":1125,"value":1127,"nodeType":248},{},[1126],{"type":535},"never ",{"data":1129,"marks":1130,"value":1131,"nodeType":248},{},[],"be making technical security decisions on the company’s behalf. Employees provide context on how they’re using apps so that the security team can make risk-based decisions on which apps employees can use. ",{"data":1133,"content":1134,"nodeType":277},{},[1135,1139,1148,1152,1161],{"data":1136,"marks":1137,"value":1138,"nodeType":248},{},[],"By adopting a user-centric approach alongside centralized visibility and controls, most security teams have found a way to secure employee SaaS accounts and SaaS use at scale. We’re excited to work with our customers and investors to solve new problems in this emerging space. Follow us on ",{"data":1140,"content":1142,"nodeType":259},{"uri":1141},"https://twitter.com/PushSecurity",[1143],{"data":1144,"marks":1145,"value":1147,"nodeType":248},{},[1146],{"type":257},"Twitter",{"data":1149,"marks":1150,"value":1151,"nodeType":248},{},[]," and ",{"data":1153,"content":1155,"nodeType":259},{"uri":1154},"https://www.linkedin.com/company/push-security/",[1156],{"data":1157,"marks":1158,"value":1160,"nodeType":248},{},[1159],{"type":257},"LinkedIn",{"data":1162,"marks":1163,"value":1164,"nodeType":248},{},[]," and sign up to our mailing list to come along for the ride!","We’re proud to announce our $15M Series A round, led by GV. Here's what we've learned about what our customers need since we launched in July 2022. ","2023-03-28T00:00:00.000Z",{"items":1168},[1169,1173],{"sys":1170,"name":1172},{"id":1171},"4EtskIWlj3SOH3UHbFR8uG","Company news",{"sys":1174,"name":1176},{"id":1175},"3SA5H01UkKauuiTdt0KC6q","Shadow IT",{"items":1178},[1179],{"fullName":1180,"firstName":1181,"jobTitle":1182,"profilePicture":1183},"Adam Bateman","Adam","Co-founder / CEO",{"url":1184},"https://images.ctfassets.net/y1cdw1ablpvd/3Bt9feB72kxdWlS0hvpldi/904bdb8b20d98e53c574f8be2f60996b/Push_Founders_at_Cahoots_October_28_2022_by_Doug_Coombe-20.jpg","push-it-real-good-why-im-excited-to-join-pushs-board","blog/push-it-real-good-why-im-excited-to-join-pushs-board",{"json":1188},{"data":1189,"content":1190,"nodeType":602},{},[1191],{"data":1192,"content":1193,"nodeType":277},{},[1194],{"data":1195,"marks":1196,"value":1197,"nodeType":248},{},[],"SaaS sprawl is not just a raw increase of apps in-use, but also due to employees self-adopting new apps. Orgs need sensible guardrails for employees.",{"id":1199,"publishedAt":1200},"1bkW8uoCL6lLeHbAkndZUM","2024-03-21T09:24:28.123Z",{"items":1202},[1203],{"sys":1204,"name":1172},{"id":1171},"yBUnSXzjm5YgxUOR9tEjW247nto36GdYRXPz0C8mkNk",1784196731822]