[{"data":1,"prerenderedAt":1238},["ShallowReactive",2],{"application-flags":3,"navbar":7,"always-visible-banner":36,"navbar-about-highlight":108,"navbar-resource-highlight":182,"blog/push-security-announces-4m-seed-round-to-introduce-user-centric-approach":226},[4],{"name":5,"enabled":6},"maintenanceMode",false,[8],{"createdDate":9,"id":10,"name":11,"modelId":12,"published":13,"query":14,"data":15,"variations":20,"lastUpdated":21,"firstPublished":22,"testRatio":23,"createdBy":24,"lastUpdatedBy":25,"folders":26,"meta":27,"rev":35},1742208588866,"1c7a4e423bf54ac1a328bb4063459ef2","Banner","1c6207a5f24948ab82d4a0b17f251193","published",[],{"type":16,"url":17,"text":18,"link":19},"web-banner","https://pushsecurity.com/resources/browser-attacks-report","Get our latest report analyzing browser attack techniques in 2026",{},{},1774258294825,1742208637545,1,"CydmZnOWU1XuAaLhEDCoYNM4Z8W2","jKjF9r5jcvXU8tzZEfFQm31Iyvr2",[],{"kind":28,"lastPreviewUrl":29,"breakpoints":30,"hasAutosaves":34},"data","",{"xsmall":31,"small":32,"medium":33},320,640,768,true,"ga0kpxjhh76",{"createdDate":37,"id":38,"name":39,"modelId":40,"published":13,"stageModifiedSincePublish":6,"query":41,"data":42,"variations":97,"lastUpdated":98,"firstPublished":99,"testRatio":23,"createdBy":100,"lastUpdatedBy":101,"folders":102,"meta":103,"rev":107},1774965361051,"fd266d0172cc47429be7ad10f48c99ad","always visible banner","0678d178ec8b41efb8a23c09dba7874d",[],{"ctaText":43,"text":44,"url":29,"blocks":45,"state":93},"ewrererw","testrfesssssssssss",[46,73,81],{"@type":47,"@version":48,"id":49,"component":50,"responsiveStyles":63},"@builder.io/sdk:Element",2,"builder-ca12c06a52de41d7b8743da53118cd38",{"name":51,"tag":51,"options":52,"isRSC":62},"TopBannerContent",{"text":53,"ctaText":54,"url":55,"mainText":56,"cta":59},"New Webinar Series: Join John Hammond, Troy Hunt, and Matt Johansen for the State of Browser Attacks","Save Your Spot","https://pushsecurity.com/webinar/state-of-browser-security",{"content":57,"fontSize":58},"\u003Cp>Meet Push's browser security experts at BlackHat 2026.\u003C/p>","text-base",{"content":60,"fontSize":58,"url":61},"\u003Cp>Book a meeting →\u003C/p>","https://pushsecurity.com/events/blackhat-2026-meeting",null,{"large":64},{"display":65,"flexDirection":66,"position":67,"flexShrink":68,"boxSizing":69,"marginTop":70,"marginBottom":70,"fontSize":71,"fontWeight":72},"flex","column","relative","0","border-box",".56rem","1.125rem","700",{"@type":47,"@version":48,"id":74,"component":75,"responsiveStyles":79},"builder-a2e1f4b9f30b464bb814d7f5de5b0aa7",{"name":76,"options":77,"isRSC":62},"Custom Code",{"code":78,"scriptsClientOnly":6},"\u003Cstyle>\n  .top-banner.bg-web-orange{background:rgb(114, 79, 255);}\n\u003C/style>\n",{"large":80},{"display":65,"flexDirection":66,"position":67,"flexShrink":68,"boxSizing":69},{"id":82,"@type":47,"tagName":83,"properties":84,"responsiveStyles":88},"builder-pixel-o503s4fpvk","img",{"src":85,"aria-hidden":86,"alt":29,"role":87,"width":68,"height":68},"https://cdn.builder.io/api/v1/pixel?apiKey=f3a1111ff5be48cdbb123cd9f5795a05","true","presentation",{"large":89},{"height":68,"width":68,"display":90,"opacity":68,"overflow":91,"pointerEvents":92},"block","hidden","none",{"deviceSize":94,"location":95},"large",{"path":29,"query":96},{},{},1783541846936,1774968080803,"ST0tXQM8slWpFrmioqKHmENB2qe2","kYgMv6WsbvfmlOUYqR2SFwGzw6e2",[],{"kind":104,"lastPreviewUrl":105,"hasLinks":6,"breakpoints":106,"hasErrors":6,"hasAutosaves":6},"component","https://pushsecurity.com/?builder.space=f3a1111ff5be48cdbb123cd9f5795a05&builder.user.permissions=read%2Ccreate%2Cpublish%2CeditDesigns%2CeditLayouts%2CeditLayers%2CeditContentPriority%2CeditFolders%2CcreateProjects%2CsendPullRequests&builder.user.role.name=Designer&builder.user.role.id=creator&builder.cachebust=true&builder.preview=always-visible-banner&builder.noCache=true&builder.allowTextEdit=true&__builder_editing__=true&builder.overrides.always-visible-banner=fd266d0172cc47429be7ad10f48c99ad&builder.overrides.fd266d0172cc47429be7ad10f48c99ad=fd266d0172cc47429be7ad10f48c99ad&builder.options.locale=Default",{"xsmall":31,"small":32,"medium":33},"kyujw1aptq",[109,145],{"createdDate":110,"id":111,"name":112,"modelId":113,"published":13,"stageModifiedSincePublish":6,"query":114,"data":115,"variations":138,"lastUpdated":139,"firstPublished":140,"testRatio":23,"createdBy":24,"lastUpdatedBy":24,"folders":141,"meta":142,"rev":144},1776247359804,"9136a8f18b3b4a6ba29b8653a99372b1","testimonial-inductive-automation","20d9eaa352304613b3d1a794b400703d",[],{"link":116,"type":117,"testimonialLink":118,"testimonial":119},{},"testimonial","/customer-stories/inductive-automation",{"@type":120,"id":121,"model":117,"value":122},"@builder.io/core:Reference","f028f2b685bb47cd8bf9e82a26dd5a79",{"query":123,"folders":124,"createdDate":125,"id":121,"name":126,"modelId":127,"published":13,"data":128,"variations":132,"lastUpdated":133,"firstPublished":134,"testRatio":23,"createdBy":100,"lastUpdatedBy":100,"meta":135,"rev":137},[],[],1735823466309,"We found Push to be more accurate when compared to competitors and the browser agent offered features that others couldn’t match.","42035571a56940ac98bff4544aa79aa5",{"author":129,"jobTitle":130,"quote":126,"image":131},"Jason Waits","\u003Cp>CISO at Inductive Automation\u003C/p>","https://cdn.builder.io/api/v1/image/assets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2Ff04c0c0689ce4a89ac0f0708d78c0a07",{},1735910703862,1735823501152,{"kind":28,"lastPreviewUrl":29,"breakpoints":136,"hasAutosaves":34},{"small":32,"medium":33},"e8bsg4qrgtu",{},1776247404986,1776247404973,[],{"breakpoints":143,"kind":28,"lastPreviewUrl":29,"hasAutosaves":6},{"xsmall":31,"small":32,"medium":33},"g9lqcuxphw7",{"createdDate":146,"id":147,"name":148,"modelId":113,"published":13,"meta":149,"stageModifiedSincePublish":6,"query":151,"data":152,"variations":178,"lastUpdated":179,"firstPublished":180,"testRatio":23,"createdBy":24,"lastUpdatedBy":24,"folders":181,"rev":144},1776255761419,"05a9322735fc427db12e2740e4302300","Report: 2026 Browser Attack Techniques",{"breakpoints":150,"kind":28,"lastPreviewUrl":29,"hasAutosaves":6},{"xsmall":31,"small":32,"medium":33},[],{"testimonial":153,"link":172,"type":175,"title":148,"description":176,"image":177},{"@type":120,"id":154,"model":117,"value":155},"192acbb1f9ca4cac918c0ec435a8bae3",{"query":156,"folders":157,"createdDate":158,"id":154,"name":159,"modelId":127,"published":13,"data":160,"variations":166,"lastUpdated":167,"firstPublished":168,"testRatio":23,"createdBy":100,"lastUpdatedBy":24,"meta":169,"rev":171},[],[],1728981467463,"Push does for identity what CrowdStrike did for the endpoint",{"video":161,"jobTitle":162,"author":163,"qoute":29,"quote":164,"image":165},"https://cdn.builder.io/o/assets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2F8b30e8ca50064058bbaef0f3c6164575%2Fcompressed?apiKey=f3a1111ff5be48cdbb123cd9f5795a05&token=8b30e8ca50064058bbaef0f3c6164575&alt=media&optimized=true","\u003Cp>Deputy CISO at Microsoft\u003C/p>\u003Cp>Former LinkedIn, Slack, Palantir\u003C/p>","Geoff Belknap","Push does for identity what CrowdStrike did for the endpoint.","https://cdn.builder.io/api/v1/image/assets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2F748f0ad0a5064a00a13f4721fcc8dea1",{},1742902158597,1728981782923,{"kind":28,"lastPreviewUrl":29,"breakpoints":170,"hasAutosaves":34},{"small":32,"medium":33},"ulhc0im1hfo",{"text":173,"url":174},"Download now","/resources/browser-attacks-report","resource","Learn about the latest techniques being used in the wild.","https://cdn.builder.io/api/v1/image/assets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2F7b4a5ebf81d64e8c9d7fc35f6c96c4a9",{},1776255810913,1776255810900,[],[183,205],{"createdDate":184,"id":185,"name":148,"modelId":186,"published":13,"meta":187,"stageModifiedSincePublish":6,"query":189,"data":190,"variations":200,"lastUpdated":201,"firstPublished":202,"testRatio":23,"createdBy":24,"lastUpdatedBy":24,"folders":203,"rev":204},1776256900280,"1f429607996e4e5fae8fe3f9b9610e55","4829faa81e7c4ee8bd2d000e160e8d3c",{"breakpoints":188,"kind":28,"lastPreviewUrl":29,"hasAutosaves":6},{"xsmall":31,"small":32,"medium":33},[],{"testimonial":191,"link":199,"type":175,"title":148,"description":176,"image":177},{"@type":120,"id":154,"model":117,"value":192},{"query":193,"folders":194,"createdDate":158,"id":154,"name":159,"modelId":127,"published":13,"data":195,"variations":196,"lastUpdated":167,"firstPublished":168,"testRatio":23,"createdBy":100,"lastUpdatedBy":24,"meta":197,"rev":171},[],[],{"video":161,"jobTitle":162,"author":163,"qoute":29,"quote":164,"image":165},{},{"kind":28,"lastPreviewUrl":29,"breakpoints":198,"hasAutosaves":34},{"small":32,"medium":33},{"text":173,"url":174},{},1776256937553,1776256937540,[],"xggsv10v1q9",{"createdDate":206,"id":207,"name":208,"modelId":186,"published":13,"stageModifiedSincePublish":6,"query":209,"data":210,"variations":220,"lastUpdated":221,"firstPublished":222,"testRatio":23,"createdBy":24,"lastUpdatedBy":24,"folders":223,"meta":224,"rev":204},1776256949234,"ce043785b71b4ece98eac811ecf4ba10","inductive-automation",[],{"link":211,"type":117,"testimonial":212,"testimonialLink":118},{},{"@type":120,"id":121,"model":117,"value":213},{"query":214,"folders":215,"createdDate":125,"id":121,"name":126,"modelId":127,"published":13,"data":216,"variations":217,"lastUpdated":133,"firstPublished":134,"testRatio":23,"createdBy":100,"lastUpdatedBy":100,"meta":218,"rev":137},[],[],{"author":129,"jobTitle":130,"quote":126,"image":131},{},{"kind":28,"lastPreviewUrl":29,"breakpoints":219,"hasAutosaves":34},{"small":32,"medium":33},{},1776256974140,1776256974130,[],{"breakpoints":225,"kind":28,"lastPreviewUrl":29,"hasAutosaves":6},{"xsmall":31,"small":32,"medium":33},{"id":227,"title":228,"authorsCollection":229,"content":235,"extension":457,"faqItemsCollection":458,"faqTitle":62,"featured":6,"hashTags":62,"meta":460,"metaTitle":461,"ogImage":62,"publishedDate":462,"relatedBlogPostsCollection":463,"slug":1197,"stem":1198,"subtitle":62,"summary":1199,"synopsis":1229,"sys":1230,"tagsCollection":1233,"__hash__":1237},"blog/blog/push-security-announces-4m-seed-round-to-introduce-user-centric-approach.json","Push Security Announces $4M Seed Round to Introduce User-Centric Approach to Securing SaaS ",{"items":230},[231],{"fullName":232,"firstName":232,"jobTitle":62,"profilePicture":233},"The Push Team",{"url":234},"https://images.ctfassets.net/y1cdw1ablpvd/7xpR9kiHAQWtZBj2rpOmmU/052ddfbb96afb37962278062047ab16d/Twitter_Linkedin_icon_white.png",{"json":236,"links":452},{"data":237,"content":238,"nodeType":451},{},[239,276,283,290,297,304,311,318,338,347,354,385,393,411,419,426,444],{"data":240,"content":241,"nodeType":275},{},[242,247,258,262,271],{"data":243,"marks":244,"value":245,"nodeType":246},{},[],"Push Security, a provider of technology enabling secure SaaS adoption and usage, today announced it completed a $4 million seed round led by ","text",{"data":248,"content":250,"nodeType":257},{"uri":249},"http://decibel.vc/",[251],{"data":252,"marks":253,"value":256,"nodeType":246},{},[254],{"type":255},"underline","Decibel","hyperlink",{"data":259,"marks":260,"value":261,"nodeType":246},{},[]," and backed by ",{"data":263,"content":265,"nodeType":257},{"uri":264},"/about/",[266],{"data":267,"marks":268,"value":270,"nodeType":246},{},[269],{"type":255},"prominent industry leaders",{"data":272,"marks":273,"value":274,"nodeType":246},{},[],", including Jon Oberheide, co-founder of Duo Security, and Haroon Meer, CEO and founder of Thinkst. With this funding, Push will continue to develop technology that guides employees to make smart decisions while they are using company SaaS platforms, enlisting their help to improve security.","paragraph",{"data":277,"content":278,"nodeType":275},{},[279],{"data":280,"marks":281,"value":282,"nodeType":246},{},[],"In a cloud-first world, employees are moving fast and adopting SaaS platforms to get things done. Most organizations have hundreds of SaaS apps in use in their environment and the majority of those apps are owned by employees rather than IT or security. SaaS makes productivity gains and technical innovation accessible for companies of all sizes, but it also introduces risk to the business unless it’s properly managed. Without a way to ensure employees are using SaaS securely, many organizations resort to try to control SaaS with highly restrictive policies, which is frustrating for both employees and security teams.",{"data":284,"content":285,"nodeType":275},{},[286],{"data":287,"marks":288,"value":289,"nodeType":246},{},[],"Push believes that the best way to support this move toward productivity and flexibility is to adopt a user-centric approach — to equip employees to improve their own security while using SaaS. ",{"data":291,"content":292,"nodeType":275},{},[293],{"data":294,"marks":295,"value":296,"nodeType":246},{},[],"“The world of work is shifting in a big way,” said Adam Bateman, Push co-founder and CEO. “Employees want flexibility and they need the right tools to be productive, but those tools aren’t always company-approved. So, they’re signing up for those tools on their own. Security teams want to assert some control over this because SaaS apps introduce risk to their company, so they often try to simply lock down SaaS. However, in the long run this just encourages employees to work around the security team. You can’t secure SaaS that’s owned by employees without working with employees. We’ve built a lightweight, scalable way to let employees use SaaS responsibly, guiding them to actually fix security issues, while offloading work from security teams. We’ll prove along the way that employees don’t need to just be seen as part of the problem, but can actually become part of the solution.”",{"data":298,"content":299,"nodeType":275},{},[300],{"data":301,"marks":302,"value":303,"nodeType":246},{},[],"“The future of cyber resilience in a SaaS-first world needs cloud-scale solutions designed for the user,” added Ollie Whitehouse, angel investor and CTO at NCC Group. “Push has delivered a solution that has unlimited potential to provide value to all organizations in such a world.” ",{"data":305,"content":306,"nodeType":275},{},[307],{"data":308,"marks":309,"value":310,"nodeType":246},{},[],"Jon Sakoda, Push investor and founder of Decibel, invested in Push’s vision for the future and scalable approach to a really difficult problem. “The Push team has set out to help organizations of every size safely adopt SaaS,” said Jon. “The co-founders have deep security experience as researchers and red teamers, and they’re applying that knowledge to an exponentially growing problem that no one else has been able to solve. I can’t wait to see what the Push team will do to apply user-centric security to finally help organizations progress beyond traditional security solutions that have not been able to keep up with the pace of modern IT.”",{"data":312,"content":313,"nodeType":275},{},[314],{"data":315,"marks":316,"value":317,"nodeType":246},{},[],"“Push is connecting the dots between users and their SaaS applications, allowing them to use the apps they love while keeping their organization secure,” added Jon Oberheide, angel investor, co-founder and former CTO of Duo Security (acquired by Cisco). ",{"data":319,"content":320,"nodeType":275},{},[321,325,334],{"data":322,"marks":323,"value":324,"nodeType":246},{},[],"Push is free to try and free to use for up to 10 users. Visit ",{"data":326,"content":328,"nodeType":257},{"uri":327},"https://pushsecurity.com/",[329],{"data":330,"marks":331,"value":333,"nodeType":246},{},[332],{"type":255},"pushsecurity.com",{"data":335,"marks":336,"value":337,"nodeType":246},{},[]," to sign up and start your trial.  ",{"data":339,"content":340,"nodeType":275},{},[341],{"data":342,"marks":343,"value":346,"nodeType":246},{},[344],{"type":345},"bold","About Push Security",{"data":348,"content":349,"nodeType":275},{},[350],{"data":351,"marks":352,"value":353,"nodeType":246},{},[],"Push provides a super scalable way to secure SaaS, by equipping employees to join the fight against attackers and improve their own security. We monitor employee SaaS activity and then (using tools such as ChatOps and a browser extension) provide them with just-in-time guidance to help them make good security decisions about how they use and access SaaS.",{"data":355,"content":356,"nodeType":275},{},[357,361,368,372,381],{"data":358,"marks":359,"value":360,"nodeType":246},{},[],"Push is backed by Decibel Partners. See Push in action at ",{"data":362,"content":363,"nodeType":257},{"uri":327},[364],{"data":365,"marks":366,"value":333,"nodeType":246},{},[367],{"type":255},{"data":369,"marks":370,"value":371,"nodeType":246},{},[]," and follow them on at ",{"data":373,"content":375,"nodeType":257},{"uri":374},"https://twitter.com/PushSecurity",[376],{"data":377,"marks":378,"value":380,"nodeType":246},{},[379],{"type":255},"@PushSecurity",{"data":382,"marks":383,"value":384,"nodeType":246},{},[],". ",{"data":386,"content":387,"nodeType":275},{},[388],{"data":389,"marks":390,"value":392,"nodeType":246},{},[391],{"type":345},"About Decibel",{"data":394,"content":395,"nodeType":275},{},[396,399,407],{"data":397,"marks":398,"value":29,"nodeType":246},{},[],{"data":400,"content":402,"nodeType":257},{"uri":401},"http://decibel.vc",[403],{"data":404,"marks":405,"value":256,"nodeType":246},{},[406],{"type":255},{"data":408,"marks":409,"value":410,"nodeType":246},{},[]," is an independent venture firm, based in Silicon Valley that backs technical founders and helps them find product-market fit and accelerate their business. Decibel invests in early-stage enterprise software companies, with a special focus on Cybersecurity, Developer Platforms, Open Source, and ML and AI Infrastructure and Applications.",{"data":412,"content":413,"nodeType":275},{},[414],{"data":415,"marks":416,"value":418,"nodeType":246},{},[417],{"type":345},"Contact:",{"data":420,"content":421,"nodeType":275},{},[422],{"data":423,"marks":424,"value":425,"nodeType":246},{},[],"Sally Soulliere, Push Security ",{"data":427,"content":428,"nodeType":275},{},[429,432,441],{"data":430,"marks":431,"value":29,"nodeType":246},{},[],{"data":433,"content":435,"nodeType":257},{"uri":434},"mailto:sally.soulliere@pushsecurity.com",[436],{"data":437,"marks":438,"value":440,"nodeType":246},{},[439],{"type":255},"sally.soulliere@pushsecurity.com",{"data":442,"marks":443,"value":29,"nodeType":246},{},[],{"data":445,"content":446,"nodeType":275},{},[447],{"data":448,"marks":449,"value":450,"nodeType":246},{},[],"\n","document",{"entries":453},{"hyperlink":454,"block":455,"inline":456},[],[],[],"json",{"items":459},[],{},"Push announces $4M seed round","2022-07-19T00:00:00.000Z",{"items":464},[465,834],{"__typename":466,"sys":467,"content":469,"title":821,"synopsis":822,"hashTags":62,"publishedDate":462,"slug":823,"tagsCollection":824,"authorsCollection":830},"BlogPosts",{"id":468},"4ZNEAZLwXE9Pz3lx1mhEZN",{"json":470},{"data":471,"content":472,"nodeType":451},{},[473,481,499,506,513,520,528,535,543,575,582,589,596,603,610,617,624,632,639,646,653,660,676,683,690,697,704,711,718,725,732,739,746,755,762,789,796,803],{"data":474,"content":475,"nodeType":480},{},[476],{"data":477,"marks":478,"value":479,"nodeType":246},{},[],"Blocking SaaS isn’t working ","heading-1",{"data":482,"content":483,"nodeType":275},{},[484,490,494],{"data":485,"marks":486,"value":489,"nodeType":246},{},[487],{"type":488},"italic","tl;dr",{"data":491,"marks":492,"value":493,"nodeType":246},{},[],": ",{"data":495,"marks":496,"value":498,"nodeType":246},{},[497],{"type":488},"The traditional way of just blocking apps that haven’t been vetted or approved by the security team isn’t working now and absolutely won’t scale as businesses now value flexibility as much as productivity and security. You don’t have to choose one anymore. Empower your employees to be productive and move fast, securely, and partner with them to secure SaaS.",{"data":500,"content":501,"nodeType":275},{},[502],{"data":503,"marks":504,"value":505,"nodeType":246},{},[],"It’s common for organizations to have hundreds of SaaS apps in use at all times and we expect that number to continue to rise. Most companies accept SaaS use because it helps employees be productive and get their work done, but each SaaS app does introduce risk to the company because they require access to business data, employees input data into each app, and the app becomes a part of your larger corporate attack surface. ",{"data":507,"content":508,"nodeType":275},{},[509],{"data":510,"marks":511,"value":512,"nodeType":246},{},[],"Simply blocking SaaS use hasn’t worked to date and, as more and more apps are built, with more and more functionality employees need, blocking and restricting just can’t scale and will widen the divide between security and employees.",{"data":514,"content":515,"nodeType":275},{},[516],{"data":517,"marks":518,"value":519,"nodeType":246},{},[],"But to secure SaaS, security teams need visibility. There are some newer tools on the market built specifically to discover cloud and SaaS adoption (SaaS discovery and shadow IT discovery tools), but they tend to be focused exclusively on knowing what employees are using so that security and IT can enforce rules and controls on that SaaS use in order to keep company data out of the hands of the bad guys. ",{"data":521,"content":522,"nodeType":275},{},[523],{"data":524,"marks":525,"value":527,"nodeType":246},{},[526],{"type":345},"Instead of focusing on using that SaaS visibility to create and enforce new policies to restrict SaaS use, what if we could leverage SaaS visibility to help employees actually adopt and use SaaS how they want to? ",{"data":529,"content":530,"nodeType":275},{},[531],{"data":532,"marks":533,"value":534,"nodeType":246},{},[],"We’re trying a different approach that puts more trust in employees’ desire and ability to keep themselves secure. ",{"data":536,"content":537,"nodeType":480},{},[538],{"data":539,"marks":540,"value":542,"nodeType":246},{},[541],{"type":345},"Introducing a user-centric approach to securing SaaS ",{"data":544,"content":545,"nodeType":275},{},[546,550,558,562,571],{"data":547,"marks":548,"value":549,"nodeType":246},{},[],"\nThe user-centric movement has been successfully adopted by industry leaders like ",{"data":551,"content":553,"nodeType":257},{"uri":552},"https://slack.engineering/distributed-security-alerting/",[554],{"data":555,"marks":556,"value":557,"nodeType":246},{},[],"Slack",{"data":559,"marks":560,"value":561,"nodeType":246},{},[],", ",{"data":563,"content":565,"nodeType":257},{"uri":564},"https://netflixtechblog.com/introducing-netflix-stethoscope-5f3c392368e3",[566],{"data":567,"marks":568,"value":570,"nodeType":246},{},[569],{"type":255},"Netflix",{"data":572,"marks":573,"value":574,"nodeType":246},{},[],", Github, Duo Security. For endpoint security, those user-centric approaches were spot on. They engaged employees to make decisions about their devices that would inform security teams about employee devices. We even developed our own user-centric solution for endpoint devices when working together at MWR (acquired by F-Secure). ",{"data":576,"content":577,"nodeType":275},{},[578],{"data":579,"marks":580,"value":581,"nodeType":246},{},[],"When it comes to securing SaaS, working directly with users (employees) is not just a huge value add, it's essential. That's because the SaaS apps employees are using are giant unknowns - they’re not known entities or endpoints like employee devices - so you can't find out about or address security issues in SaaS apps without working with employees who are using those apps.",{"data":583,"content":584,"nodeType":480},{},[585],{"data":586,"marks":587,"value":588,"nodeType":246},{},[],"SaaS is owned by users, so needs to be secured by users",{"data":590,"content":591,"nodeType":275},{},[592],{"data":593,"marks":594,"value":595,"nodeType":246},{},[],"Scared yet? We get it, and we don’t expect you to relinquish all control of security and hand it off to employees. But stick with us for a second… There’s a stat making the rounds that suggests that more than two-thirds of SaaS is owned by employees. They’re self-adopting SaaS, integrating it with your business data, and using those tools to work faster, smarter, and generally be more productive. So, while it may not make sense to give up and just let employees continue doing what they’re doing with zero oversight, there’s a scalable way to meet in the middle. ",{"data":597,"content":598,"nodeType":275},{},[599],{"data":600,"marks":601,"value":602,"nodeType":246},{},[],"We decided to focus on improving the security of SaaS use by equipping employees to help. If this approach lets employees freely adopt and use SaaS, then it’s a win for both employees and security teams.",{"data":604,"content":605,"nodeType":275},{},[606],{"data":607,"marks":608,"value":609,"nodeType":246},{},[],"Could user-centric security concepts be used to secure SaaS and cloud application usage - not just securing access to SaaS, but restricting excessive app permissions, removing unused cloud apps and shadow IT, and so on?  ",{"data":611,"content":612,"nodeType":275},{},[613],{"data":614,"marks":615,"value":616,"nodeType":246},{},[],"SaaS is user-powered. They’re adopting it and using it on their own already. Trying to secure SaaS by either completely restricting its use or only allowing employees access to a handful of corporate-sanctioned apps won’t scale. It would be naive to ignore the fact that SaaS introduces risk. Each app requests access to business data, employees have to integrate the apps into your systems and they’ll be inputting business data into the app. Which means that each app becomes a part of the attack surface security teams must protect.",{"data":618,"content":619,"nodeType":275},{},[620],{"data":621,"marks":622,"value":623,"nodeType":246},{},[],"The old way of dealing with this was just to block SaaS as soon as the security team discovers an app in use, or requiring administrator approval before integrating with other SaaS - keeping the security team in the role of the enforcer or blocker to employee SaaS use. Everyone hates that way - employees and security teams. But leaving SaaS adoption wide open is a security nightmare. So where do you start when it comes to securing SaaS use? With the owners of SaaS - the users.",{"data":625,"content":626,"nodeType":631},{},[627],{"data":628,"marks":629,"value":630,"nodeType":246},{},[],"You can’t secure SaaS without involving the user","heading-2",{"data":633,"content":634,"nodeType":275},{},[635],{"data":636,"marks":637,"value":638,"nodeType":246},{},[],"To secure SaaS, you need to: ",{"data":640,"content":641,"nodeType":275},{},[642],{"data":643,"marks":644,"value":645,"nodeType":246},{},[],"1) know what SaaS employees are using and how they’re using them",{"data":647,"content":648,"nodeType":275},{},[649],{"data":650,"marks":651,"value":652,"nodeType":246},{},[],"2) know what data the app has access to and what it requires",{"data":654,"content":655,"nodeType":275},{},[656],{"data":657,"marks":658,"value":659,"nodeType":246},{},[],"3) find out if security controls are missing and then chase employees to enable them improve",{"data":661,"content":662,"nodeType":275},{},[663,667,672],{"data":664,"marks":665,"value":666,"nodeType":246},{},[],"The most logical way to get this information is to talk to your employees directly, but that can’t scale. Let’s say you have 200 employees and each is using a dozen SaaS apps in their role. Are you going to go to each employee (through Slack or Teams, over the phone, via email?) and ask what they’re using, how they’re accessing it, what they’re using it for, if they’re still using it, who the admin is, and so on? Even if you ",{"data":668,"marks":669,"value":671,"nodeType":246},{},[670],{"type":488},"could",{"data":673,"marks":674,"value":675,"nodeType":246},{},[]," do that, would they even remember all the SaaS apps they’ve started trials with or what they’re using for free? What else would fall under your radar?",{"data":677,"content":678,"nodeType":275},{},[679],{"data":680,"marks":681,"value":682,"nodeType":246},{},[],"To satisfy the three SaaS security requirements we listed above, we’ve decided to focus our initial product efforts on SaaS discovery and getting business context from SaaS users (your employees) to ensure they’re using SaaS securely.",{"data":684,"content":685,"nodeType":275},{},[686],{"data":687,"marks":688,"value":689,"nodeType":246},{},[],"But knowing is just the start - what’s the point of getting visibility if you’re not using it to fix security issues or remove high-risk or dodgy apps?",{"data":691,"content":692,"nodeType":480},{},[693],{"data":694,"marks":695,"value":696,"nodeType":246},{},[],"Guide employees to fix security issues and use SaaS securely ",{"data":698,"content":699,"nodeType":275},{},[700],{"data":701,"marks":702,"value":703,"nodeType":246},{},[],"That’s where the user-centric approach to securing SaaS comes in. We believe employees want to do the right thing and don’t want to be the one responsible for a breach. As long as we make it as easy and quick as possible for them to help and to take action, they will. ",{"data":705,"content":706,"nodeType":275},{},[707],{"data":708,"marks":709,"value":710,"nodeType":246},{},[],"To make this work at scale, we use ChatOps to engage directly with the employee, and a browser extension to prompt users and help them fix SaaS security issues. By helping them self-remediate issues, we offload the more mindless security hygiene work from security and IT, while enabling employees to use the SaaS tools they want.",{"data":712,"content":713,"nodeType":275},{},[714],{"data":715,"marks":716,"value":717,"nodeType":246},{},[],"We can also use this technology to get relevant business context about how they’re using each app and if they’re even still using it. If they say they aren’t using it anymore, we can help them remove it from your attack surface. ",{"data":719,"content":720,"nodeType":631},{},[721],{"data":722,"marks":723,"value":724,"nodeType":246},{},[],"But I can’t trust employees to own security!",{"data":726,"content":727,"nodeType":275},{},[728],{"data":729,"marks":730,"value":731,"nodeType":246},{},[],"There’s an old trope in the security world that users are the weakest link. So, how can we expect “the weakest link” in a company to actually secure the company? We’d like to challenge that old adage and suggest that employees shouldn’t be expected to become security experts in order to secure a business. That’s not their job. ",{"data":733,"content":734,"nodeType":275},{},[735],{"data":736,"marks":737,"value":738,"nodeType":246},{},[],"What employees can do really well is provide context for the security team and to self-remediate the more mundane security issues by using stronger passwords, enabling MFA for SaaS apps, and so on. ",{"data":740,"content":741,"nodeType":275},{},[742],{"data":743,"marks":744,"value":745,"nodeType":246},{},[],"We believe the key to making the user-centric approach work is to give users clear, easy to follow instructions and asking them questions they can answer without Googling for more information. We ask questions to get useful context and then enrich SaaS usage data for admins so they can make decisions about what SaaS is appropriate for their business.",{"data":747,"content":753,"nodeType":754},{"target":748},{"sys":749},{"id":750,"type":751,"linkType":752},"7eWh1U86EEbSFeJdXIPUZl","Link","Entry",[],"embedded-entry-block",{"data":756,"content":757,"nodeType":480},{},[758],{"data":759,"marks":760,"value":761,"nodeType":246},{},[],"Making user-centric security work in the real world ",{"data":763,"content":764,"nodeType":275},{},[765,769,774,780,785],{"data":766,"marks":767,"value":768,"nodeType":246},{},[],"Getting user-centric security to work well requires a near-perfect user experience - it must be quick and easy or they won’t engage with it. We need to understand employees, speak their language, empathize with them, respect their busy schedules, and help them when they’re ready to work with us. One truth remains: ",{"data":770,"marks":771,"value":773,"nodeType":246},{},[772],{"type":345},"If employees aren’t responding to prompts, assume ",{"data":775,"marks":776,"value":779,"nodeType":246},{},[777,778],{"type":345},{"type":488},"we’re ",{"data":781,"marks":782,"value":784,"nodeType":246},{},[783],{"type":345},"the problem",{"data":786,"marks":787,"value":788,"nodeType":246},{},[],". We’ll be optimizing continuously based on employee engagement rate. ",{"data":790,"content":791,"nodeType":480},{},[792],{"data":793,"marks":794,"value":795,"nodeType":246},{},[],"Users aren’t the problem, they’re part of the solution",{"data":797,"content":798,"nodeType":275},{},[799],{"data":800,"marks":801,"value":802,"nodeType":246},{},[],"Engaging users to self-remediate SaaS security issues just makes sense and it's by far the most scalable way to secure SaaS. Securing SaaS while balancing the needs of employees and security teams requires that we work together and share the responsibilities. To do this, we need to stop insisting that users are the problem and remember that attackers are the bad guys, not employees.",{"data":804,"content":805,"nodeType":275},{},[806,810,817],{"data":807,"marks":808,"value":809,"nodeType":246},{},[],"Follow us on ",{"data":811,"content":812,"nodeType":257},{"uri":374},[813],{"data":814,"marks":815,"value":816,"nodeType":246},{},[],"social media",{"data":818,"marks":819,"value":820,"nodeType":246},{},[]," and subscribe to our blog if you’re interested in hearing about what we’re learning from users along the way. We’d also love your feedback so we can keep improving!","Building a culture of trust to secure SaaS, together","We’re excited to announce our $4M seed round, led by Decibel. See how we’re building tech that allows companies to let employees freely & securely adopt SaaS.","building-a-culture-of-trust-to-secure-saas-together",{"items":825},[826],{"sys":827,"name":829},{"id":828},"4EtskIWlj3SOH3UHbFR8uG","Company news",{"items":831},[832],{"fullName":232,"firstName":232,"jobTitle":62,"profilePicture":833},{"url":234},{"__typename":466,"sys":835,"content":837,"title":1179,"synopsis":1180,"hashTags":62,"publishedDate":1181,"slug":1182,"tagsCollection":1183,"authorsCollection":1189},{"id":836},"6u04NzVmpZJIfEEqfD4PV8",{"json":838},{"data":839,"content":840,"nodeType":451},{},[841,848,883,889,897,916,922,938,944,951,957,964,971,988,997,1004,1011,1053,1059,1065,1081,1087,1094,1101,1108,1115,1122,1129,1136,1142,1172],{"data":842,"content":843,"nodeType":275},{},[844],{"data":845,"marks":846,"value":847,"nodeType":246},{},[],"We've been busy at Push Security recently and we're so excited to tell you the latest on some highlights:",{"data":849,"content":850,"nodeType":882},{},[851,862,872],{"data":852,"content":853,"nodeType":861},{},[854],{"data":855,"content":856,"nodeType":275},{},[857],{"data":858,"marks":859,"value":860,"nodeType":246},{},[],"Discover SaaS and secure accounts","list-item",{"data":863,"content":864,"nodeType":861},{},[865],{"data":866,"content":867,"nodeType":275},{},[868],{"data":869,"marks":870,"value":871,"nodeType":246},{},[],"Find risky third-party integrations",{"data":873,"content":874,"nodeType":861},{},[875],{"data":876,"content":877,"nodeType":275},{},[878],{"data":879,"marks":880,"value":881,"nodeType":246},{},[],"Solve problems at scale with ChatOps","unordered-list",{"data":884,"content":885,"nodeType":480},{},[886],{"data":887,"marks":888,"value":860,"nodeType":246},{},[],{"data":890,"content":891,"nodeType":275},{},[892],{"data":893,"marks":894,"value":896,"nodeType":246},{},[895],{"type":488},"Use Push to discover SaaS apps employees are using in your company and secure the accounts being used to access them.",{"data":898,"content":899,"nodeType":275},{},[900,904,912],{"data":901,"marks":902,"value":903,"nodeType":246},{},[],"If you’re already using the Push platform and have connected Microsoft 365 or Google Workspace to Push, you’ll see we’ve already started ",{"data":905,"content":907,"nodeType":257},{"uri":906},"https://pushsecurity.com/app/saas/",[908],{"data":909,"marks":910,"value":911,"nodeType":246},{},[],"showing SaaS your employees are using via social logins on the SaaS page",{"data":913,"marks":914,"value":915,"nodeType":246},{},[],":",{"data":917,"content":921,"nodeType":754},{"target":918},{"sys":919},{"id":920,"type":751,"linkType":752},"2ToxWrI4FhzYHLPSth2LFy",[],{"data":923,"content":924,"nodeType":275},{},[925,929,934],{"data":926,"marks":927,"value":928,"nodeType":246},{},[],"Now we’ve officially released our browser extension, you can also see the SaaS your employees are logging in to using classic usernames and passwords, so you can see your ",{"data":930,"marks":931,"value":933,"nodeType":246},{},[932],{"type":488},"SaaSiest",{"data":935,"marks":936,"value":937,"nodeType":246},{},[]," users:",{"data":939,"content":943,"nodeType":754},{"target":940},{"sys":941},{"id":942,"type":751,"linkType":752},"5I1zjRqBhrlWxigHPvDFUd",[],{"data":945,"content":946,"nodeType":275},{},[947],{"data":948,"marks":949,"value":950,"nodeType":246},{},[],"Deploying the browser extension is easy - you can send install links to your employees via email or ChatOps and they can install and enroll in just a few seconds: ",{"data":952,"content":956,"nodeType":754},{"target":953},{"sys":954},{"id":955,"type":751,"linkType":752},"7HmaMvzm4iy5NnSj1Fdi1R",[],{"data":958,"content":959,"nodeType":275},{},[960],{"data":961,"marks":962,"value":963,"nodeType":246},{},[],"If you’d prefer a no-click setup, watch this space, we’ll be releasing some options for managed browsers, GPO, and MDM users soon.",{"data":965,"content":966,"nodeType":275},{},[967],{"data":968,"marks":969,"value":970,"nodeType":246},{},[],"Using the browser extension will also show if users are using strong passwords and unique passwords between accounts and, of course, you can use ChatOps to have Push automatically reach out to any users with issues (like using weak passwords or sharing passwords with multiple apps) to have them self-remediate without you having to lift a finger.",{"data":972,"content":973,"nodeType":275},{},[974,977,985],{"data":975,"marks":976,"value":29,"nodeType":246},{},[],{"data":978,"content":980,"nodeType":257},{"uri":979},"https://pushsecurity.com/s?c=secure-user-accounts-demo1573",[981],{"data":982,"marks":983,"value":984,"nodeType":246},{},[],"Click here to check out an interactive demo.",{"data":986,"marks":987,"value":29,"nodeType":246},{},[],{"data":989,"content":993,"nodeType":480},{"target":990},{"sys":991},{"id":992,"type":751,"linkType":752},"6sHhlmQuGNxCv1yK1mGioz",[994],{"data":995,"marks":996,"value":871,"nodeType":246},{},[],{"data":998,"content":999,"nodeType":275},{},[1000],{"data":1001,"marks":1002,"value":1003,"nodeType":246},{},[],"Now that you’ve got visibility of all the SaaS apps employees are using, what about all the integrations within each of those apps? ",{"data":1005,"content":1006,"nodeType":275},{},[1007],{"data":1008,"marks":1009,"value":1010,"nodeType":246},{},[],"They often request access to company data and files, but fly under your radar because they’re buried under that core app and you don’t normally even see them. Turns out they’re just as risky as the core SaaS platforms employees are using.",{"data":1012,"content":1013,"nodeType":882},{},[1014,1033,1043],{"data":1015,"content":1016,"nodeType":861},{},[1017],{"data":1018,"content":1019,"nodeType":275},{},[1020,1024,1029],{"data":1021,"marks":1022,"value":1023,"nodeType":246},{},[],"You can now see ",{"data":1025,"marks":1026,"value":1028,"nodeType":246},{},[1027],{"type":488},"all of those SaaS integrations ",{"data":1030,"marks":1031,"value":1032,"nodeType":246},{},[],"connected to your core SaaS platforms (Google Workspace and Microsoft 365) within the Push dashboard",{"data":1034,"content":1035,"nodeType":861},{},[1036],{"data":1037,"content":1038,"nodeType":275},{},[1039],{"data":1040,"marks":1041,"value":1042,"nodeType":246},{},[],"Get visibility on if those integrations are doing anything suspicious or malicious, or even if they’re asking for excessive or risky permissions.",{"data":1044,"content":1045,"nodeType":861},{},[1046],{"data":1047,"content":1048,"nodeType":275},{},[1049],{"data":1050,"marks":1051,"value":1052,"nodeType":246},{},[],"Soon, you'll be able to use ChatOps to Let us work directly with employees to remove any integrations they’ve tried, but aren’t actively using anymore to reduce your attack surface.",{"data":1054,"content":1058,"nodeType":754},{"target":1055},{"sys":1056},{"id":1057,"type":751,"linkType":752},"5bHuVjuvonkOMtVfiP5uiV",[],{"data":1060,"content":1061,"nodeType":275},{},[1062],{"data":1063,"marks":1064,"value":29,"nodeType":246},{},[],{"data":1066,"content":1067,"nodeType":275},{},[1068,1071,1078],{"data":1069,"marks":1070,"value":29,"nodeType":246},{},[],{"data":1072,"content":1074,"nodeType":257},{"uri":1073},"https://pushsecurity.com/s?c=third-party-integrations-demo1573",[1075],{"data":1076,"marks":1077,"value":984,"nodeType":246},{},[],{"data":1079,"marks":1080,"value":29,"nodeType":246},{},[],{"data":1082,"content":1083,"nodeType":480},{},[1084],{"data":1085,"marks":1086,"value":881,"nodeType":246},{},[],{"data":1088,"content":1089,"nodeType":275},{},[1090],{"data":1091,"marks":1092,"value":1093,"nodeType":246},{},[],"You’ve probably heard us mention ChatOps before. Simply finding security issues alone isn’t useful; you need clear, actionable next steps. For a lot of security issues, those next steps will inevitably require, or benefit from, something from the user.",{"data":1095,"content":1096,"nodeType":275},{},[1097],{"data":1098,"marks":1099,"value":1100,"nodeType":246},{},[],"For example, if you find a user is using the same password to log in to Microsoft 365 as 6 other, perhaps less reputable platforms, you might like to ask the user to update their password…",{"data":1102,"content":1103,"nodeType":275},{},[1104],{"data":1105,"marks":1106,"value":1107,"nodeType":246},{},[],"…or register for MFA….",{"data":1109,"content":1110,"nodeType":275},{},[1111],{"data":1112,"marks":1113,"value":1114,"nodeType":246},{},[],"…or remove that dodgy third-party integration…",{"data":1116,"content":1117,"nodeType":275},{},[1118],{"data":1119,"marks":1120,"value":1121,"nodeType":246},{},[],"…or a million other things. You could do this yourself but with ChatOps, Push can find these issues and fix them without you lifting a finger.",{"data":1123,"content":1124,"nodeType":275},{},[1125],{"data":1126,"marks":1127,"value":1128,"nodeType":246},{},[],"And we’re already seeing the impact. For example, we mentioned earlier you can use ChatOps to deploy our browser extension - customers that have already done this have seen over 80% of employees set up without any action needed from the security/IT teams. It’s great to see the ChatOps concept be so effective and over time we’ll be tweaking how, when, and what we message users to improve even further!",{"data":1130,"content":1131,"nodeType":275},{},[1132],{"data":1133,"marks":1134,"value":1135,"nodeType":246},{},[],"Alongside this, in response to your feedback, we’ve got a fresh update for how you set up and monitor ChatOps that gives you full control over which employees are active for ChatOps, and which topics we should speak to employees about. Check it out:",{"data":1137,"content":1141,"nodeType":754},{"target":1138},{"sys":1139},{"id":1140,"type":751,"linkType":752},"1UdFP3SM23Zos2B4LoYExp",[],{"data":1143,"content":1144,"nodeType":275},{},[1145,1149,1157,1161,1168],{"data":1146,"marks":1147,"value":1148,"nodeType":246},{},[],"All these features are available now so ",{"data":1150,"content":1152,"nodeType":257},{"uri":1151},"https://pushsecurity.com/app/users/",[1153],{"data":1154,"marks":1155,"value":1156,"nodeType":246},{},[],"log in to your account",{"data":1158,"marks":1159,"value":1160,"nodeType":246},{},[]," to give them a go. New users can sign up for free by heading to ",{"data":1162,"content":1164,"nodeType":257},{"uri":1163},"https://pushsecurity.com",[1165],{"data":1166,"marks":1167,"value":333,"nodeType":246},{},[],{"data":1169,"marks":1170,"value":1171,"nodeType":246},{},[]," and clicking \"Try it free.\"",{"data":1173,"content":1174,"nodeType":275},{},[1175],{"data":1176,"marks":1177,"value":29,"nodeType":246},{},[1178],{"type":255},"Product release: July 2022","Here’s what’s new on the Push platform for July 2022.","2022-07-15T00:00:00.000Z","product-release-july-2022",{"items":1184},[1185],{"sys":1186,"name":1188},{"id":1187},"5jk0kqjSdSK2L0YiistQjY","Release notes",{"items":1190},[1191],{"fullName":1192,"firstName":1193,"jobTitle":1194,"profilePicture":1195},"Andy Waugh","Andy","VP Product",{"url":1196},"https://images.ctfassets.net/y1cdw1ablpvd/3Rf76rJn6S9inMb4dUnAIJ/0a787f8141d05b95300e2fe77c4493fa/DSC_6868.jpg","push-security-announces-4m-seed-round-to-introduce-user-centric-approach","blog/push-security-announces-4m-seed-round-to-introduce-user-centric-approach",{"json":1200},{"data":1201,"content":1202,"nodeType":451},{},[1203],{"data":1204,"content":1205,"nodeType":275},{},[1206,1210,1216,1219,1225],{"data":1207,"marks":1208,"value":1209,"nodeType":246},{},[],"Push Security announces it completed a $4 million seed round led by ",{"data":1211,"content":1212,"nodeType":257},{"uri":249},[1213],{"data":1214,"marks":1215,"value":256,"nodeType":246},{},[],{"data":1217,"marks":1218,"value":261,"nodeType":246},{},[],{"data":1220,"content":1221,"nodeType":257},{"uri":264},[1222],{"data":1223,"marks":1224,"value":270,"nodeType":246},{},[],{"data":1226,"marks":1227,"value":1228,"nodeType":246},{},[],", including Jon Oberheide and Haroon Meer. With this funding, Push will continue to develop technology that equips employees to secure SaaS.","Launches solution that finds SaaS apps employees are using and guides them to fix issues",{"id":1231,"publishedAt":1232},"1LWXA4OL7v5bqsS4acnnpr","2025-08-06T14:32:58.254Z",{"items":1234},[1235],{"sys":1236,"name":829},{"id":828},"Zr13PXi8P0dTishpUr6KFnU_zCddAN6TJYiguYBajBI",1784196731049]