ChaptersEventsBlog

Download Publication

SaaS Security and Misconfigurations Report
SaaS Security and Misconfigurations Report
Who it's for:
cybersecurity professionals

SaaS Security and Misconfigurations Report

Release Date: 04/11/2022

Working Group: SaaS Governance

Many recent breaches and data leaks have been tied back to misconfigurations causing it to be a top concern for many organizations. Most research related to misconfigurations has focused strictly on the IaaS layers and ignores the SaaS stack entirely. Yet, SaaS security and misconfigurations are equally crucial to the organization's overall security. For these reasons, CSA developed and distributed a survey to better understand the use of SaaS applications, timeline and tools for SaaS security assessments, a timeframe for misconfiguration detection and remediation, and awareness of security tools for SaaS applications.

The goal of this survey was to understand the current state of SaaS security and misconfigurations. Key areas of interest include:

  • Use of SaaS applications with organizations
  • Methods, policies, and tools for assessing SaaS app security
  • Timeline for detecting and remediating misconfigurations in SaaS app security
  • Awareness of new SaaS security related products
Download this Resource

Bookmark
Share
View translations
Related resources

Sponsor

Managing Privileged Access in a Cloud-First World
Managing Privileged Access in a Cloud-First World
Beyond the Hype: A Benchmark Study of AI Agents in the SOC
Beyond the Hype: A Benchmark Study of AI Agents...
SaaS Security Capability Framework (SSCF)
SaaS Security Capability Framework (SSCF)
AI Security Governance: Your Maturity Multiplier
AI Security Governance: Your Maturity Multiplier
Published: 12/18/2025
Beyond Workday: Why Socially Engineered SaaS Breaches Are Spreading
Beyond Workday: Why Socially Engineered SaaS Breaches Are Spreading
Published: 12/15/2025
Why Your Copilot Needs a Security Co-Pilot: Enhancing GenAI with Deterministic Fixes
Why Your Copilot Needs a Security Co-Pilot: Enhancing GenAI with De...
Published: 12/10/2025
Microsoft Entra ID Vulnerability: The Discovery That Shook Identity Security
Microsoft Entra ID Vulnerability: The Discovery That Shook Identity...
Published: 12/08/2025

Interested in helping develop research with CSA?

Related Certificates & Training