Nudge Security Automates Detection and Remediation of Risky OAuth Grants and Browser Extensions

Nudge Security has unveiled new agentic capabilities designed to help security and IT teams identify and remediate malicious or high-risk OAuth grants and browser extensions. These two attack vectors represent some of the fastest-growing and most challenging areas for enterprises to manage effectively.

The newly introduced agents continuously analyze OAuth grants and browser extensions that Nudge Security discovers. They are programmed to flag items deemed risky and to automate remediation processes, incorporating a human-in-the-loop approach for final decisions. These agents complement Nudge Security's existing Vendor Risk Analyst agent, which automates the creation of security profiles for new AI and SaaS applications, reportedly reducing manual security review times by up to 90%.

Modern enterprises grapple with an ever-increasing number of applications, browser extensions, and third-party connections, overwhelming traditional manual security assessment methods. Incidents like the breaches at Klue and Salesloft Drift highlight how compromised OAuth grants can provide attackers with broad, persistent access to sensitive data. Similarly, malicious browser extensions can introduce supply chain risks directly into employees' daily workflows. The rapid proliferation of shadow AI and SaaS applications further exacerbates this problem, with new vendors and potential exposures emerging faster than security teams can manage.

Nudge Security's agentic capabilities aim to close the gap between the discovery of these risks and the ability to take action. The specific agents include:

• OAuth Grant Risk Analyst: This agent scrutinizes OAuth grants, identifies anomalies, and suggests specific revocations based on the organization's defined security policies.
• Browser Extension Risk Analyst: This agent surfaces risky and potentially malicious third-party browser extensions installed on employee devices, assisting teams in prioritizing remediation efforts.
• Vendor Risk Analyst (existing): This agent automatically generates and maintains security profiles for all discovered SaaS and AI vendors, including compliance attestations, security posture indicators, and insights into AI data privacy policies.

"Security teams are buried under manual reviews while the business keeps moving. AI is accelerating adoption and expanding the attack surface at the same time," stated Jaime Blasco, CTO at Nudge Security. "Unvetted OAuth grants, risky browser extensions, and unknown AI and SaaS apps can operate in the shadows for months or even years, creating thousands of access paths into corporate data. These new agents help teams immediately surface what’s hidden, prioritize what matters, and take action at machine speed so governance and enforcement can finally operate at the pace of modern work."

Nudge Security's platform uniquely aggregates multiple discovery signals from various sources, including the browser, email, identity providers, and connected applications. This comprehensive approach provides a more complete and timely view of risks associated with AI, SaaS, OAuth, and browser extensions. The broader context derived from these signals enables the agents to make higher-confidence recommendations and deliver targeted, policy-driven remediation guidance. This ultimately aims to reduce alert fatigue and increase the throughput of overburdened IT and security teams.

The company emphasizes that its solution is built for defenders, addressing attack surfaces that are often overlooked by traditional security tools. By providing a unified view and automating critical analysis and remediation steps, Nudge Security seeks to empower organizations to keep pace with the evolving threat landscape and the rapid adoption of new technologies.