100,000 OAuth Grants Later, Security Teams Still Can’t See the Risk

<p>Joe and Danielle discuss how AI has accelerated an already messy SaaS security problem, especially as employees connect more tools, more agents, and more data without centralized oversight. The conversation focuses on why traditional block or allow controls are breaking down, and how security teams can use agentic automation to reduce risk without slowing the business<br /><br /><br />00:00 - Why AI adoption is moving faster than cloud and SaaS ever did<br />01:20 - The professional pressure to skill up on AI now<br />03:19 - How cloud security and SaaS security lagged behind adoption<br />06:13 - Why organizations can’t simply say no to AI tools<br />08:30 - The difference between cloud-era experimentation and today’s browser-based AI<br />10:37 - Why AI security and SaaS security are becoming the same problem<br />12:31 - Why traditional onboarding and vendor review processes don’t scale<br />14:43 - The Salesforce example that exposed hidden risk in a large enterprise<br />17:00 - Why most third-party risk programs only cover part of the estate<br />19:07 - How decentralized tech adoption bypasses security workflows<br />20:31 - Why OAuth grants and third-party integrations are a major attack path<br />22:25 - Why attackers usually go after credentials and tokens, not zero days<br />23:19 - How AI lowers the barrier to entry for attackers<br />26:55 - Why defenders need agentic capabilities too<br />28:16 - The scale of unmanaged OAuth grants inside enterprises<br />30:26 - Why no one can hire enough people to review every grant manually<br />31:53 - How agents can analyze risk and recommend revocation at scale<br />33:33 - The reality check from customer conversations about AI visibility<br />35:24 - How security people think when told they can’t do something<br />38:16 - Reactance theory and why employees work around controls<br />40:25 - Incentives matter more than policy slogans<br />41:48 - Why binary block or allow controls create shadow IT<br />43:30 - How Nudge Security approaches SaaS and AI as one workforce problem<br />46:14 - Why a workforce edge model matters more than network or identity alone<br />48:26 - What just-in-time policy decisions could look like in the browser<br />50:10 - Why policy experience is as important as policy enforcement<br />52:08 - Danielle on Nudge Security’s free trial and LinkedIn presence<br /><br />Affiliates<br />➡️ OffGrid Faraday Bags: <a rel="noopener noreferrer nofollow" href="https://offgrid.co/?ref=ga