[{"data":1,"prerenderedAt":288},["ShallowReactive",2],{"project-41118468":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":34,"aspects":35,"strip":42,"post_text":44,"what":45,"said":76,"maker_in_thread":162,"shape":171,"grid":176,"attempts":251,"same_week":252,"maker_shows":43,"maker_hidden":280,"reader_version":281,"card":282},"41118468","Shadow IT Scan","Uncover SaaS Apps, Users and Risky OAuth Scopes","title","Show HN: Shadow IT Scan – Uncover SaaS Apps, Users and Risky OAuth Scopes","https:\u002F\u002Fwww.accessowl.io\u002Fscan","accessowl.io","mathiasn",1722427541,2024,69,36,1086,3515,31,"notable","web_saas","shadow it scanning","web_app",[24,25,26,27],"shadow it","saas discovery","oauth scopes","saas management","debated",0.187,{"positive":31,"neutral":31,"mixed":32,"critical":33},5,0,4,14,{"idea":36,"pricing":38,"design":39,"execution":40},{"positive":37,"critical":32},2,{"positive":32,"critical":32},{"positive":32,"critical":33},{"positive":41,"critical":32},1,[32,32,32,32,32,32,32,32,32,32,32,32,32,32,32,32,32,32,31,31,43,41,32,41,32,41,41,31,43,31,32,43,32,43,31,43],3,"Hey HN,\n\nTL;DR: We’ve launched a free version of our Shadow IT scanner to identify which SaaS apps are used in your company, who uses them, and if they have high-risk OAuth scopes.\n\nPhilip and I went through YC with AccessOwl in 2022. We started the company because, in our previous roles, we struggled to track all the SaaS apps, users, and granted OAuth scopes. The Shadow IT scanner started as a small feature within AccessOwl, which manages SaaS vendors and user accounts centrally. But a standalone scanner would have made our lives so much easier in our previous roles. So, we thought, why not ",{"problem":46,"audience":52,"pricing":56,"motivation":67,"time_to_build":71,"stack":72,"openness":73,"stage":74,"team_size":75},{"value":47,"source":48,"evidence":49},"Companies lack visibility into SaaS apps employees sign up for and the OAuth scopes granted to them","maker",[50],{"id":51},"post",{"value":53,"source":48,"evidence":54},"IT and InfoSec teams, or CTOs at smaller companies",[55],{"id":51},{"value":57,"source":48,"evidence":58},"Free standalone scanner; main product billed by active Slack users",[59,60,64],{"id":51},{"id":61,"by":62,"text":63},"41126903","moxli","> AccessOwl calculates billing based on the number of active Slack users, excluding Single-Channel Guests and service accounts, as this is usually the closest measure to your…",{"id":65,"by":11,"text":66},"41126969","Slack is required for AccessOwl. It's used for things like approval workflows, task management and notifications in general. What do you use instead?",{"value":68,"source":48,"evidence":69},"Founders struggled to track SaaS apps and OAuth scopes in previous roles",[70],{"id":51},null,[],"free","launched","company",{"praise":77,"objections":101,"requests":135,"questions":146,"alternatives":151},[78,94],{"value":79,"source":80,"evidence":81},"Useful, accessible security tool that most companies don't know exists","commenter",[82,86,90],{"id":83,"by":84,"text":85},"41124940","bdno86","This is really cool!! Always excited about increased accessibility of security tools. This used to require jumping through a bunch of hoops in the past to find out, so most…",{"id":87,"by":88,"text":89},"41125029","PhLR","Indeed, when I learned about it I felt stupid for not having somebody run a regular report. Everybody talks about Shadow IT but most companies have a decent option to uncover a…",{"id":91,"by":92,"text":93},"41124477","650REDHAIR","This is very, very cool! Great work guys!",{"value":95,"source":80,"evidence":96},"Simple to use and powerful compared to alternatives",[97],{"id":98,"by":99,"text":100},"41126312","NoPicklez","In a previous role many years ago I used a tool called Netskope which monitored Firewall traffic and it was excellent at identifying almost every web related service being used.…",[102,116,124],{"value":103,"source":80,"evidence":104},"Hard dependency on Slack limits usefulness and growth",[105,109,112],{"id":106,"by":107,"text":108},"41128854","haswell","This severely limits the usefulness of a product like this. Core aspects of the product like workflows and task management should not be tied to a chat vendor in my opinion, and…",{"id":110,"by":107,"text":111},"41134481","It sounds like you may have found your niche with existing Slack customers and if that works for you that’s great. I don’t agree that this is a “strength”, because it limits the…",{"id":113,"by":114,"text":115},"41135193","akeck","A lot of companies are MS O365\u002FTeams shops.",{"value":117,"source":80,"evidence":118},"Slack-required pricing is confusing if Slack is not used",[119,120],{"id":61,"by":62,"text":63},{"id":121,"by":122,"text":123},"41126968","jorams","I don't think that's possible, the \"Start Trial\" button immediately redirects to Slack. This does seem like a weird restriction. Nothing about the product otherwise seems…",{"value":125,"source":80,"evidence":126},"Logo resembles other brands",[127,131],{"id":128,"by":129,"text":130},"41124524","ctippett","Seeing the logo made me wonder if this was a project spun out of Tripadvisor, they're very similar.",{"id":132,"by":133,"text":134},"41124774","3np","Even more confusable with especially the previous logo (but also current branding) of sendowl.com.…",[136,142],{"value":137,"source":48,"evidence":138},"Support for non-Slack chat tools as an alternative",[139],{"id":140,"by":11,"text":141},"41131154","Depending on the point of view it can also be a strength. Actually many of our customers like that we're in Slack because their people are already there: - no login required to…",{"value":143,"source":80,"evidence":144},"Support for Microsoft Teams environments",[145],{"id":113,"by":114,"text":115},[147],{"value":148,"source":80,"evidence":149},"How does pricing work if Slack is not used?",[150],{"id":61,"by":62,"text":63},[152,156],{"value":153,"source":80,"evidence":154},"Netskope firewall traffic monitoring",[155],{"id":98,"by":99,"text":100},{"value":157,"source":80,"evidence":158},"Browser extensions for discovering shadow IT",[159],{"id":160,"by":88,"text":161},"41126518","Indeed, there are some great alternatives for discovering Shadow IT, some with more or less overhead (i.e. browser extensions that nobody wants to install).",{"comments":33,"answered":41,"key":163},[164,167,170],{"id":165,"text":166},"41126761","Which makes it even worse because you cannot detect that then :\u002F Shouldn't people just be able to try out new things? How can a company be innovative otherwise? And at a specific…",{"id":168,"text":169},"41126797","From a legal point of view that might be true, but I believe people are not aware that this is a problem. They just register, check the \"Agree terms of service\" box and do…",{"id":65,"text":66},{"commenters":172,"max_depth":173,"maker_replies":33,"first_comment_mins":174,"lifespan_hours":175},19,6,38,50,[177,181,184,187,189,191,193,196,198,200,202,205,206,208,211,213,216,218,221,222,223,225,227,229,230,231,232,233,235,237,239,241,242,244,245,248],[178,32,32,179,180,32],"41125658","other\u002Fneutral\u002Fnone","neilv",[182,32,32,183,88,32],"41126085","commenter\u002Fneutral\u002Fnone",[185,32,32,183,186,32],"41126405","KingMachiavelli",[188,32,32,179,88,32],"41126509",[190,32,32,179,99,32],"41126293",[192,32,32,179,88,32],"41126482",[194,32,32,183,195,32],"41126529","thanksgiving",[197,32,32,183,88,32],"41126594",[165,32,32,199,11,41],"project\u002Fpositive\u002Fidea",[201,32,32,183,99,32],"41134958",[203,32,32,179,204,32],"41126396","throwaway48540",[168,32,32,179,11,41],[207,32,32,183,204,32],"41127031",[209,32,32,179,210,32],"41136404","npmeye",[212,32,32,183,204,32],"41138825",[214,32,32,183,215,32],"41133191","galdosdi",[217,32,32,183,215,32],"41133165",[219,32,32,179,220,32],"41133347","jabroni_salad",[83,41,31,199,84,32],[87,41,31,199,88,32],[61,37,43,224,62,32],"project\u002Fneutral\u002Fpricing",[121,37,41,226,122,32],"project\u002Fcritical\u002Fdesign",[65,37,32,228,11,41],"project\u002Fneutral\u002Fdesign",[106,37,41,226,107,32],[140,37,32,228,11,41],[110,37,41,226,107,32],[113,37,41,226,114,32],[98,43,31,234,99,32],"project\u002Fpositive\u002Fexecution",[160,43,43,236,88,32],"project\u002Fneutral\u002Fnone",[91,33,31,238,92,32],"project\u002Fpositive\u002Fnone",[240,33,32,179,88,32],"41124602",[128,31,43,228,129,32],[243,31,32,179,88,32],"41124615",[132,31,43,228,133,32],[246,173,31,238,247,32],"41118733","antonmi",[249,173,43,250,88,32],"41123903","maker\u002Fneutral\u002Fnone",[],[253,258,262,266,271,276],{"id":254,"name":255,"points":256,"category":257},"41068719","Haystack",546,"dev_tools",{"id":259,"name":260,"points":261,"category":257},"41070428","Wat",393,{"id":263,"name":264,"points":265,"category":257},"41088273","Semantic Grep",356,{"id":267,"name":268,"points":269,"category":270},"41086620","Opslane",319,"infrastructure",{"id":272,"name":273,"points":274,"category":275},"41105130","embedding.io",305,"ai",{"id":277,"name":278,"points":279,"category":257},"41080189","gg",205,false,"v2",{"id":283,"name":5,"line":6,"ai":280,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":284,"top":18,"kw":285,"maker":11,"domain":10,"tier":19,"attempts":32,"strip":286,"url":9,"mix":287,"praise":79,"objection":103,"sub":21},41118468,0.19,[24,25,26,27],"000000000000000000553101011535030353",[31,31,32,33],1794036658631]