The enterprise reliance on Software-as-a-Service (SaaS) applications and AI systems has created an exponentially expanding and fragmented attack surface, with SaaS breaches surging 300% in the past year. To address this critical security gap, Obsidian Security, a leader in SaaS security, has announced a major expansion of its platform. The new release introduces a Community SDK, a next-generation Unified Knowledge Graph, and an AI Assistant, collectively designed to provide enterprises with the coverage, context, and intelligence needed to secure every SaaS app and AI system at scale. This approach moves beyond traditional, limited vendor integrations to a community-driven model that can keep pace with the rapid evolution of the SaaS landscape.
Obsidian Security expanded its platform to secure enterprise SaaS and AI systems.
A new Community SDK enables customers and partners to build security integrations.
The Unified Knowledge Graph maps all identities, accounts, and AI agent activity.
An AI Assistant helps analysts investigate threats and reduce false positives.
The platform addresses a 300% surge in SaaS breaches from supply chain attacks.
It provides visibility across over 30,000 potential SaaS applications.
With more than 30,000 SaaS applications in use, the primary challenge for security teams is achieving complete coverage. Obsidian's new Community SDK tackles this by enabling customers, partners, and vendors to build, share, and standardize security integrations. This open, collaborative model breaks the capacity bottleneck of relying on a single vendor, allowing for the rapid development of connectors for niche, custom, or emerging SaaS apps. This ensures deep visibility and protection can be extended across an organization's entire unique SaaS ecosystem.
Traditional security graphs are ill-suited for the complex, interconnected nature of SaaS environments. Obsidian's purpose-built Knowledge Graph creates a dynamic, stateful model that connects every human and AI identity, account, role, token, and integration across the entire SaaS mesh. “You can’t protect what you don’t understand, and until now, SaaS has been a black box,” said Khanh Tran, Chief Product Officer at Obsidian Security. “The new Obsidian Knowledge Graph changes that. It maps every human and AI identity, account, and action into one living model of behavior, showing not just where access exists, but how risk spreads.”
To combat alert fatigue and data overload, Obsidian has integrated an AI Assistant into its platform. Powered by a governed multi-agent system, the assistant translates complex policies into plain language, prioritizes risks, and guides analysts through investigations. It provides explainable reasoning for its decisions, helping to reduce false positives, cut mean time to resolution (MTTR), and democratize security expertise so that analysts of all experience levels can operate with consistency and confidence.
Obsidian Security's platform expansion represents a fundamental shift in how enterprises can approach SaaS and AI security. By combining community-sourced coverage with a deeply contextual knowledge graph and AI-powered intelligence, the platform provides a cohesive and scalable defense system. This integrated approach is essential for security teams to gain control over their expanding digital perimeter, mitigate risks from shadow integrations and unsupervised AI agents, and prevent breaches in an increasingly interconnected application landscape.
Obsidian Security is the leading SaaS security platform, trusted by global enterprises like Snowflake, T-Mobile, and S&P Global. We protect over 250 global organizations, including many of the world’s largest Fortune 1000 and Global 2000 companies, with data center availability in North America, EMEA, and APAC. Backed by top investors including Greylock, Norwest Venture Partners, and IVP, we’re closing a critical gap: securing the SaaS and AI tools that organizations rely on. Our platform reduces risk, detects and responds to threats, and prevents breaches at the source. Obsidian was built by leaders who redefined endpoint and identity security at CrowdStrike, Okta, Cylance, and Carbon Black.