As organizations accelerate their adoption of cloud-first, SaaS-heavy environments, the perimeter has shifted—and so have the threats. The growing complexity of SaaS ecosystems introduces new risks tied to misconfigurations, identity misuse, and uncontrolled third-party integrations.

SaaS Is the New Perimeter—And It's Under Attack

According to the 2025 Global Threat Landscape Report from Fortinet’s FortiGuard Labs, in 2024, cybercriminals shared over 100 billion stolen records on underground forums—a 42% year-over-year surge—fueled by “combo lists” of usernames, passwords, and emails. This reflects a growing trend: attackers aren’t just breaking in—they’re logging in.

Compounding this is the shared responsibility model of SaaS platforms, which places the burden of securing configurations, permissions, and data on the customer. And as enterprises deploy more sanctioned—and unsanctioned—SaaS apps, the gap between security standards and their implementation widens.

This presents several challenges for security teams:

• Identifying the full SaaS stack across thousands of sanctioned and unsanctioned apps.
• Detecting all activities, interactions, and associated risks, including risky file sharing, GenAI access, privilege misuse, or misconfigured integrations.
• Controlling access and enforcing security policy across both human and non-human identities.

These challenges are compounded by the rise in identity-based attacks and AI-enabled SaaS usage, while misconfigurations, shadow IT, and overly permissive access rights create dangerous blind spots that attackers increasingly exploit.

SSPM: A Critical Layer for Modern SaaS and Network Security

To address these challenges, Fortinet is pleased to announce the acquisition of Suridata, a leading innovator in SaaS security solutions. This addition to our Unified SASE portfolio further enhances our ability to deliver secure SaaS access. Suridata’s SaaS Security Posture Management (SSPM) solution bridges the visibility and control gap across SaaS apps, delivering continuous monitoring, risk assessment, and policy enforcement—all of which are essential to a modern SASE strategy. Fortinet is a leading provider of Unified SASE with built-in CASB innovations to enable Secure SaaS Access.

Suridata SSPM Capabilities That Strengthen the Fortinet Unified SASE Security Stack:

Comprehensive SaaS Posture Management
Real-time detection of misconfigurations, unauthorized access, and risky behaviors across SaaS environments. Policy enforcement is centralized and scalable.

Unified Identity and Access Control
Extends visibility across SaaS applications, cloud identity providers (like Okta and Microsoft Entra ID), and third-party integrations, enabling end-to-end identity threat protection.

AI and GenAI Security Controls
Detects unauthorized use of AI-integrated SaaS apps, monitors AI-specific configurations, and controls data exposure risks in GenAI workflows.

Shadow IT Discovery and Mitigation
Identifies unsanctioned SaaS apps and integrations, provides risk scoring, and supports enforcement of usage policies—critical for governance and compliance.

Integrated Threat Correlation and Response
Enhances CASB and SASE capabilities by correlating SaaS risks with endpoint, network, and cloud data, enabling fast, AI-driven threat response.

Completing the SASE and CASB Picture

Modern security architecture demands interconnected protection across users, apps, and identities—no matter where they reside. SSPM is not an add-on. It’s a necessary control plane that ensures SASE and CASB solutions can operate effectively in today’s SaaS-first world. Suridata brings a leading SSPM solution to enhance Fortinet’s Unified SASE security platform and CASB capabilities.

The Future of SaaS Security Is Integrated

As the threat landscape evolves, so must your architecture. SSPM is no longer optional—it’s essential. When tightly coupled with SASE strategies, it gives security teams the clarity and control they need to protect the modern enterprise.

Click here to learn more about Fortinet’s Unified SASE solution.