Josys launches AI SaaS risk tool & boosts identity automation
Josys has announced a series of updates to its technology suite, highlighted by the launch of its AI-powered SaaS Risk Analyzer, which aims to provide IT teams with automated assessments of software risk.
The SaaS Risk Analyzer is designed to address the growing challenges that IT departments face as enterprises increasingly use numerous software-as-a-service (SaaS) and AI-based applications. The tool provides insights by analysing open-source data, public information, and vendor-specific details, assigning each application a Security Score (on a scale from 0 to 100) and categorising its overall risk as Low, Medium, or High.
Josys states that this technology surfaces security and compliance details to facilitate more standardised and informed approval processes across organisations facing SaaS proliferation and unregulated AI usage. It also examines whether applications share data with generative AI vendors, or allow developers to use customer data for AI model training, addressing concerns about data management and privacy.
The platform's SaaS Risk Analyzer incorporates contextual information, such as available single sign-on integrations, compliance certificates, and data protection measures. The risk analysis process is automated for apps revealed through Josys' shadow IT discovery feature, but it can also be used via search, supporting not only IT but also procurement and finance teams during software purchasing or renewal processes.
"IT teams need smarter, faster, and more automated ways to manage risk and deliver value," said Mahabaleshwar Bhat, Chief Product Officer of Josys. "By utilizing the power of Josys AI to retrieve and analyze information about discovered apps, we can arm IT teams with instantaneous risk intelligence that would have previously taken weeks or even months to acquire. These insights will create a new paradigm for more effective decision-making and tighter SaaS governance."
The company is also introducing automated workflows for identity lifecycle management, expanding its set of automation templates. The new Automated Onboarding Workflow assigns necessary applications to new staff members based on roles or departmental attributes, ensuring prompt and accurate access that minimises conventional delays and manual input. Josys highlights that these workflows contribute to controlling the spread of access rights from the outset of employment.
A companion process, the Automated Access Review Workflow, allows for immediate updates to user permissions following survey responses from employees. When an employee indicates an application is no longer needed, access can be revoked automatically. Similarly, if use of an unofficial tool is confirmed, the workflow can allocate appropriate licences and bring the application under official IT management—completing these actions without manual involvement.
Together, Josys reports that the automated workflows are designed to speed up new employee readiness, minimise errors in provisioning tools, and provide IT staff with more autonomous controls over identities and application access.
Governance and integrations
The platform updates also include an Audit Log Dashboard, which tracks key activities involving users and applications, intended to support faster incident response and meet audit requirements. There is also a newly introduced integration with Jira Service Management, giving system administrators the ability to create Jira tickets directly from within the Josys interface and thereby connect IT recommendations with existing workflow management tools.
Device management
The update enhances device management features via Josys' integration with Microsoft Intune and Jamf, allowing IT administrators to remotely lock or wipe devices through the platform. This functionality can be applied during offboarding of employees, in the event of device loss, or when devices are reassigned, all with the objective of safeguarding sensitive company data. A self-service portal will enable staff to submit requests for new hardware, potentially streamlining the management of device inventory by IT departments.
Josys' enhancements to risk analysis, identity automation, and device management are intended to give organisations more control over their technology ecosystems as software usage across departments widens and regulatory scrutiny intensifies.
