Sastrify's Shadow IT Radar helps IT and compliance teams detect, assess, and manage shadow IT. With automated risk scoring, it provides actionable insights to reduce compliance risks, enhance security, and improve operations. Using browser extensions, it identifies shadow IT assets, assigns risk scores, and enables actions like approval, sanctioning, or contacting users.

IN THIS ARTICLE

Basic Functionality Requirements


To ensure optimal performance of Shadow IT Radar, complete all of the following steps:

  1. Connect to one of the HRIS integrations.
  2. Enable an admin setup of Sastrify browser extension from your Sastrify platform.
  3. Instruct your employees to add and activate their Sastrify browser extension. 
  4. For Okta users, enable the Okta SSO discovery integration.

Accessing Shadow IT Radar and its Building Blocks


Sastrify Radar can be accessed from Risk Monitoring > Shadow IT Radar.



Within the interface of this feature, you'll find four building blocks as represented by the four tabs, each designed with a specific purpose in mind. 

  1. Overview: Track all discovered tools with filtering by risk score and usage, take actions such as approval or sanction, and summarize shadow IT findings and user monitoring by risk and monitoring status. The discovery comes from the detection performed by the browser extension and the SSO discovery.
  2. Sanctioned: View sanctioned tools and notify users with reminders to ensure compliance.
  3. Users: View a breakdown of users or employees, along with information about the tools they are using and their risk scores, as well as a summary of monitored and unmonitored employees and how many of them are using shadow IT and unsanctioned tools.
  4. Ignored: Not every discovery requires action. In addition to approving or sanctioning tools, you can now choose to ignore those that are irrelevant.


The following sections offer an overview of each tab, along with the available actions in each.

1. Overview Tab


  1. Display all tools and products discovered through browser extensions and SSO discovery integrations. These tools are not yet part of your existing tool stack.
  2. Use our matching algorithm to cross-reference tools and products with Sastrify's extensive SaaS product catalog. This ensures consistent and accurate naming across all discoveries. Any unmatched items can be manually matched using the fields on each line item, which gives you full control over shadow IT discoveries.
  3. Receive a risk assessment score for each of the detected tools. The detailed scoring breakdown can be viewed by clicking the expand buttons.
  4. Allow filtering and sorting by risk level, date, usage frequency, and category.
  5. Take actions such as approving or sanctioning tools. 
    • Approving will move the tools from this page to the Tool Stack page.
    • Sanctioning will move the tools from this page to the Sanctioned tab.
    • Ignoring will move the tools from this page to the Ignored tab.
  6. Provide a summary of total tools categorized by risk level and sanction status.
  7. Provide a breakdown of monitored and unmonitored users, showing which users have the Sastrify browser extension enabled and which have not.


Pro Tip: Approving, sanctioning, or ignoring can be performed on an individual basis or in bulk by selecting them and clicking the appropriate button in the lower right corner of the page.


Each line item can be expanded by clicking the expand button to view a detailed score breakdown. Scores are generated automatically by a built-in AI agent that analyzes publicly available information on vendors and products.


We categorize scores into three risk levels:

  • Low Risk (0-35): Minimal risk with no significant threats to security or operations.
  • Medium Risk (36-64): Moderate risk with potential issues that should be addressed.
  • High Risk (65-100): Significant risk requiring immediate action to mitigate security and operational threats.


For more detailed risk score evaluation criteria, click here.

2. Sanctioned Tab



This tab contains tools that have previously been marked as sanctioned. Within this tab, you can perform the following actions:

  1. View sanctioned tools.
  2. Allow filtering and sorting by name, category, and status.
  3. Perform later approvals when specific sanctioned tools are approved for organizational use, either on an individual basis or in bulk.
  4. Notify users who are using or are associated with certain tools and send reminders to ensure compliance. 


When the "Notify Users" button is clicked, the Sastrify admin can send an email notification to users or employees using the sanctioned tool.



Tips: You can approve or notify multiple tools at once by selecting them and clicking the appropriate button in the lower right corner of the page.


3. Users Tab



  1. Provide a breakdown of monitored and unmonitored users, showing which users have the Sastrify browser extension enabled and which have not.

  2. Provide a summary of shadow IT users in your organization and those using sanctioned tools.

  3. Get a detailed breakdown at the employee level, including tools used and tools sanctioned per employee.

  4. Allow filtering and sorting by name, used tools, sanctioned tools, and status.
  5. Use the notification function to:
    • Contact shadow IT users to address unauthorized tool usage.
    • Remind sanctioned tool users to discontinue use.
    • Notify unmonitored users to add and activate the browser extension.

4. Ignored Tab



This tab contains tools that have previously been marked as ignored. Within this tab, you can perform the following actions:

  1. View ignored tools.
  2. Use our matching algorithm to cross-reference tools and products with Sastrify's extensive SaaS product catalog. This ensures consistent and accurate naming across all discoveries. Any unmatched items can be manually matched using the fields on each line item, which gives you full control over shadow IT discoveries.
  3. Allow filtering and sorting by name, category, and status.
  4. Perform later approvals or sanctions either on an individual basis or in bulk.


Tips: You can approve or sanction multiple tools at once by selecting them and clicking the appropriate button in the lower right corner of the page.