Modern companies connect dozens or hundreds of third-party apps and, increasingly, AI agents to their core business systems (Microsoft 365, Salesforce, Snowflake, Slack...) — each one a potential way in for an attacker, and most security teams have no real inventory of what's connected or what it can touch. Obsidian Security exists to close that blind spot: it continuously discovers every app, integration and AI agent with access to your SaaS environment, shows exactly what data and permissions each one holds, and watches for suspicious behavior like account takeover attempts or session hijacking in real time. Obsidian combines SaaS Security Posture Management (continuous config monitoring and privilege right-sizing) with Identity Threat Detection & Response (OAuth abuse, MFA bypass, token theft detection) and a newer layer specifically for governing AI agents connecting to enterprise systems — visibility into what agents can do, guardrails on their actions, and audit trails. It integrates directly with major AI platforms (Bedrock, Azure AI Foundry, Claude, OpenAI, Vertex AI) as well as core enterprise systems (Microsoft 365, Salesforce, Snowflake, Databricks, Workday), and is used by companies like T-Mobile, Databricks and Snowflake.
| # | Tool | Best for | Price |
|---|---|---|---|
| 1 | Équipes IT/sécurité d'entreprises (50+ employés) voulant visibilité et contrôle sur le SaaS et l'IA shadow | — | |
| 2 | Équipes sécurité et identité en entreprise déployant des agents IA | — | |
| 3 | Développeurs et équipes déployant des agents IA autonomes exposés à du contenu non fiable | — | |
| 4 | Utilisateurs WireGuard voulant du roaming automatique sans plateforme VPN managée | — | |
| 5 | Individus, équipes en croissance et entreprises de secteurs régulés (banque, santé, juridique, télécom) qui utilisent des assistants IA (ChatGPT, Claude, Gemini, Copilot) sur des données sensibles | — | |
| 6 | Développeurs et entreprises qui construisent des applications blockchain et veulent onboarder des utilisateurs sans qu'ils gèrent eux-mêmes l'infrastructure wallet | — | |
| 7 | CISOs et responsables sécurité, équipes RH et support IT, entreprises des secteurs services financiers, infrastructures critiques, énergie et retail | — | |
| 8 | Entreprises gérant une infrastructure cloud/hybride complexe, équipes avec pipelines CI/CD et déploiements Kubernetes, sociétés qui sécurisent des agents IA et systèmes autonomes — Fortune 500 et entreprises tech de taille moyenne | — | |
| 9 | Entreprises qui déploient des agents IA autonomes en production et ont besoin d'une couche de sécurité runtime contre les injections de prompt | — | |
| 10 | Organisations d'entreprise, secteur public et environnements critiques cherchant à éliminer les attaques basées sur l'identité ; entreprises qui déploient des agents IA et ont besoin de sécuriser les identités non-humaines | — | |
| 11 | Entreprises déployant des agents IA, développeurs construisant des frameworks d'agents ou chatbots, équipes ayant besoin de conformité et de traçabilité des accès | — | |
| 12 | Développeurs et équipes sécurité utilisant des outils de code IA (« vibe coding ») et voulant valider l'absence de failles d'autorisation | — |
A security tool for the problem every IT team has but few can actually see: employees signing up for random SaaS tools and AI apps with their work email, one login at a time, until nobody knows what your company's data is actually connected to.
An AI control plane that gives enterprise security and identity teams centralized visibility, access control, and policy enforcement over AI agents, MCP servers, and AI Skills used across their organization.
A free, open-source security layer that scans everything going into and out of an AI agent — user input, retrieved documents, model output — for prompt injection, hidden instructions, and data-leak attempts before they can do damage.
Keeps your WireGuard VPN connection alive when you move between wifi networks and your phone's mobile connection — it quietly finds the new address and reconnects your devices, without you running a coordination server yourself.
A tool that sits between you and ChatGPT (or Claude, or Copilot) and swaps out anything sensitive you type — names, medical details, account numbers — with realistic fake stand-ins before it ever leaves your computer, so the AI still understands your ques
A login system for apps that need a crypto wallet behind the scenes — users just sign in with their email or a fingerprint like on any normal app, and Magic quietly creates and manages a real blockchain wallet for them, so nobody has to deal with seed phr
A tool that lets employees and customers log in without a password at all — using something like a fingerprint or device unlock instead — which also means there's no password for a phishing email to steal, and no forgotten-password calls for the help desk
A security tool for the passwords nobody thinks about — not the ones humans type, but the ones baked into scripts, servers and automated jobs that quietly run forever with the same credentials, which is exactly what attackers look for.
A security layer for companies that let AI agents take real actions on their behalf (booking things, editing databases, sending messages) — it steps in at the exact moment an agent is about to act and checks whether that action is actually safe to run, in
A login system that replaces passwords with a cryptographic key tied to your actual device, so there's simply nothing for a hacker to steal or guess — and it now also checks whether the person or AI agent on the other end of a video call or API request is
A middleman service that lets an AI agent safely log into your other tools (Gmail, Slack, your CRM...) without ever handing it your actual passwords or API keys — the agent gets a narrow, temporary, revocable key just for the one task it needs to do, and
Scans AI-generated codebases for exposed keys, vulnerable dependencies, and authorization flaws, with plain-English fixes.
