The speed of deployment and instant visibility are incredible. Within minutes of granting read-only access to our mail tenant, Nudge Security mapped out our entire SaaS footprint, showing us unapproved cloud apps, GenAI tools, and risky OAuth grants that traditional security tools completely missed.

What sets it apart is its behavioral approach. Instead of IT playing 'hall monitor' and outright blocking tools users need to get work done, Nudge automatically reaches out to the employee over Slack or email. It asks why they signed up, verifies if business data is being shared, and guides them on enabling MFA or enrolling the app into SSO. Its automated employee offboarding playbooks also save us hours by ensuring OAuth access and orphaned accounts are actually revoked when someone leaves. Review collected by and hosted on G2.com.

Because the platform discovers apps based on communication patterns, transaction emails, and OAuth scopes, the initial list can be huge. Sorting through all the low-risk web services and one-off logins can feel overwhelming at first. It also takes a bit of fine-tuning to customize notification frequency and set the right guardrails, so you don’t end up over-surveying employees with automated Slack messages.

In addition, while the automated playbooks handle standard SaaS platforms smoothly, edge-case and highly legacy on-premise tools still require manual intervention from our IT team. Review collected by and hosted on G2.com.

What I like most about Nudge Security is how simple it makes something that’s usually very complex. I like that it automatically discovers SaaS applications and helps identify security risks without requiring agents or creating extra work for employees. It gives organizations the visibility they need while keeping the experience easy to understand and act on. Review collected by and hosted on G2.com.

The only thing I don’t really like is that, because it gives you so much visibility, it can feel a little overwhelming at first. There’s a lot of information to sort through until you learn what matters most. Once you get used to it, though, it’s really helpful. Review collected by and hosted on G2.com.

I love Nudge's vibe; it's not a 'hard no', it's more collaborative. Nudge takes the approach of, "Why do you need this? Do you need this? How can we set this up to benefit all of the firm?" I also love the significant insight provided my the service into my firm's SaaS environment and account management. Review collected by and hosted on G2.com.

Some of the Apps that are more custom don't show up appropriately in the system and require a bit of re-configuration and labeling to define more appropriately. Not Nudge's fault, but providing the ability to organize some of these apps would be beneficial. Review collected by and hosted on G2.com.

Nudge is the tool that you didn't know you needed, until you see the information that it gathers on what you are already doing in your enterprise. The visibility is great, I can see every tool that users have signed up for using there google credentials. This visibility alone helps me understand potential risk and expose from the increasing and consistent breaches. One compelling feature is the AI dashboard, allowing me to see who's using what tool, when. Review collected by and hosted on G2.com.

Nudge, like any observability tool, can be overwhelming. It's not a dislike, but more setting expectations, you will get out of it what you put into it. It should be part of app onboarding and lifecycle management so that it complements the use of other tools. If you just buy it and turn it on, you aren't getting the full value from Nudge. Review collected by and hosted on G2.com.

I think it's really the simplicity of the whole platform. The fact that it captures information from sign up, it gives you the insight internally as to what systems are being used. We get an idea of the sort of coverage that we've got by the different categories of products that are being used. It gives us visibility maybe of any duplicate different teams have gone off and chosen different products to solve the same problem. From an IT perspective, that then allows us to turn around and go, is this now something we ought to consolidate on one single platform across the company, or are there real reasons for having two or three different versions of a similar product. Review collected by and hosted on G2.com.

I think the biggest thing that we would like to see ultimately is a nice slick way of automatically offboarding people when they leave an organization or they leave a project team, to be able to go through and offboard them off the solution they're using. Review collected by and hosted on G2.com.

Nudge was initially something we rolled out for Shadow IT - however now it has helped solve multiple use cases -> shadow AI, 3rd party SaaS app white & black list, Access review for 3rd party Apps, AI insights such as MCP and data flow. This is where their innovation is truly amazing and befits the ROI for the price we pay. Review collected by and hosted on G2.com.

Not much, really. My main feedback is around the UI: it would be helpful if they could add more information. Also, when they roll out a feature, I’d like them to look closely at the UX and make sure they understand the full use case. Sometimes the way it’s implemented ends up affecting the overall UX performance as well. Review collected by and hosted on G2.com.

I use Nudge Security for visibility and monitoring of Shadow IT apps, which I find great for its visibility. I appreciate how it automatically identifies security documentation of the apps we use. This feature is particularly helpful when assessing vendors and performing annual vendor reviews, as having some of that information already gathered saves time and effort. Besides, I find it helpful that it sends notifications when users sign up for a new tool and connect it to their user accounts. Review collected by and hosted on G2.com.

I wish there was something that I could do to take action on new apps that we encounter. I would love blocking actions or a whitelist so that apps can't be automatically added. Review collected by and hosted on G2.com.

I really like the visibility that Nudge Security gives us into what our users are using, especially if it's not from our approved stack. I like the ability to require users to justify and provide an explanation for what they're using. And most recently, I really like the Chrome extension and its ability to throw up a pop-up and make sure that our users aren't using something that is not approved. Review collected by and hosted on G2.com.

There's not a lot of customization for how we store application account and user records. It'd be good to have custom fields. Right now, we're relying on tags for that. Review collected by and hosted on G2.com.

I use Nudge Security for gaining a complete oversight of the SaaS products our users are signing up for. It identifies the applications that have been signed up for and the number of accounts that exist. I like the ease of viewing the information it gathers. The initial setup was really simple. I find Nudge Security incredibly useful and wouldn't like to be without it! Review collected by and hosted on G2.com.

I don't find the runbooks as intuitive as they could be. For example, with the offboarding runbook - enhanced functionality for requesting an application to close a user's account when the user's email account has already been closed. Review collected by and hosted on G2.com.

What I like the most is their OAuth integration detection. It provides incredible visibility into exactly which third-party apps have access to our environment and what permissions they hold, which is crucial for our daily security operations.... Review collected by and hosted on G2.com.

They cover the most important integrations perfectly, but as our stack grows, I'd like to see an even broader catalog of native integrations with other specialized IT and security tools out of the box Review collected by and hosted on G2.com.