Perimeters：2026年 SaaS 安全现状报告：面向首席信息安全官（CISOs）的SaaS生态风险应对指南（英文版）（16页）.pdf

1、The State OfSaaS SecurityFor CISOs2026 ReportTable of ContentsKey Attack VectorsSaaS Security StatisticsPerimeters:The All-In-One SaaS Security ToolReal-World BreachesExecutive SummaryThe Rise of Identity ThreatsMisconfigs&ComplianceThe State of SaaS Spendperimeters.io2Giving Back34691011121416Looki

2、ng forward to 2026,SaaS platforms have evolved from auxiliary tools intocentral operational systems-and with that shift comes a rapidly expandingattack surface.While 86%of organizations now list SaaS security as a top priority and 76%haveincreased spending to match,significant gaps remain.Organizati

3、ons continue to struggle with visibility:only 55%report that allemployee-adopted apps are registered with security teams,and a majority lackconsistent controls for non-human identities,API tokens,and third-partyintegrations.At the same time,breaches tied to SaaS platforms and over-privileged accessa

4、re increasing in speed and sophistication.This report drills into three key themes:Surface proliferation:The number of SaaS applications,AI integrations andautomation agents continues to grow,creating unsanctioned entry pointsand unmanaged risk.Identity&access complexity:The distinction between huma

5、n and non-human actors is blurring,and control over OAuth tokens,service accounts,and API keys remains inconsistent.Real Threats:Without proper controls,many organizations are still leftsusceptible to attacks-including some of the biggest names like Salesforce,Microsoft,and Samsung.By combining surv

6、ey data,incident case studies,and usage analytics,the reportprovides actionable insights and benchmarks for security,IT,and procurementleaders tasked with securing SaaS ecosystems.The takeaway is clear:it is no longer sufficient to bolt on tools-organizationsmust adopt a unified,automation-driven ap