How to choose a SaaS management platform

Thanks to pandemic-spurred remote work, companies face a deluge of new cloud-based applications in use across the enterprise. Tools that can handle the SaaS sprawl aim to discover, manage, and secure those apps. Here's what to look for and 9 top platforms to consider.

Aorpixza / Shutterstock

The flood of remote workers at the start of the global pandemic in early 2020 had companies scrambling to find new software for communicating and collaborating with remote workers. Many turned to software-as-a-service (SaaS) options.

It was an obvious choice. Under the SaaS model, applications are hosted and maintained by a third-party vendor and delivered to employees over the internet, making them easy to deploy remotely.

SaaS apps are subscription-based, typically charged monthly or annually per user or “seat,” without the large up-front investment traditional on-premises software requires. Introduced in the early 2000s, SaaS has soared in popularity over the years and is now the leading method of software delivery.

The shift to SaaS from traditional software is also part of many companies’ digital transformation initiatives. “The whole notion behind digital transformation and modernization is to be more resilient and more agile,” says Frank Della Rosa, research director for SaaS and cloud software at IDC. “With legacy software, the time it takes to bring up new infrastructure and the time it takes to deploy the software really limits a business’ ability to respond to change.”

SaaS offerings also have an advantage in their ability to make new features available more frequently than traditional software offerings. “With SaaS, the release cadence is happening on a quarterly basis,” says Della Rosa. “There’s a constant stream of new capabilities that businesses can take advantage of, which is not available to legacy software customers.”

The problem with SaaS

The ease with which SaaS applications can be deployed means line-of-business leaders, small teams, or even individuals can begin using them easily — and that, in turn, has led to a proliferation of SaaS apps in many enterprises. In its 2021 Businesses at Work report, for example, access management provider Okta reported that  its customers have deployed an average of 88 apps, an increase of 22% over the past four years. Larger customers (2,000 or more employees) have an average of 175 apps, while smaller companies (under 2,000) deploy an average of 73 apps.

“These buying decisions now are democratized,” says Della Rosa. “What we’ve seen with SaaS is that users will take out a credit card and buy the tools they need, and then submit the expense. So now you have an enormous explosion of expenses coming in with software licenses that are creating a real headache in terms of being able to manage that spend.”

In addition, redundancies have arisen as different departments end up buying the same type of software without knowing what's going on in other areas of the business. When subscription renewals come up, the procurement department often has no visibility into whether the software generates any real value for the business.

“If you look at the proliferation of SaaS in an enterprise, [companies] could be underreporting the number of applications by a factor of 10,” says Della Rosa.

The continued growth of SaaS apps across organizations is becoming a major pain point for IT managers, who need to know not only what is being deployed, but whether the apps are secure, whether they meet compliance regulations, and how much money is being spent on them.

What SaaS management tools do

A category of tools to help manage the SaaS sprawl has grown as well over recent years. Depending on the group defining the category, these could be called SaaS management platforms (SMPs) or SaaS operations management software (SaaSOps). Gartner, which refers to this category as SMPs, says such tools are offered by pure-play vendors, as well as traditional software asset management (SAM) vendors, cloud platform management and cloud migration vendors, cloud access security brokers, and even some IT service management vendors.

“Traditional SAM tools are still largely focused on the management of non-SaaS applications where an installation is present,” Gartner wrote in its February 2021 Market Guide for SaaS Management Platforms. “However, leading SAM vendors are increasingly adding capabilities natively, or through acquisition, to support the discovery of SaaS applications and manage licenses.” Gartner refers to some of these vendors as “SAM for SaaS,” which can further complicate a company’s research.

IDC’s Della Rosa says most SaaS management platforms evolved out of spend management and optimization tools that help organizations get a handle on the amount of money being spent on SaaS across the business. Over time, SaaS management companies began to add additional features, such as application security, vendor management, cost optimization, and onboarding/offboarding configuration for employees. Many vendors now provide SaaS app recommendation services, giving advice on which SaaS apps may be better for a particular problem or category.

The market for SaaS management is booming right along with the explosion of SaaS apps themselves. Gartner predicts that by 2026, 50% of organizations using multiple SaaS applications will centralize management and usage of these apps through an SMP tool, up from less than 20% using them in 2021.

Experts say organizations should consider SaaS management software if they notice a surge in subscription expenses, if multiple departments start buying the same software, if the security folks express concern over whether the apps in use are secure and compliant with regulations, or if trying to manage software purchases in a spreadsheet is becoming a nightmare.

Key SaaS management features to look for

First and foremost, the tools should be able to handle at least three major tasks: automated discovery of apps within an organization’s infrastructure; managing and automating administrative functions, such as onboarding/offboarding; and providing a centralized location for enforcing app and data security policies for the SaaS portfolio.

Additional features and functionality may also be included. For example, some tools provide for role-based access controls; offer the ability to document, cancel, transfer, and upgrade software licenses; have a central reporting system for executives or compliance audits; let administrators create a catalog of approved apps that employees can download; monitor employee adoption and usage of apps and forecast future needs; and/or provide SaaS app recommendation services to reduce app overlap and optimize spending. Many automation capabilities rely on integrations with SaaS providers, so be sure to investigate the integrations offered by any SMP you’re considering.

Beyond discovery and management functions, Della Rosa says he’s receiving many inquiries regarding security and compliance concerns over SaaS installations.

“Depending on the data an application accesses, it introduces risk, because there’s no way to confirm that it’s being used in compliance and that the vendors providing the app are also current in their compliance [with] industry and regional regulations,” he says. “Being able to track and ensure that all users are authorized — identity and access management is key.”

Della Rosa says organizations should look at vendors that can help them solve their immediate needs, whether those are security and compliance, spend management, or user engagement. “If you ask any company what’s most important — cost management, compliance, or usage data, they’re going to say all three.

“If you’re out of compliance or if you’re unsure whether the vendors you’re using have all of the updated documentation on their compliance, that’s probably more critical than cost right now," he says. "So companies may want to look at a platform that has built its core value proposition around that, and then think about integration to address cost optimization and user engagement,” he says.

Top SaaS management software choices

With many vendors offering standalone SaaS management, as well as traditional SAM vendors offering SaaS components to their offerings, companies should be able to find a product that meets their specific needs.

The main list below focuses on pure-play SaaS management vendors. Following that, you’ll find other options including traditional SAM vendors that have added SaaS management features to their existing tools. Choosing a type of vendor for SaaS management may ultimately depend on whether your company already has a SAM tool deployed, or if you’re looking for tools that can manage on-premises applications in addition to SaaS apps.

We selected the following products, arranged alphabetically, through independent research and discussions with analysts who cover the market. Inclusion in this list is not a buying recommendation, nor is exclusion a sign not to buy. Rather, this is meant to be a starting point that highlights vendors, core features, and unique functionality for companies to consider when choosing a SaaS management system.

BetterCloud: Features of the BetterCloud platform include app discovery, file security, onboarding and offboarding, least-privilege access, security compliance, automated workflows, and centralized management of multiple instances of common SaaS applications. The company offers integrations with more than 60 different SaaS applications, including Google Workspace, Microsoft 365, and Okta. (See BetterCloud’s security details.)

Blissfully: Blissfully provides organization, automation, and security functions including SaaS management, vendor management, traditional software asset management, IT asset management, vendor and employee workflows, IT automation, access management, auditing and evidence, and compliance workflows. (See Blissfully’s security details.)

G2 Track: G2 offers a software marketplace that lets people research, buy, and manage their software and services. The company recently introduced G2 Track, which helps companies discover and manage the applications used at their businesses. The offering lets companies manage their software and spend, track employee usage trends to attain value, control contracts and compliance, and reveal license and budget trends. (See G2 Track’s security details.)

Productiv: This platform uses machine learning models to discover “ungoverned” apps and ensure compliance, provide recommendations for optimizing app spend, and streamline the process for employees to discover deployed apps and request new ones. The system can provide usage data on more than 20,000 apps, including the spend, licensing, adoption rates, security, and functions. Onboarding and workflow automation for SaaS apps are also available. (See Productiv’s security details.)

Stackshine: Features of this platform include a subscription calendar to track past and future expenses; a centralized dashboard for vendor data, contracts, and invoices; alerts of upcoming renewal dates; and security alerts around compromised vendors and offboarded employees. The vendor also offers services such as vendor discovery and contract negotiation and can run survey campaigns of employees to discover favorite and least-liked apps. (Stackshine’s site does not include a security and compliance page; contact the vendor for encryption, authentication, and compliance details.)

Torii: This platform automates the discovery, spend optimization, operations, and compliance of SaaS applications across an organization. Spend monitoring includes vendor and license management, as well as chargeback reporting. The system can automate SaaS-related processes for employee lifecycle, it includes an application catalog, and it provides details on software utilization. Torii includes automated risk analysis and access control features, along with security alerts. (See Torii’s security details.)

Trelica: Based in the UK, Trelica automates SaaS discovery to find shadow IT installations, optimize app spending, automate IT operations, and engage with end users. Engagement data can identify savings from unused seats, and renewal negotiation can reflect how much employees are using apps. Other features include employee onboarding automation, security and access risk, and the ability to gauge user satisfaction. Integrations with identity providers and SSO apps, finance tools, and business apps are also available. (See Trelica’s security details.)

Zluri: This vendor says its goal is to simplify the world’s transition to SaaS by helping companies adopt and operate their software stack through a single intelligent dashboard. Features of the Zluri platform include smart application discovery, renewal monitoring, application cost optimization, vendor management, onboarding and offboarding automation, application usage data, and real-time notifications and reports. (See Zluri’s security details.)

Zylo: This system can discover applications across an organization, optimize spending and discover inefficiencies, manage renewals and forecast spending, and ensure compliance through governance processes. (Zylo’s site does not include a security and compliance page; contact the vendor for encryption, authentication, and compliance details.)

Other tools, including SAM, ITSM, and ITAM platforms

Enterprises that want to manage on-premises applications as well as SaaS apps should investigate software asset management (SAM), IT service management (ITSM), or IT asset management (ITAM) offerings, many of which are beginning to offer SaaS management features. Vendors in this space include Snow Software, Alloy Software, Flexera, Genuity, ServiceNow, and SailPoint — which addresses the issue via its identity management platform. 

We also discovered other tools that may have one or two of the three main SaaS management capabilities (discovery, management, and security), but do not currently appear to be a complete SaaS management system. Vendors such as Airbase and Vendr, for example, offer spend management features.

Other vendors, such as CoreView, Sonar Software, and AvePoint, offer SaaS management features, but only for specific products like Microsoft 365 or Salesforce.