SaaSModule identifies SaaS applications from discovered endpoints.
Details
For each endpoint that has not been classified yet, the module runs a set of pluggable detectors. Each detector matches endpoints by TLS DNS name suffixes or IP address ranges to identify known SaaS providers (e.g. GitHub, Outlook, Teams, SharePoint, Datadog, Sentry, Elastic, Anthropic).
The first matching detector wins and the SaaS name is stored on the endpoint.
Options
| Name | Type | Default | Flag |
|---|---|---|---|
| max-endpoints | int |
256 | --saas-max-endpoints |