<h1>Security page</h1>Corma’s Security page helps IT teams detect, monitor, and manage unsanctioned applications across the organisation.Within the Security page, Shadow IT refers to applications used by employees without formal approval from IT. These apps often go unnoticed, creating security, compliance, and financial risks. Corma automatically detects these apps and presents them in a dedicated interface, enabling IT admins to take swift and informed action.Access the Security module by clicking on the dedicated page in the left sidebar.<img src="https://uploads.productlane.com/f8987db904454adb7e10d2e997c51e3a.png" data-processed-src="https://uploads.productlane.com/da6e7b81f16a658dcd9d8471ca7988f1.jpeg" data-original-src="https://uploads.productlane.com/f8987db904454adb7e10d2e997c51e3a.png"><ul class="accent-bullets"><li>Clear Risk Insights: Instantly see newly detected apps, recent activity, and associated risk levels across your organisation.</li><li>Active Browser Extension Coverage: Monitor browser extension adoption to ensure full visibility into your app landscape.</li><li>Third-Party Token Inventory: Review all third-party tokens granted by users, including scope, app status, and permission source. Tokens can be revoked directly from the interface.</li><li>Smart Filters: Use advanced filters to quickly drill down by app, user, permission type, or source.</li></ul><img src="https://uploads.productlane.com/d7b5e52c205ea0a8c30e73056bb004d5.jpeg" data-processed-src="https://uploads.productlane.com/d7b5e52c205ea0a8c30e73056bb004d5.jpeg" data-original-src="https://uploads.productlane.com/63c657c9057bfd743936e108aaa9ce7b.png"><hr><h1>Categorize applications</h1>Corma admins are prompted to categorize applications used across the organisation using one of the following statuses:<ul class="accent-bullets"><li>Authorized: Apps validated and managed by the company. Authorized apps only will be taken into consideration when offboarding a user.</li><li>Unauthorized: Apps IT flags as unauthorized which all users should not use. Going on this app will generate strong notifications to prevent user from using it.</li><li>Tolerated: Apps not managed by IT but users are authorized to use them. Those will not generated browser notifications if being used.</li><li>To Review: Apps detected by Corma that need to be reviewed by IT or others to give one of the status above.</li></ul><hr><h1>Corma compliance risk score</h1>Corma automatically assigns a compliance risk score to each Shadow IT application - Low, Moderate, or High - based on factors such as data hosting location, data sensitivity, security certifications, and known security incidents.<img src="https://uploads.productlane.com/63422115a491f7a1ad59ffa468f3a249.png">

Concepts & use cases

Detect and control unsanctioned apps across your organization

Security

Setup & Implementation

Get started with Corma 

Applications

Users

Licenses

Groups

Provisioning 

Tickets

Expenses

Access reviews 

Employee mode

Browser extensions catalogue

Google admin console

Microsoft Intune

Group Policy Object

Manual installation

Jamf

Kandji

Browser extensions

Integrations types & capacities 

Request an integration

Google workspace

Microsoft Entra ID

Okta

Pennylane

Spendesk

Qonto

Candis

Agicap

Payhawk

Factorial

Personio

Payfit

Slack

Atlassian

Miro

Notion

Lastpass

1Password

Github Enterprise

Aircall

Hubspot

Salesforce

Intercom

Zendesk

Figma

Adobe

Canva

Asana

Front

Dashlane

Datadog

Docusign

Dropbox

OpenAI

Modjo

Yoobic

Freshservice, Freshdesk, and Freshcaller

Tableau

Gong

Monday

Calendly

Zoom

Zoho CRM

Gitlab

Integrations

What is Corma ? 

General tech information

The Corma Glossary

General documentation

Key data & privacy info

Helpdesk

Video library 

Help center

Your complete guide to understanding, setting up, and mastering your organization’s SaaS ecosystem with Corma :)

Docs

Corma