To help you address the threats posed by third-party plugins, SSPM gives you visibility into the third-party plugins that are being used in your organization. You can then take action by approving the plugin or by revoking user access to it. SSPM now provides third-party plugin scans for Salesforce. To perform third-party plugin scans, SSPM requires additional permissions. To enable third-party plugin scans, make sure that the Salesforce account that SSPM uses for scans has the following additional permissions:

• Download AppExchange Packages
• View Real-Time Event Monitoring Data

A SaaS Security Report provides a PDF snapshot that highlights the SaaS applications in use in your organization and the security risks they pose. Now, when you generate a report, the report includes a new section that lists the top 30 AI applications by usage.