The Valence Security Platform provides SaaS Security Posture Management (SSPM), Identity Threat Detection and Response (ITDR), and AI Security Posture Management (AI-SPM). Using agentless integrations, the system discovers sanctioned, unsanctioned, and AI-driven applications and continuously monitors SaaS configurations, data access permissions, and the activities of human and non-human identities. It is designed to detect security risks such as misconfigurations, configuration drift, and suspicious behaviors by correlating data from SaaS applications with other security tools to support threat detection and incident response.
To manage supply chain risk, the platform inventories and maps non-human identities, such as API keys and OAuth tokens, as well as third-party SaaS-to-SaaS integrations. By analyzing these components, it identifies vulnerabilities including overprivileged access and unmanaged identities, enabling the enforcement of least-privilege controls. The system offers risk remediation through automated workflows, integrations with ticketing systems, and automated user offboarding. It also includes an AI assistant component to enable access to security data for investigations, posture assessments, and risk analysis.