The elba resource library
Practical guides to SaaS and AI security.
Practical guides for the risks between your people, your data, and your SaaS tools. Understand the tradeoffs, run the checks, and decide what to do next.
Built for security teams. Primary sources, concrete steps, and checklists you can use today.
Start with the risk in front of you.
Guides & checklistsShadow AI: discover tools and control sensitive data
Build a Shadow AI inventory, distinguish observed use from verified access, and test controls for sensitive prompts and uploads.
Read the guideCopilot and M365 agents: residual oversharing after the policies
After Copilot and M365 agent policies, residual risk remains in permissions, connectors, and knowledge sources. An SMB checklist for oversharing you still need to verify.
Read the guideAI governance vs Shadow AI: what SMBs should decide beyond inventory
Shadow AI inventory finds tools. SMB AI governance sets approval, data rules, exceptions, and measurement—so policy is not only a discovery spreadsheet.
Read the guideGoogle Workspace DLP: setup, rules and limits
Check your Workspace edition, configure Drive DLP rules, test detections, and fix risky sharing. Includes rule examples and an access-review checklist.
Read the guideUser access review checklist: from accounts to completed changes
Run an access review with verified accounts, clear decisions, tracked changes, and completion evidence. Includes a reusable review checklist.
Read the guideSlack data loss prevention: coverage, review and verified action
Evaluate Slack DLP, separate message exposure from linked-file access, and test a practical review workflow with clear Elba coverage limits.
Read the guideSharePoint external sharing: review access with Copilot in mind
Review SharePoint and OneDrive sharing, distinguish permissions from discovery controls, and verify access changes with owners and practical checks.
Read the guideFind and fix Anyone links in Google Drive and SharePoint
Build a dated inventory of anonymous file links, decide with owners, and verify changes in Drive, SharePoint, and OneDrive.
Read the guideAfter a phishing click: check the SaaS controls training cannot close
Keep phishing practice, then verify mailbox rules, OAuth consent, file links, and sensitive AI use after a suspected compromise.
Read the guideAudit third-party OAuth apps in Google Workspace and Microsoft 365
Inventory connected apps and consent, rank grants by scope, and verify keep, restrict, or revoke decisions in the source.
Read the guideEmployee offboarding checklist for SaaS access
Download a free offboarding review template. Confirm accounts, assign access changes, preserve ownership and verify removal in each source application.
Read the guideThird-party SaaS and OAuth apps as ISO 27001 evidence (SMB checklist)
Turn your SaaS and OAuth app inventory into ISO 27001:2022 evidence: control mapping, dated exports, owners and decisions. A checklist for lean SMB teams.
Read the guideEvaluate SaaS security across the whole workflow
Compare how your tools connect a SaaS finding, employee context, an authorised action and verification in the source application.
Read the guideShadow IT discovery tools for SMBs: Elba, Nudge Security and With Wings
Compare vendor-stated SaaS and AI discovery, supported responses and deployment needs. Includes a practical pilot checklist for lean IT teams.
Read the guideFrom review to remediation
See what puts your data at risk.
Explore how elba helps your team find risks and act on them in the tools employees already use.