# Coax

> Coax automatically discovers shadow IT, eliminates wasted SaaS spend, and closes security gaps. Built for European mid-market companies. GDPR compliant, EU-based in Copenhagen, Denmark.

## About Coax

Coax is a SaaS management platform that gives companies complete visibility over their SaaS stack. It automatically discovers apps, tracks spending, and secures access in one dashboard.

Coax is built and operated from Copenhagen, Denmark by Redoubt ApS (CVR: 44988348). The company is backed by Innovationsfonden and the European Union.

### The Problem Coax Solves

The average mid-market company has 3-4x more SaaS apps than IT is aware of. This shadow IT creates three critical problems:

1. **30% Wasted Budget**: Unused licenses, duplicate tools, and forgotten subscriptions
2. **Security Blind Spots**: Unknown apps accessing company data with no oversight
3. **Manual Chaos**: Spreadsheets that lie, guesswork, and endless IT tickets

### Key Features

- **Discover Every App**: Scans emails and Identity Providers to find every SaaS app, including ones IT doesn't know about. Complete visibility in hours, not months.
- **Eliminate Waste**: See exactly which licenses are unused, which tools are duplicated, and where to save 30%. Automatic savings recommendations.
- **Close Security Gaps**: Identify unauthorized access, compliance gaps, and security risks before they become breaches. Real-time security monitoring.

### How It Works

1. **Connect**: Sign up with your Google or Microsoft 365 work account
2. **Discover**: Coax scans and maps your entire SaaS landscape automatically
3. **Optimize**: Get actionable recommendations for cost savings and security hardening

Setup takes about 15 minutes. Most customers see their first results within the first hour.

### Who Coax Is For

**For CFOs:**
- Real-time visibility into every dollar spent on apps
- Automated reclamation of unused licenses
- Smart forecasting based on actual usage
- Avoid duplicate purchases by knowing what you already have

**For CISOs:**
- Complete visibility into every app, user, and permission
- Automated compliance (SOC 2, GDPR, ISO 27001 ready)
- Risk prioritization scoring for every app
- Access control to see who has access to what

### Target Market

European mid-market companies with 50-500 employees. Coax is designed for organizations using Google Workspace or Microsoft 365.

### Integrations

- Google Workspace
- Microsoft 365
- Azure AD
- Okta
- Major SSO providers

No agents or software installation required on employee devices.

### Privacy & Security

- GDPR compliant by design (not bolted on)
- EU-based data processing (Copenhagen, Denmark)
- Never reads email content, only analyzes email metadata (sender domains and subject lines)
- Never transfers personal data outside the EEA without appropriate safeguards
- Enterprise encryption, real-time protection, zero-trust access
- Data deleted within 30 days of cancellation per GDPR requirements

### ROI

For a 200-person company spending EUR 500,000 annually on SaaS, typical savings include:
- Unused license reclamation: EUR 50,000-75,000
- Duplicate tool elimination: EUR 40,000-60,000
- Plan right-sizing: EUR 20,000-30,000
- Negotiation improvements: EUR 25,000-40,000
- Total annual savings: EUR 135,000-205,000 (27-41% reduction)

## Main Pages

- [Homepage](https://coaxsecurity.com/): Main landing page with product overview, features, ROI calculator, and trust badges
- [Book a Demo](https://coaxsecurity.com/demo): Schedule a live demonstration of the platform with a personalized walkthrough of your SaaS landscape
- [FAQ](https://coaxsecurity.com/faq): 11 frequently asked questions about Coax, shadow IT, SaaS management, privacy, and getting started
- [Blog](https://coaxsecurity.com/blog): Expert insights on shadow IT discovery, SaaS cost optimization, and security compliance

## Features

### Shadow IT Discovery
URL: https://coaxsecurity.com/features/shadow-it-discovery
Find every SaaS app your employees use — including the ones IT doesn't know about. Coax discovers them all in 15 minutes using agentless email metadata scanning and identity provider integration. No browser extensions, no desktop agents, no MDM profiles. Capabilities include email scanning for SaaS signup confirmations, IdP integration for authenticated app mapping, complete app inventory, real-time monitoring for new signups, and automatic risk classification. The average company has 3-4x more SaaS apps than IT tracks, 30% of SaaS spend is wasted on unknown apps, and 70% of data breaches involve unauthorized app access.

### SaaS Cost Optimization
URL: https://coaxsecurity.com/features/saas-cost-optimization
Cut SaaS spend by 30% by identifying unused licenses, duplicate tools, and forgotten subscriptions. Coax provides unused license detection (30/60/90-day inactivity flagging), duplicate app identification across teams, spend dashboards by department and category, ROI recommendations ranked by savings potential, vendor consolidation insights, and renewal alerts before auto-renewals lock you in. For a typical mid-market company: 25-30% of SaaS licenses are completely unused, 3-5x duplicate tools exist per function, and 40% of auto-renewals go unnoticed.

### SaaS Security & Compliance
URL: https://coaxsecurity.com/features/saas-security
Close security gaps before they become breaches. Coax provides OAuth risk analysis (mapping every connection and permission grant), GDPR compliance monitoring (data residency tracking, cross-border transfers), SOC 2 readiness (SaaS inventory mapping against requirements), access control visibility (over-provisioned users, orphaned accounts), security risk scoring per app, and continuous real-time monitoring with alerts. 80% of employees use unauthorized SaaS apps, 56% of OAuth apps have overly permissive access, and the average data breach costs EUR 4.3M.

## Comparisons

### Coax vs Zylo
URL: https://coaxsecurity.com/compare/zylo
Zylo is built for US enterprise finance teams managing SaaS spend. Coax is built for European mid-market IT and security teams. Key differences: Coax offers EU data residency (Denmark) vs Zylo's US-based infrastructure; 15-minute agentless setup vs weeks of API integrations; email + IdP scanning vs API + financial data approach; combined security and cost optimization vs finance-focused only; mid-market pricing (50-1000 employees) vs enterprise pricing (1000+); built-in GDPR compliance vs add-on configuration. Coax also provides OAuth permission analysis and security risk scoring that Zylo doesn't offer.

### Coax vs Productiv
URL: https://coaxsecurity.com/compare/productiv
Productiv is an agent-based SaaS intelligence platform for US enterprises. Coax is an agentless, EU-first alternative. Key differences: fully agentless (no browser extensions) vs agent-based requiring installation on every device; EU data residency (Denmark) vs US-based; includes security monitoring (OAuth risk, compliance) vs usage analytics only; mid-market pricing (50-1000) vs enterprise-only (5000+); 15-minute setup vs weeks of agent deployment. Coax tracks usage through email and IdP signals without requiring anything installed on employee devices.

### Coax vs Torii
URL: https://coaxsecurity.com/compare/torii
Torii is a feature-rich SaaS management platform with extensive workflow automation. Coax is simpler, EU-native, and faster to deploy. Key differences: EU data residency (Denmark) vs Israel/US infrastructure; 15-minute setup vs days to weeks; focuses on discovery + insights vs complex workflow automation; email scanning catches apps that API + browser extension tools miss; purpose-built for European mid-market with GDPR compliance by default; pricing for 50-1000 employee companies vs global mid-market to enterprise.

### Coax vs BetterCloud
URL: https://coaxsecurity.com/compare/bettercloud
BetterCloud is a SaaSOps platform focused on security automation for US enterprises. Coax combines discovery, cost optimization, and security in one platform. Key differences: EU data residency (Denmark) vs US-based; email scanning discovers shadow IT that API-only tools miss; includes cost optimization (spend dashboards, unused licenses, renewal alerts) that BetterCloud doesn't offer; built for European regulations (GDPR) vs US compliance frameworks; 15-minute self-service setup vs weeks of API configuration; mid-market pricing vs enterprise pricing.

## FAQ

### What is shadow IT and why should I care?
Shadow IT refers to any software or cloud service used in your organization without IT's knowledge or approval. The average mid-market company has 3-4x more SaaS apps than IT is aware of. This creates wasted spend (30% on average), security vulnerabilities from unvetted tools, and compliance gaps that can lead to audit failures or regulatory fines.

### How does Coax discover shadow IT?
Coax connects to your Google Workspace or Microsoft 365 environment and analyzes email metadata (sender domains, not email content) and identity provider logs. This lets us identify every SaaS application that has sent a confirmation, invoice, or notification to any employee, including free trials and apps purchased with personal credit cards.

### How much can Coax actually save us?
Most mid-market companies save 25-35% on their SaaS spend after implementing Coax. Savings come from reclaiming unused licenses (the biggest source), eliminating duplicate tools across departments, right-sizing overprovisioned plans, and improving negotiation leverage with vendors through consolidated spend data.

### Does Coax read our emails?
No. Coax only analyzes email metadata, specifically the sender domain and subject line, to identify which SaaS services are sending messages to your employees. We never access email body content, attachments, or personal messages. Our processing is GDPR compliant and we have a full Data Processing Agreement available.

### How long does it take to set up Coax?
Setup takes about 15 minutes. You connect your Google Workspace or Microsoft 365 account through a secure OAuth flow, and Coax immediately begins scanning. Most customers see their first results within the first hour.

### What integrations does Coax support?
Coax integrates with Google Workspace and Microsoft 365 for email and identity provider analysis. We also connect with major SSO providers including Azure AD and Okta. No agents or software installation required on employee devices.

### How is Coax different from other SaaS management tools?
Most SaaS management tools focus only on sanctioned apps you already know about. Coax starts with discovery, finding the shadow IT you don't know about. We're also built specifically for European mid-market companies, which means GDPR compliance is native, not bolted on. We offer EU-based data processing and pricing designed for companies with 50-500 employees.

### Is Coax GDPR compliant?
Yes. Coax is built and operated from the EU (Copenhagen, Denmark). We process data in accordance with GDPR, have a comprehensive Data Processing Agreement, maintain a transparent list of subprocessors, and implement technical and organizational measures that meet EU data protection standards. We never transfer personal data outside the EEA without appropriate safeguards.

### What kind of reports does Coax provide?
Coax provides a comprehensive dashboard with real-time visibility into your SaaS landscape. Key reports include: complete application inventory with user counts and risk scores, spend analysis with waste identification, security risk assessment with prioritized remediation steps, license utilization rates, and duplicate tool detection across departments.

### Can I try Coax before committing?
Yes. We offer a free assessment where you can connect your environment and see your full SaaS landscape, including discovered shadow IT, potential cost savings, and security risks. There's no credit card required and no commitment. Book a demo and we'll walk you through the results together.

### What happens to our data if we stop using Coax?
If you cancel your Coax subscription, we delete all your data within 30 days in accordance with our Data Processing Agreement and GDPR requirements. You can also request immediate data deletion at any time. We provide data export functionality so you can retain any reports or insights before your account is closed.

## Blog

### The Complete Guide to Shadow IT Discovery
URL: https://coaxsecurity.com/blog/shadow-it-discovery-guide
Shadow IT costs mid-market companies millions in wasted spend and security gaps. The guide covers what shadow IT is, why it's growing (self-service SaaS, remote work, departmental budgets), the real costs (30% wasted SaaS budget, security vulnerabilities, compliance gaps), and five discovery methods: email log analysis, identity provider audits, network traffic analysis, expense report mining, and employee surveys. It provides a four-step framework: automated discovery, risk assessment, policy and governance, and continuous monitoring. Key takeaway: email metadata analysis combined with identity provider audits uncovers 90%+ of shadow IT.

### How to Cut SaaS Costs by 30%: A CFO's Guide
URL: https://coaxsecurity.com/blog/saas-cost-optimization
Most mid-market companies are overspending on SaaS by 30% or more. The guide identifies five categories of waste: unused licenses (40-50% of waste), duplicate applications, overprovisioned plans, forgotten subscriptions, and poor negotiation. It provides a five-phase optimization framework: Discovery (weeks 1-2), Analysis (weeks 3-4), Quick Wins recovering 10-15% (weeks 5-6), Strategic Consolidation recovering 10-20% (months 2-3), and Ongoing Governance. For a 200-person company spending EUR 500,000 annually on SaaS, typical total savings are EUR 135,000-205,000 per year.

### SaaS Security Risks Every CISO Should Know
URL: https://coaxsecurity.com/blog/saas-security-compliance
Unsanctioned SaaS applications create security blind spots. A typical 200-employee company uses 150-300 SaaS apps while IT knows about 40-60. The guide covers seven risks: unauthorized OAuth token access, data exfiltration through unsanctioned apps, credential reuse account takeover, compliance violations (GDPR, SOC 2, ISO 27001), orphaned accounts from departed employees, supply chain vulnerabilities, and lack of logging. It outlines a four-pillar SaaS security program: Discovery, Risk Assessment, Governance, and Continuous Monitoring. Special focus on European GDPR requirements including data sovereignty and Schrems II implications.

### What Is SaaS Sprawl? Causes, Costs, and How to Fix It
URL: https://coaxsecurity.com/blog/what-is-saas-sprawl
SaaS sprawl is the uncontrolled growth of SaaS applications across an organization. The average mid-market company uses over 200 SaaS apps while IT is aware of 30%. The guide defines SaaS sprawl, provides 2025 benchmarks (210+ apps, 32% waste, €5,500 spend per employee), identifies five root causes (decentralized purchasing, free tiers, remote work, no software catalog, slow procurement), quantifies true costs (€125,000-175,000 annual waste for a 200-person company), distinguishes sprawl from shadow IT, and provides seven strategies to fix it: automated discovery, application rationalization, software catalog, streamlined procurement, centralized budgets, lifecycle management, and continuous monitoring.

### Shadow AI: The New Security Risk CISOs Can't Ignore
URL: https://coaxsecurity.com/blog/shadow-ai-risks-guide
Shadow AI is the use of AI tools without IT knowledge or approval. Over 70% of knowledge workers use generative AI at work, mostly without governance. The guide explains why shadow AI is different from shadow IT (one-way data flows into training sets, invisible embedded AI, unprecedented adoption speed, regulatory uncertainty). It covers five risks for EU companies: data leakage into AI training sets (GDPR implications), EU AI Act compliance violations, intellectual property exposure, decision-making without oversight (GDPR Article 22), and supply chain AI risk. It explains why traditional security tools miss shadow AI and provides a four-tier governance framework and 10-step CISO checklist. Email-based SaaS discovery detects AI tool signups automatically, including free tiers.

### NIS2 and SaaS: EU Compliance Guide for IT Leaders
URL: https://coaxsecurity.com/blog/nis2-saas-compliance-guide
NIS2 is the EU's updated cybersecurity framework replacing the original NIS Directive. Penalties reach EUR 10 million or 2% of global turnover. The guide covers applicability (essential and important entities, supply chain effect), five NIS2 requirements impacting SaaS (supply chain security, IT asset inventory, incident handling with 24-hour reporting, access control, business continuity), the multi-stage incident reporting timeline, five common compliance gaps (incomplete asset inventory, unassessed vendor security, no OAuth governance, incomplete offboarding, no SaaS incident response), a comprehensive compliance checklist, penalty structure including management accountability (Article 20), and a three-month readiness plan focused on visibility, assessment, and governance.

### SaaS Offboarding Checklist: Secure Access in 24 Hours
URL: https://coaxsecurity.com/blog/saas-offboarding-checklist
Departing employees retain active accounts in 7+ SaaS apps after leaving. 49% of organizations have experienced security incidents from former employee access. The guide explains why manual offboarding fails (inaccurate spreadsheets, IdP deprovisioning limits, no shadow IT process), provides a four-phase checklist (immediate actions within 2 hours, SaaS sweep within 8 hours, shadow IT discovery within 24 hours, verification within 48 hours), covers GDPR considerations (right to erasure, data processing records, data minimization, cross-border transfers), explains shadow IT offboarding with risk-based prioritization, discusses automation opportunities, and defines KPIs for measuring offboarding effectiveness across process, security, and compliance metrics.

### OAuth Security Risks: A Guide to App Permissions
URL: https://coaxsecurity.com/blog/oauth-security-risks-saas
56% of OAuth-connected apps have overly permissive access to corporate data. The average mid-market company has 150-300 OAuth connections. The guide explains how OAuth works and why it creates persistent security risks, covers five risks (overly permissive scopes, dormant tokens, consent phishing attacks, shadow OAuth grants, token theft and replay), provides three real-world attack scenarios (compromised productivity tool, consent phishing campaign, departed employee OAuth legacy), includes a four-step OAuth audit guide (inventory, classify by risk, remediate, implement controls), a governance policy framework (scope definitions, application vetting, user education, incident response), and explains how automated OAuth monitoring through SaaS management platforms provides continuous visibility.

## Legal

- [Privacy Policy](https://coaxsecurity.com/legal/privacy)
- [Terms of Service](https://coaxsecurity.com/legal/terms)
- [Data Processing Agreement](https://coaxsecurity.com/legal/dpa)
- [Security](https://coaxsecurity.com/legal/security)
- [Subprocessors](https://coaxsecurity.com/legal/subprocessors)

## Contact

- Website: https://coaxsecurity.com
- Demo: https://coaxsecurity.com/demo
- Company: Redoubt ApS, Copenhagen, Denmark (CVR: 44988348)