Aperio vs iboss Cloud

Aperio is an open-source SaaS Detection & Response platform for identifying SaaS posture risks, cataloging OAuth shadow IT, and sending findings to security systems. It connects to GitHub, Slack, Google Workspace, Okta, 1Password, Microsoft 365, and Atlassian Jira and Confluence. Listed detections include public GitHub repositories, Slack workspace 2FA enforcement, and multiple Google Workspace sharing, administration, Gmail, delegation, and OAuth risks. Okta, 1Password, Microsoft 365, and Atlassian are connection-only while their rule packs remain pending. Findings retain evidence, receive severity scores, support deduplication and risk exceptions, and can resolve automatically when a later sync no longer detects the signal. SIEM destinations include Splunk HEC, Panther, Panopticon, Elasticsearch, Datadog Logs, webhooks, and JSON Lines files, delivered through a retrying durable outbox. Working remediation handlers cover suspending Okta users, resetting Okta MFA, and revoking Slack OAuth apps. Human approval is required before provider-side writes, with two-person approval for response actions. Aperio is MIT licensed and supports self-hosted Compose deployment with PostgreSQL 15 or later.

iboss Cloud is a cloud-native Zero Trust SASE platform aimed at enterprise, government, and K-12 education. Its capabilities include Secure Web Gateway, CASB, ZTNA, DLP, browser isolation, and SD-WAN. Zero Trust Core lists web filtering, URL categorization, basic CASB controls, HTTPS decryption, device posture checks, and SAML or OIDC integration. Advanced adds private access to internal applications, adaptive access policies, identity-based micro-segmentation, SIEM log forwarding, and advanced threat protection. That protection includes malware sandboxing, behavioral analysis, phishing protection, and more than 100 real-time threat feeds. Complete adds AI-powered CASB, SSPM and DSPM, advanced DLP policies, OCR for DLP, and intrusion prevention. Cloud Connector agents are listed for Windows, Mac, iOS, Chromebooks, Linux, and Android. Identity integrations include Azure AD, Okta, Ping, and SAML- or OIDC-compatible providers. Pricing is on request, and the pricing page directs prospective customers to request a demo rather than displaying plan prices.