Aperio vs Obsidian Security

Aperio is an open-source SaaS Detection & Response platform for identifying SaaS posture risks, cataloging OAuth shadow IT, and sending findings to security systems. It connects to GitHub, Slack, Google Workspace, Okta, 1Password, Microsoft 365, and Atlassian Jira and Confluence. Listed detections include public GitHub repositories, Slack workspace 2FA enforcement, and multiple Google Workspace sharing, administration, Gmail, delegation, and OAuth risks. Okta, 1Password, Microsoft 365, and Atlassian are connection-only while their rule packs remain pending. Findings retain evidence, receive severity scores, support deduplication and risk exceptions, and can resolve automatically when a later sync no longer detects the signal. SIEM destinations include Splunk HEC, Panther, Panopticon, Elasticsearch, Datadog Logs, webhooks, and JSON Lines files, delivered through a retrying durable outbox. Working remediation handlers cover suspending Okta users, resetting Okta MFA, and revoking Slack OAuth apps. Human approval is required before provider-side writes, with two-person approval for response actions. Aperio is MIT licensed and supports self-hosted Compose deployment with PostgreSQL 15 or later.

Obsidian Security provides visibility, governance, and runtime controls for AI agents, identities, and integrations across third-party applications. Its AI security capabilities include agent visibility and governance, runtime security, and AI security posture management. The Free plan covers up to 1K users and includes discovery of app sprawl, unsanctioned AI, and shadow SaaS, plus spear-phishing detection without manual tuning. Foundations covers discovery and governance; Advanced adds detection, proactive defense, and incident response. No plan prices are stated, and both Foundations and Advanced require a quote. Advanced lists detection for account takeover, session hijacking, insider risk, misuse, sensitive data exposure, and API or token compromise. The AI Assistant is designed to explain rules, triage threats, manage exceptions, and provide security steps. The web platform has hundreds of validated connectors, with examples including Amazon Bedrock, Anthropic Claude, Google Workspace, GitHub, Microsoft 365, Salesforce, ServiceNow, and Snowflake. Organizations can build custom connectors hosted on the platform. Obsidian serves Fortune 1000 and Global 2000 organizations. A free trial requires no credit card, but no duration is stated.