The problem
You don't know your full stack
Shadow IT is everywhere. Teams spin up tools, grant OAuth access, and create accounts without IT knowing. Your actual stack is much larger than what’s managed.
Access sprawl goes unchecked
Employees accumulate app access over time. OAuth grants pile up. Offboarded users retain licenses. Nobody has a complete picture.
Security risks go unnoticed
Risky browser extensions, over-permissioned OAuth apps, and AI tools handling sensitive data create real exposure that traditional tools miss.
Renewals and spend are scattered
Contracts in email, invoices in inboxes, pricing in spreadsheets. No single source of truth for what you spend or when things renew.
What Porcia does
1
Build a broader application inventory
Connects to organization providers (Google Workspace, Microsoft Entra, or Okta) and the browser extension to find applications in use — including Shadow Apps and OAuth grants your team has authorized.
2
Governs access and security
Surfaces security posture issues as Findings, inventories OAuth grants with risk scores, tracks unapproved apps in Shadow Apps, and gives you Workflows (Playbooks, Pulses, Rules) to act on everything systematically.
3
Tracks spend and usage
Dashboard → Spend shows what you’re paying, who’s actually using each tool, where licenses are going to waste, and what’s renewing soon — so you can act before auto-renewals lock you in.
4
Pia keeps things moving
Ask Pia, Porcia’s in-app AI assistant, to look up data, send pulses, turn rules on or off, and handle access requests, with a confirmation before every action.
How the app is organized
Dashboard
Dashboard
Overview metrics, Shadow apps, AI usage, Spend, Governance, Compliance, and Posture sub-pages. Your starting point for the state of the org.
Assets
Assets
Apps — complete app catalog, every discovered and manually-added app.
Accounts — per-user account view across all apps.
Browser Extension — extension enrollment and deployment.
Integrations — OAuth Grants, Risk Score, and MCP Connections.
Findings
Findings
Security and access concerns with available evidence, risk context, and supported remediation workflows.
Shadow Apps
Shadow Apps
Applications discovered outside expected access workflows and available for team review.
Security → Browser
Security → Browser
Enabled browser-usage and security-signal categories, subject to workspace policy and role scope.
Workflows
Workflows
Playbooks — supported multi-step operational workflows.
Pulses — employee outreach through configured channels.
Rules — supported event notifications and routing.
Identities
Identities
User, group, and service-account context from connected providers where available.
Requests
Requests
Application access requests with authorized review and a recorded decision.
Teams and Audit Trail
Teams and Audit Trail
Teams — group members inside the workspace.
Audit Trail — a filterable history of workspace activity.
Core capabilities
- Discovery
- Governance & Security
- Intelligence & Spend
Three complementary sources run automatically and feed a single unified app catalog.
How discovery works end to end
Full architecture, matching pipeline, and where results surface
Who uses Porcia
IT teams
App visibility, access request management, offboarding playbooks, Shadow Apps review, browser extension governance
Security teams
Findings and remediation, OAuth grant auditing, browser security signals, MCP connection and extension supply chain risk
Finance teams
Spend dashboard with inactive license detection, upcoming renewals, redundant apps, and unapproved spend
Operations
Offboarding, shadow IT and AI acceptable-use playbooks, pulse outreach, and access review pulses to app owners
Security & privacy
Encryption
Data is encrypted at rest and in transit
Email privacy
Provider mailbox scans run in memory. Email bodies and attachments are not saved, only the extracted details.
Extension privacy
Reports application-level and security signals by domain. Password values never leave the device
Access control
Role-based permissions with available activity history and data-protection controls
Pricing
Porcia is usage-based — **200/month floor).- Standard
- Enterprise
**200/mo floor)
- All discovery sources (organization providers and browser extension)
- Full governance suite (Findings, OAuth Grants, Shadow Apps, Requests, Rules, Playbooks, Pulses)
- Security → Browser signals
- Pia AI assistant
- Slack & Teams integration
- Standard support
Start your trial
14-day free trial — no credit card required
What Porcia does and doesn’t do
Discovers SaaS and Shadow AI usage
Finds applications across provider connections, mailbox signals, and browser — including unexpected SaaS and AI tools where enabled
Governs access and security
Findings, OAuth grant revocation, Shadow Apps review, access requests, rules, playbooks, and employee pulse outreach
Tracks spend and renewals
Surfaces inactive licenses, redundant tools, and upcoming renewals so you can act before auto-renewal locks you in
Provider-scoped discovery access
Porcia uses provider-specific access to discover applications, users, activity, and delegated access. It does not modify your identity provider during discovery; optional administrative actions require separate permissions and confirmation
Does not contact vendors on your behalf
Porcia does not contact vendors or act as a procurement tool on your behalf.
Does not send email from your accounts
Connected provider mailbox access is read-only for supported vendor signals. Pulses are sent from Porcia’s own email system, not from connected customer mailboxes.
Quickstart guide
Up and running in under 10 minutes
How it works
Full architecture and navigation guide
Connect an organization provider
Set up Google Workspace, Microsoft Entra ID, or Okta