ClosedSSPM
ClosedSSPM: A free, read-only auditor with policy-as-code and CI/CD support for four SaaS platforms. Ranked #15 of 30 in SaaS Security Posture Management Software by our editors (7.9/10); pricing: Free plan; best for developers wanting free self-hosted audits.
At a glance
- Editor score7.9 / 10
- PricingFree plan
- Best forDevelopers wanting free self-hosted audits
- Free planYes
- Paid fromFree
- Misconfiguration checksYes
- Facts checked21 Sep 2026
Where it wins
- Free and open-source with 166 security checks
- Policy-as-code, offline analysis, and multiple report formats
- GitHub Actions integration for CI/CD security audits
Where it doesn't
- Read-only access does not provide verified remediation
- Coverage is limited to four SaaS platforms
- Self-hosted command-line operation requires developer involvement
Our verdict on ClosedSSPM
ClosedSSPM is an open-source SaaS Security Posture Management tool written in Go for developers and teams that want free, self-hosted audits. It checks ServiceNow, Snowflake, Google Workspace, and Microsoft Entra ID for issues across identity, access control, configuration, network, scripts, integrations, secrets, OAuth grants, and credential hygiene. The tool is available for macOS, Linux, and self-hosted environments, with 166 security checks across those four platforms.
Its strongest fit is policy-driven auditing within engineering workflows. Teams can define checks in YAML, use embedded policies, and analyze offline snapshots rather than relying only on live collection. HTML reports include posture scoring, while JSON, CSV, and SARIF outputs support downstream reporting and security processes. Concurrent API collection with configurable rate limiting addresses collection control, and GitHub Actions integration brings SaaS audits into CI/CD pipelines. A Model Context Protocol server is also included for audit analysis, alongside stated AI features.
ClosedSSPM is more focused than broad SaaS security platforms because its coverage centers on four named integrations. Its read-only access supports assessment but does not provide verified remediation, making it a poor fit for teams seeking automatic corrective action. The product suits developers who value open-source software, policy-as-code, offline analysis, compliance outputs, and self-hosted control. Organizations needing wider SaaS coverage, write access, or remediation workflows should choose a different tool.
Your product? Our editors can test ClosedSSPM in depth and publish a review, labelled as paid · from $149/mo →
ClosedSSPM pricing
ClosedSSPM fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Connected SaaS apps | Not verified |
| Misconfiguration checks | Yes |
| Permission analysis | Yes |
| Automated remediation | Not verified |
| Compliance monitoring | Yes |
| Access model | Read_only |
| Deployment | Self-hosted |
| Platforms | macOS, Linux |
| Support | Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 5 integrations: ServiceNow, Snowflake, Google Workspace, Microsoft Entra ID, GitHub Actions |
| Pricing | Free plan |
| Website | github.com |
| Facts checked | 21 Sep 2026 |
ClosedSSPM integrations
ClosedSSPM lists 5 integrations on its own site.
- ServiceNow
- Snowflake
- Google Workspace
- Microsoft Entra ID
- GitHub Actions
Alternatives to ClosedSSPM
- AppOmniBroad SSPM coverage for mature teams, with sales-led pricing.9.4
- Netskope One SSPMBroad SSPM coverage for configuration, access, OAuth, compliance, and remediation.9.3
- Obsidian SecurityA full SSPM platform with discovery, permission analysis, compliance, and a free tier.9.2
See all ClosedSSPM alternatives →
Used ClosedSSPM? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used ClosedSSPM for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
ClosedSSPM is listed in our SaaS Security Posture Management Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/closedsspm/"><img src="https://www.itechguides.com/best/badge/closedsspm.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update