The Shadow Supply Chain: A Pivot To Usage-Based Discovery | UpGuard

This UpGuard report argues that traditional procurement- and SSO-based vendor discovery leaves a large visibility gap (cited as 72.9%) and advocates a usage-based discovery model that combines procurement data, SSO logs, and browser telemetry. It outlines three core principles—follow the user, monitor trusted vendors for shadow usage, and tier risk by real-world usage—and promotes UpGuard User Risk as a unified solution that provides a unified risk score, real-time user nudges, and improved visibility into shadow IT and unmonitored vendor instances.