The App Discovery function in Cisco Umbrella enables organizations to identify cloud applications in use across their environment, including unsanctioned or shadow IT services. This is crucial for risk assessments and ranking cloud services based on their risk profile.
App Discovery analyzes DNS and web traffic to detect SaaS applications and assigns a risk score to each app based on industry best practices and Cisco Talos threat intelligence.
It provides visibility into cloud service usage and supports decisions about which applications should be allowed, restricted, or blocked.
# Reference (Cisco SCAZT Guide):
Section: Visibility and Assurance
Topic: Cisco Umbrella > App Discovery
Key Statement: "App Discovery helps identify cloud applications in use and provides risk ratings for each, allowing organizations to apply governance policies to risky or unsanctioned cloud services." Pages: 84-86