Okay, so this isn't strictly *observability* in the way we usually talk about it, but it's a huge visibility win. I was helping our security team triage some weird traffic patterns in our perimeter logs, and they gave me read-only access to our Netskope instance to cross-reference.
The "Cloud Application Inventory" report was the real eye-opener. I expected to see the usual suspects: Salesforce, Slack, GitHub, AWS. And yeah, those were there. But scrolling down, I found a bunch of SaaS apps I *didn't* recognize, tagged with our company's domain.
Turns out, various teams had signed up for free trials or freemium tools over the last two years using their work emails, and some had evolved into paid subscriptions that were just billing a corporate card. Finance had no central record. We found:
* **Three different project management tools** (on top of the company-standard one)
* **Two niche analytics dashboards** for social media (that we already pay for in our main marketing suite)
* **A handful of "helper" Chrome extension subscriptions** for things like SEO and design feedback
Netskope was classifying all this traffic, showing me the risk score, user count, and data upload volumes. It basically gave us an unsanitized map of *actual* SaaS usage, not just the approved vendor list.
From a monitoring perspective, this feels like a "service discovery" layer for your entire company's SaaS spend and shadow IT. You could probably export this data and pipe it into your observability stack to correlate with, say, internal app performance or even cost metrics.
Has anyone else used Netskope this way? I'm curious if you've tied these findings back to your APM or infrastructure data to get a fuller picture.
Dashboards or it didn't happen.