Astrix Reviews

My primary use case for Astrix is SaaS to SaaS access governance and third-party app risk management, especially for OAuth connected applications across Google Workspace and Microsoft 365.

The most important use case for me is monitoring and controlling third-party OAuth integrations. For example, I discovered through Astrix that several employees had connected AI productivity tools and automation apps to Google Drive and Gmail, some with full read and write permission across company files. Before Astrix, I had very limited visibility into which apps were connected, what level of permission they had, whether they are still actively used, or whether they posted external exfiltration risk. After Astrix, I received real-time risk alerts. Astrix classified the app based on risk level. I am able to automatically revoke high-risk tokens and created policies to prevent similar risky scopes in the future. This one incident justified the investment.

Other use cases include vendor off-boarding automation, continuous SaaS posture management, security hygiene reporting for compliance audit, and identifying dormant integrations to reduce blast radius for compromised SaaS accounts.

The best features are deep OAuth app visibility, real-time risk detection, automated remediation, risk scoring and prioritization, and SaaS-to-SaaS threat detection.

The real-time risk detection and alerts have benefited us the most. Astrix continuously monitors connections and third-party apps, flagging high-risk applications automatically when risky permission, suspicious behavior, or unusual access patterns are detected. This helped us considerably.

Since deploying Astrix, we've seen a 42% reduction in high-risk third-party OAuth apps, a 65% reduction in dormant SaaS integration, faster vendor offboarding from days to an hour, and improved audit readiness.

The faster offboarding has been transformative. Before Astrix, offboarding was mostly manual and checklist-driven. When an employee or vendor left, we would disable their primary account, remove them from groups, manually review shared drives, and try to identify third-party apps they had authorized. After Astrix, it is centralized, automated, and immediate.

I would like to see advanced reporting exports, expanded integration ecosystems, enhanced real-time remediation workflows, and more granular SaaS risk scoring customization.

Expanded integration into the ecosystem would be beneficial, but they have to work on planning and it takes time. Integration does not happen instantaneously.

Some reporting customization options are limited. API documentation could be more robust. I would appreciate deeper integration with ticketing systems and more granular policy automation options. Nothing major, but just polish-level improvements.

Customer support could be improved so that faster support on services would attract more customers.

I have been using Astrix for the past seven to eight months.

Astrix is stable.

Astrix scales well across business units and cloud environments. We operate in a hybrid cloud environment on Azure.

I would rate customer support around a seven out of ten. They should work on the response timings to improve the customer experience.

Customer support could be improved so that faster support on services would attract more customers.

Before Astrix, we tried to use Microsoft Defender, manual workspace audit, and limited Okta reporting. We evaluated BetterCloud, AppOmni, and Adaptive Shield. The reason we shifted to Astrix is that Astrix focused deeply on SaaS-to-SaaS risk, not just SaaS configuration, offered faster deployment and a cleaner UI, and demonstrated strong OAuth risk detection capabilities.

The initial setup was straightforward, and their documentation was clear.

We are strictly a customer, so we do not have any business relationships with Astrix.

We avoided hiring one additional SaaS security analyst and reduced potential breach exposure surface. We saved approximately 400 plus hours annually in manual review effort. Setup costs are reasonable compared to enterprise CASB solutions, and licensing scales predictably with users.

Setup costs are reasonable compared to enterprise CASB solutions, and licensing scales predictably with users.

Before Astrix, we tried to use Microsoft Defender, manual workspace audit, and limited Okta reporting. We evaluated BetterCloud, AppOmni, and Adaptive Shield.

If your organization relies heavily on SaaS, uses Google Workspace or 365, allows third-party OAuth apps, has compliance requirements such as SOC 2, ISO 27001, and HIPAA, and needs visibility into SaaS-to-SaaS access, you should run a proof of concept, as traditional CASBs are not enough. You would likely uncover more exposed risks than expected.

Astrix addresses a very specific and growing gap in modern SaaS security. As an organization becomes more SaaS-native and AI tools proliferate, OAuth risk and SaaS-to-SaaS attack paths will only increase. Having visibility and automated controls in this area is becoming essential, not optional. I would rate this product an eight out of ten overall.

My primary use case for Astrix is discovering, monitoring, and securing all non-human entities connecting to our core SaaS application, including API keys, OAuth tokens, service accounts, and third-party integrations.

Automated discovery of all non-human identities is a standout feature of Astrix. It gives us a complete inventory we never had before, the remediation workflow for revoking risky tokens, and continued monitoring.

Astrix has positively impacted our organization by reducing our SaaS attacks, especially within the first few weeks and days we deployed. We saw significantly fewer attacks on our SaaS-based portals. We went from having zero visibility to complete third-party integration visibility, which helps us considerably.

Regarding Astrix's AI capabilities, the AI-driven risk score engine is excellent. It applies consistent logic across all discovered connections and risks, and we genuinely appreciate that aspect.

Astrix could be improved with deeper coverage on on-premises and hybrid application environments. Currently, it excels in SaaS-based portals and SaaS-based environments. It would be beneficial if they could work on legacy and those types of integrations more frequently and effectively. Integration visibility that falls outside the current scope would also be valuable, along with better workflow automation. Creating automation workflows that can open tickets in ticketing systems such as Jira would be advantageous.

I have been using Astrix for nearly two years.

Astrix is very stable and reliable.

Astrix's scalability is good and very scalable.

Astrix has excellent customer support. I would rate Astrix's customer support a 10 because the team is always helpful.

We did not have any dedicated solution before Astrix. We were starting from a blank slate, and Astrix fit our needs very well.

My experience with Astrix's pricing, setup cost, and licensing was satisfactory. The team is very good. The setup was not overly simple, but it was not overly difficult either with the help of the professional team.

I have seen a return on investment with Astrix, particularly with time saved. Fewer employees are needed because previously we had no visibility and had to check manually. Now we have automation, which makes a significant difference. However, I do not have actual numbers.

My experience with Astrix's pricing, setup cost, and licensing was satisfactory. The team is very good. The setup was not overly simple, but it was not overly difficult either with the help of the professional team.

Before choosing Astrix, we evaluated other options including Appstine, Do Control, and Nudge, among others. Astrix prevailed in our evaluation, which is why we selected it.

A few months ago, we used Astrix to flag a third-party marketing analysis tool that a team member had authorized via OAuth to access our Google Workspace with far broader permissions than required. It had full drive read access across the organization. We revoked it immediately. Without Astrix, we would have never identified that vulnerability.

We use Astrix extensively to identify dormant and orphaned API keys. We discovered over 200 API tokens across the environment. Multiple environments contained connected applications that employees had authorized but stopped using. We leverage Astrix in these scenarios as well.

With Astrix's automated discovery, it identifies these items automatically, which is beneficial because we do not have to conduct manual searches. It is a great feature and a great product for that capability.

In the first 90 days of using Astrix, we discovered approximately 340 to 350 risks that were remediated. We also reduced our API keys by 70 to 80 percent.

I would rate Astrix a nine on a scale of one to ten. I rate it a nine because it solves an understated problem better than any other solution. However, we lose one point for the on-premises coverage gap because it does not have capabilities for on-premises environments and for early alert noise. Otherwise, it is excellent for SaaS-based environments.

Regarding Astrix's AI capabilities, I would say its accuracy is very high. There are very few instances when we found that it was inaccurate. Generally, the accuracy is excellent.

I would advise others considering Astrix to run a proof of concept first so you can evaluate the gaps and shortcomings in your environment. The first scan result will immediately demonstrate the difference between what humans can see and what an AI-capable, non-human machine can discover. I recommend running a proof of concept first, engaging multiple teams, discovering risks, and then gradually establishing your policies. My overall rating for Astrix is nine out of ten.

Astrix is used primarily for observability of LLM applications, including AI agents and RAG systems. For example, we have a refund email process where a prompt processes the email and, with some inspection, proceeds with the refund. Astrix sometimes provides incorrect answers in this workflow. The user query goes to the prompt, then to the LLM response, reads some data, calls tools, and then provides the final response. Once we implemented Astrix, we added middleware to monitor the observability of the response, temperature, model latency, and cost.

Astrix offers excellent observability features that track the user query, what the user sent, what prompt was sent to the LLM, what the LLM response sent, what retrieval documents were checked, and what tools were called, along with the final response. These observability features are checked for every user and our prompts.

Tracking user queries, prompts, responses, and retrieval documents helps our workflow and improves efficiency, functions, updates progress, and provides progress percentages. When a user inputs data or a prompt, it retrieves data from the vector database with cosine searching. After that, there is function calling, and then a final response. This is the LLM tracing we rely on. Regarding RAG observability, we can track the questions, retrieved chunks, embedding similarity, context, LLM identity, and more.

Astrix has positively impacted our organization because all systems we built require monitoring. Using monitoring helps our team trace LLM tracing, debug prompts, perform RAG observabilities, and monitor costs including token charges, daily cost, per-user cost, and per-model cost. These features help our team interact effectively.

Regarding cost observability, we have a dashboard that shows token usages, daily costs, per-user costs, and per-model costs. Everything we have in observability helps us track observabilities through the process. This has increased performance and cost optimization because we can see where the costs are being used.

Everything is functioning well, and new features are already available to improve observability and performance of the AI models.

I have been using Astrix for around one year.

Astrix is good regarding its accuracy and reliability of output, but the initial setup feels somewhat complex. If you are building a very small project, it might be more tooling than needed. For enterprise platforms, it can become expensive for high-volume production workloads.

Astrix's AI capabilities are excellent in terms of governance and security. Astrix is deployed in my organization on a private cloud with Amazon Web Services as our cloud provider. I did not purchase Astrix through the AWS Marketplace. I would advise others looking into using Astrix that it provides excellent visualization for AI application flows and strong support for AI agents, rich tracing, and debugging. The cost and token analytics are also excellent. However, the initial setup feels complicated, and if you are building a small application, you may not need it, but for large applications, it is definitely required. I would rate this product a 9 out of 10.