Inside the Global Airline that Eliminated 14,600 SaaS Security Issues with AppOmni

SaaS Security Case Studies

A leading airline proved what’s possible when SaaS visibility and automation come together. AppOmni helped the security team operate with speed, precision, and full situational awareness.

AppOmni’s Impact

28
apps secured during two-year engagement

37
production and non-production orgs continuously monitored

14,600+
security issues identified and remediated

The Challenge
Managing SaaS security at scale proved challenging for a global airline operating across dozens of cloud applications. Configuration drift, shifting permissions, and limited real-time visibility made it difficult to maintain a consistent security posture. Efforts were further complicated by varied app-owner engagement and the need to align teams around a unified security strategy.
Key Challenges & Requirements:

Tracking configuration drift across multiple platforms
Detecting permission and data-access changes in real time
Maintaining compliance amid rapid SaaS growth
Aligning application owners with enterprise security priorities, among others

“AppOmni has been instrumental in our SaaS security success. The team consistently collaborates, adapts, and aligns with our goals. Based on our experience, we believe this will grow into a long-lasting and impactful partnership.”
— Security Leader at Premier Global Airline

The Requirements
The premier global airline needed a SaaS security partner that could support:

Requirements
How AppOmni Addresses Them
Enforce least-privilege access
Posture rules enforce least privilege and restrict OAuth and service account access to only what’s required.
Detect configuration drift, permission changes, and data exposure early
Continuous monitoring and proactive controls of RBAC, permissions, and configuration risks before they impact data or operations.
Integrate alerts seamlessly into existing SOC workflows
Deep SaaS telemetry feeds into existing detection stack and show, correlating SaaS events with other security events.
Compare pre-production and production configurations side by side
Automatically detect drift, and validate that only secure, approved changes move into production.
Streamline security and compliance reporting
Automated drift correction, policy enforcement, and reporting reduce manual effort and accelerate audit readiness.

The Results
The airline made rapid detection a priority, using AppOmni to dramatically speed up how quickly issues were identified and remediated. Continuous monitoring across their SaaS footprint revealed critical gaps early before they could escalate. AppOmni’s seamless integration with existing workflows enabled the team to act fast and reduce risk with precision. With executive backing and a commitment to embedding security into development processes, the airline ultimately built a stronger, more unified approach to SaaS security.

Why It Matters
As enterprises now average 130+ SaaS apps, complexity grows faster than teams can manually manage. For a global airline moving millions of passengers, even one misalignment between pre-prod and production can cascade into real-world impact. Cybersecurity requires depth — granular visibility and controls that catch risks surface-level tools often miss. AppOmni delivered that depth across 37 orgs, closing thousands of gaps before they became problems.

About the Company
This U.S.-based airline ranks among the world’s aviation giants, flying millions of passengers across the globe and shaping the future of air travel. As a pioneer in aviation innovation, the company operates one of the largest global networks. Powered by more than 100,000 employees and generating billions in annual revenue, the company connects key domestic and international and domestic routes and continues to set the standard for safety, reliable air travel.
Industry
Aviation and Travel
SaaS Apps

Use Cases

Configuration & access drift detection
Access Policy Enforcement
Centralized compliance reporting

About Author

AndyC

Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.

See author's posts