Rogue Software Crackdown: HR Platform SmartHR Enters Identity Security Market
Published on 07/30/2026 at 10:21 | Redaktion boerse-global.de
A new tool to hunt down unauthorized workplace applications is now live, marking the first step in a broader push by HR technology firm SmartHR into the identity and access management (IAM) space. The company officially announced its market entry on July 28, 2026, but the shadow-IT detection module has been operational since July 15.
The feature targets a growing headache for corporate IT departments: employees signing up for software-as-a-service (SaaS) tools — project management apps, communication platforms — without official approval. These unsanctioned programs, known as shadow IT, have proliferated as cloud-based services become easier for individual teams to adopt, often bypassing security protocols and creating data protection vulnerabilities.
When new tools appear on the network without approval, they can also introduce risks that go beyond data security — they may bypass health and safety protocols entirely. A free toolkit with 41 ready-to-use templates helps you document and manage workplace risks systematically, keeping your compliance on solid ground. Download the free Risk Assessment Toolkit
SmartHR’s new module gives IT managers and human resources teams a centralized view of every application running across the organization. The goal is to spot rogue tools before they expose sensitive company data.
A Broader IAM Roadmap Through 2026
The shadow-IT tracker is just the opening salvo. SmartHR has laid out plans to build out a full IAM suite by the end of the year, with several core components in development:
- Centralized account management — automating the creation and deletion of user accounts as employees join or leave the company (onboarding and offboarding)
- Single sign-on (SSO) — letting workers authenticate once to access multiple applications, improving both convenience and security
- Password management — an integrated system to enforce company-wide security policies for login credentials
By embedding these tools directly into an existing HR platform, the company aims to keep access rights permanently aligned with personnel records. When a worker changes departments or exits the firm, their digital permissions would update automatically.
Closing the Gap Between HR and IT
Industry experts see the move as a practical response to a persistent compliance problem. When access rights are tied to employment status, the risk that former staff retain access to sensitive systems drops sharply.
Managing access isn't the only compliance challenge when staff join or leave — keeping health and safety documentation up to date matters just as much. Over 37,000 UK businesses already use a free Health & Safety Toolkit with risk assessments and checklists that cover key regulations. Get the free Health & Safety Toolkit
SmartHR is betting that bridging HR data with IT infrastructure can eliminate manual errors. The HR department holds the records on hires, transfers, and departures; the IT team must reflect those changes in permission systems. The new strategy synchronizes those workflows, reducing the chance that a departing employee’s credentials remain active — or that a new hire waits days for basic system access.
With the shadow-IT detection feature already deployed, the company has laid the groundwork for what it describes as a comprehensive security architecture inside its platform. The remaining IAM functions are scheduled to roll out by the end of 2026.
Disclaimer regarding our articles: No investment advice, no buy or sell recommendation. Information on prices, companies, and markets is provided without guarantee; changes are possible at any time. Stock market transactions can lead to substantial losses. Our articles are created and reviewed in whole or in part automatically with the support of AI.
