48%

of SaaS applications sit outside IT's management

2024

Productiv

$21M

average yearly waste on unused licenses at large organizations

2026

Zylo

305

SaaS applications in the average organization

2026

Zylo

A license nobody opens still bills monthly and still holds a login an attacker can try.

what it is

SaaS spend waste refers to recurring costs in an organization's SaaS environment that are not delivering value: licenses that are not being used, subscriptions for tools that have been replaced or abandoned, and overlapping tools that serve the same function across different teams.

It is a byproduct of SaaS sprawl. When application adoption is distributed and not tracked centrally, spend accumulates in the same way access does: additions are easy, removals require effort that nobody prioritizes, and the full picture is never visible in one place.

The financial dimension and the security dimension of this problem are inseparable. An unused license is also an account that may still be active, with credentials that belong to someone, connected to data the organization cares about. Tracking spend leads to finding access gaps, and vice versa.

why it accumulates

SaaS costs accumulate in specific patterns.

Subscriptions are renewed by default. Most SaaS tools renew automatically unless someone actively cancels them. If the person who originally purchased the tool has left, changed roles, or simply stopped paying attention to the renewal, the subscription continues. The cost appears on a department card or in an expense report, where it may go unreviewed.

License counts outpace usage. Organizations often purchase license blocks based on projected headcount or anticipated adoption. If adoption is lower than projected, or if turnover reduces actual users, the purchased license count stays above the active user count. The difference is paid for and not used.

Duplicate tools grow from independent buying. Marketing, sales, HR, and operations each have their own tool preferences and their own budgets. It is common for two teams to independently adopt tools that perform the same function, because neither was aware of what the other had. Both subscriptions run in parallel.

Freemium tools convert without review. Tools adopted on free plans sometimes convert to paid plans automatically at a threshold (storage, users, feature access). The conversion may not be noticed until it appears on a reconciliation review.

what it costs you

Direct financial waste. The cost of licenses that are paid for but not used. In environments where SaaS spend is not tracked centrally, the cumulative amount can be significant. The exact proportion varies by organization and how actively procurement has been managed, but in any environment where buying has been distributed across teams, the gap between purchased and used licenses is typically present.

Security posture cost. Unused licenses typically correspond to accounts that are provisioned but not actively used. These accounts may still have valid credentials. They are rarely reviewed. They represent access that was never needed or that has been abandoned rather than properly offboarded. Accounts that nobody uses are accounts that nobody is watching.

Vendor relationship complexity. Multiple vendors providing similar or overlapping functions means multiple contracts, multiple DPAs, multiple renewal cycles to track, and multiple vendor security assessments to maintain. The administrative overhead grows with each redundant tool.

Data dispersion. The same category of data, customer records, employee information, internal documents, stored across tools from different vendors, with different security standards and different data residency terms. Consolidation reduces this surface area.

what works

The picture assembles from the money side first: SaaS charges pulled from department cards, central procurement systems, and expense reports into one list with vendor, cost, renewal date, and the owning person or team. Spend records catch tools that no directory ever sees, which is what makes finance data the natural starting inventory even for a security-motivated review.

The waste shows up in the gap between purchased and used. Each application's admin console shows actual active users and, where the platform provides it, usage data; comparing license counts against logins within the past 30 to 90 days puts a number on the difference. The same comparison serves the security review without extra work, since a paid license with no recent login is simultaneously a reclamation candidate and an account nobody is watching.

Functional mapping surfaces the second waste category. Where two tools serve the same primary function for different teams, the question worth settling is whether anyone chose that overlap deliberately. The renewal calendar then does the heavy lifting: right-sizing conversations land at renewal, when the vendor expects negotiation and no migration is forced, and subscriptions with no active usage in the past quarter move to cancellation.

The structural fix is a named owner per subscription, responsible at each renewal for confirming the tool is still needed and the license count still fits. Auto-renewal is the default that creates the waste, and a named owner at the renewal moment is the smallest process change that reverses it. Everything else in a spend review is cleanup; the ownership rule is what prevents the next one.

practical guides you might find useful

let's start with a conversation

Most first conversations start with not quite knowing what you have or where to begin. That's normal, and it's exactly where we're useful.

Tell us what prompted this. An upcoming audit, an incident, a client's security questionnaire, or just a sense that things have gotten messy.

We'll take it from there

Julian Machowski
Head of Technical Sales
+48 783 762 997
julian@unshadowit.com
Let's connect on LinkedIn
Message received. We'll be in touch soon.
Something failed. Try again or call us directly.