Although third-party plugins enable users to extend the capabilities of a marketplace app, they can be a security risk to your organization. To detect when users install third-party plugins that you do not want in your environment, you can now create Plugin Access Control policies. In Plugin Access Control policies, you specify the plugins that you do not want in your environment. SSPM will then scan the marketplace apps at regular intervals to determine if users installed the plugins. Depending on the marketplace app, SSPM might be able to automatically revoke plugin access. If not, SSPM can notify you in the following ways.

After SSPM notifies you that it detected a plugin that you specified in the policy, you can take action to remove the plugin from your environment.