Obsidian opens new budget lines
Obsidian Security
The key shift is that Obsidian stopped selling only a SaaS security seat product and started selling adjacent controls that map to different owners and budgets inside the same account. A security team that already bought user based SaaS monitoring can now add AI discovery, agent governance, and runtime blocking for Copilot, MCP servers, and connected apps, which turns one subscription into a broader control plane that can expand contract value without waiting for a new logo sale.
-
The product expansion is concrete. Obsidian now sells AI visibility, shadow AI detection, prompt security, agent governance, and runtime guardrails that block risky agent actions before execution. Those capabilities address AI program owners, identity teams, and governance buyers, not just the original SaaS security team.
-
The packaging supports land and expand. AWS Marketplace shows a simple $100 per protected user annual reference price, but Obsidian also sells broader enterprise deployments where value rises as customers connect more apps and add higher control modules. That makes upsell easy to explain inside procurement, because the starting metric stays familiar while scope widens.
-
This account expansion motion matters because the surrounding market is bundling fast. Larger platforms like Microsoft, Palo Alto Networks, CrowdStrike, Cisco, Okta, and SentinelOne are pushing overlapping AI and SaaS controls through existing enterprise agreements, so Obsidian needs deeper workflow coverage inside each customer to defend budget and win more of it.
The next stage is for AI governance and runtime enforcement to become the main wedge for bigger seven figure enterprise relationships. As more agents touch sensitive SaaS data and act with real permissions, the vendor that can show every agent, map what it can reach, and stop bad actions live will control a larger share of the security spend already sitting inside the account.