What are unknown applications?
Unknown applications exist in activity or integration sources but lack enough context for confident security decisions—uncertainty about business function and ownership, not simply a missing catalog entry.
What are unknown applications?
Short answer
Unknown applications are software capabilities that exist in activity or integration sources but lack enough context for confident security decisions—uncertainty about business function, ownership, or data scope, not simply a missing service catalog entry.
Explanation
Logs, identity federation, and SaaS admin consoles may surface access to a capability before anyone assigns business meaning to it. Until context is enriched, analysts should treat these as decision gaps: findings may be real, but priority, blast radius, and stakeholder narrative are unreliable. Resolving unknown applications means improving context, not only closing inventory tickets.
Guide: Unknown Applications (KID-CON-0105).