Can attack surface management tools see SaaS apps employees signed up for themselves?

EASM may identify public evidence of SaaS dependencies, embedded services or exposed login surfaces. It usually cannot determine which employees are actively using an application or how data moves inside that session. CASB and SaaS discovery platforms are designed for that user-activity and data-flow visibility.