Nomios is expanding its cybersecurity portfolio with LastPass. Through this partnership, we offer organisations in the mid-market and above a powerful yet lightweight solution for password management and for securing the rapidly growing SaaS landscape. LastPass is quick to deploy, places little demand on IT and provides immediate insight into the security posture of teams and employees.
Why LastPass fits our portfolio
LastPass is best known as a password manager, and that remains its core product. Notably, many organisations in the Netherlands still have no central password management solution in place. Most companies work with Microsoft 365 and Entra ID and have their key applications well covered through SSO. In practice, however, the SaaS landscape is many times larger than what falls under SSO: tools purchased by individual departments, supplier portals, shared accounts and dozens of small applications that no one has full visibility of.
This is exactly where LastPass adds value. For CISOs, it acts as a lightweight Zero Trust layer across the entire application landscape: not only the core applications, but also the long tail of SaaS services comes under control. In our experience, LastPass covers around 90 percent of the access risks that would otherwise remain out of sight, without the implementation burden of a full IAM project.
More than passwords: Web, SaaS and AI Monitoring & Protect
In addition to the password manager, the LastPass Business Max licence includes three capabilities we particularly want to highlight:
- Web Monitoring & Protect provides insight into the websites and web applications employees use and flags risky or compromised credentials, such as passwords that have appeared in a data breach.
- SaaS Monitoring & Protect maps which SaaS applications are actually in use, including shadow IT, and which of them are not centrally managed. This makes it possible to apply targeted policies to applications that fall outside SSO and IT governance.
- AI Monitoring & Protect (new) focuses specifically on the use of generative AI tools within the organisation. It shows which AI services employees use and with which accounts, so organisations retain control over data leakage through AI tooling.
Together, these capabilities offer a practical answer to a question nearly every CISO asks: which applications are my people actually using, and how securely are they doing so?
Operational within hours
The LastPass browser extension is the heart of the solution and is extremely fast to roll out. Organisations are typically up and running within a few hours, without complex integration projects. The Admin Console then provides dashboards showing, per team and per employee, how compliant password usage is: reuse, weak passwords, missing MFA and compromised credentials become immediately visible.
This is particularly relevant in light of NIS2. The directive requires organisations to demonstrate control measures around access security and risk management. With LastPass reporting, organisations can not only take measures but also show that they do so structurally.
Use case: a weekly personal compliance report for every employee
A good example of what is possible arises when LastPass is connected via its API to an automation platform such as n8n and a communication service such as Twilio. This allows an organisation to send every employee a fully automated, personal compliance report each week.
In that report, employees see exactly which applications have open alerts: a password found in a data breach, an account that is not centrally managed, a reused password or a missing MFA setting. These alerts are of course also visible in the LastPass app itself, but in practice users do not check it daily. Sharing a regular overview by email keeps security top of mind and encourages employees, in a friendly but consistent way, to take action. Responsibility is placed where it belongs, with the user, in the form of a concrete action list rather than an abstract policy document.
This is the ideal approach for the IT manager or CISO who wants to continuously strengthen the organisation’s security posture without daily manual effort. The system prompts, employees act, and the Admin Console dashboards show progress week after week.
Want to learn more about LastPass, or curious what this use case would look like for your organisation? Get in touch with Nomios.
Do you want to know more about this topic?
Our experts and sales teams are at your service. Leave your contact information and we will get back to you shortly.
