JB&B Closes SaaS Security Gaps and Builds AI Guardrails with Falcon Shield

For JB&B, a Trinity Consultants team, innovation moves fast. The New York-based consulting engineering firm has more than 475 professionals designing mechanical, electrical, plumbing, and fire protection systems for complex facilities. As SaaS and AI become increasingly embedded across the business, the security team faces a fundamental challenge: You can't secure what you can't see.

JB&B had little centralized visibility into the security posture of its SaaS applications. Assessing configurations meant working within individual applications and manually determining where risk existed. 

That changed with CrowdStrike Falcon® Shield.

“We basically moved our visibility from no SaaS applications to now over 10 different SaaS applications in our environment,” said Monique Maimon, Senior Associate, Cybersecurity & IT Systems Architect at JB&B. “That was a game changer.”

Falcon Shield wasn't originally in JB&B's budget. The company adopted it after a CrowdStrike proof of concept demonstrated how quickly the team could connect SaaS applications and uncover risks that previously weren't visible.

Those findings included elevated permissions and risky configurations across the company's SaaS environment. Falcon Shield helped JB&B assess those risks, prioritize them against its risk register, and identify steps for remediation.

The results have been measurable. One SaaS application initially had a security posture score of roughly 30%. After JB&B addressed the issues surfaced by Falcon Shield, Maimon said the score climbed to nearly 100%.

Falcon Shield has also reduced the manual work required to assess SaaS security. Maimon estimates the solution saves her team at least 10 hours per week, and saved more than 100 hours during the initial assessment and onboarding.

“Without Falcon Shield, we’d have to manually go into every SaaS product and check the configurations ourselves,” Maimon said. “It’s been a huge timesaver for our team.”

The benefits extend into governance and compliance. Falcon Shield maps SaaS configurations to controls associated with frameworks including SOC 2 Type II and ISO 27001. JB&B can export that information into its governance, risk, and compliance (GRC) platform, reducing the work required to manually gather configuration data from individual applications.

For JB&B, identifying SaaS risk was only part of the equation. The security team also needed a solution it could deploy and operate without adding more complexity.

During the proof of concept, JB&B connected SaaS applications to Falcon Shield through out-of-the-box integrations, many requiring little more than an API connection. Maimon described the experience as largely “plug and play,” supported by CrowdStrike specialists when additional configuration was required.

That ease of adoption mattered because JB&B had evaluated other vendors. As an existing CrowdStrike customer, the company saw an advantage in extending the CrowdStrike Falcon® platform rather than introducing another standalone tool, console, and skillset.

“Being able to seamlessly manage our cybersecurity in one unified platform really helps to alleviate the sprawl of different toolsets,” Maimon noted.

The POC ultimately made an unplanned purchase easy to justify to leadership. Instead of asking the business to invest in SaaS security based on an abstract risk, Maimon's team could show management the actual misconfigurations Falcon Shield had uncovered in JB&B's environment — and demonstrate how the solution could help address them.

SaaS visibility has taken on greater importance as JB&B expands its use of AI. Microsoft Copilot is deployed across the company, and employees currently have access to 12 approved AI tools. 

For Maimon, securely enabling AI starts with getting the fundamentals right. AI can access the data and applications available to users — making permissions, sharing controls, data classifications, and SaaS configurations increasingly important.

Falcon Shield helped expose one such risk in JB&B's Microsoft environment: SharePoint links that could be accessed anonymously. JB&B responded by coordinating across teams to tighten external sharing and move employees toward more secure methods for sharing information externally.

This example illustrates why SaaS posture is becoming part of JB&B's AI security strategy. As tools such as Copilot make it easier to find and work with enterprise data, poorly configured access can create greater exposure.

“We don't want to hinder businesses from using AI,” Maimon said. “But we want to make sure we're putting the appropriate guardrails in place. Falcon Shield can help us do that.”

For JB&B, those guardrails are part of a layered security strategy spanning CrowdStrike and other technologies. Falcon Shield gives the team greater visibility into the SaaS layer while the broader Falcon platform provides capabilities including endpoint security, managed detection and response, and SIEM.

Maimon's advice to organizations navigating the same transition is straightforward: Know your environment first.

“If you don't know what's in your environment and you don't have a risk register, first take a look at all your applications,” Maimon advised. “Then start to create a risk register behind that.”

For JB&B, Falcon Shield provides the visibility to do exactly that, helping the company understand SaaS risk, strengthen its security posture, and put the guardrails in place for AI.