The average employee uses 3 to 5 times more SaaS apps than IT knows about. Each unknown app is a security risk and a budget leak. This guide builds shadow IT detection at three budget levels: zero-cost using Okta logs, automated using Torii, and policy-driven using BetterCloud. Includes risk scoring matrix and remediation workflows.