Unused licences, duplicated tools and unmanaged SaaS quietly consume a large share of the software budget. Here is where the waste hides, and the named capabilities in CerteroX that find it and act on it.
Software is the backbone of most enterprises and, increasingly, the single largest line in the technology budget. Yet software waste remains a quiet drain on budgets, productivity and compliance. Unused licences, shadow IT, overlapping applications — the cost of inefficiency compounds every renewal cycle. For anyone with influence over technology investment, understanding where the waste sits is the first step to removing it.
Software waste is not only about applications nobody opens. It is about misaligned purchasing, over-licensing and underused tools. It shows up in several forms:
Here is the size of it:
For a large organisation, those percentages are seven-figure numbers.
CerteroX covers IT Asset Management, Software Asset Management, SaaS Management, Cloud Management and AI Management on one platform and one data model. That matters for waste specifically, because waste hides in the gaps between tools. A device inventory that cannot see the SaaS subscription, and a SaaS platform that cannot see the desktop install, will each report a tidy picture and miss the duplication between them.
What distinguishes the platform is that discovery, entitlement and action live in the same place. There is no reconciliation project between three vendors’ schemas, because there is nothing to reconcile.
CerteroX ITAM discovers through ten methods — native agent, command-line inventory, agentless, standalone for air-gapped systems, network scan, Active Directory import, third-party ITAM import, cloud and SaaS connectors, browser monitoring and file metering. All ten land in one schema.
The native agent covers six operating system families: Windows, macOS, Linux, IBM AIX, HP-UX and Oracle Solaris. Network Discovery sweeps a class-C subnet in under five seconds across NetBIOS, SNMP and ICMP, so you find machines before you own them. Twenty-eight named system connectors bring in the platforms you already run.
Recognition resolves against the Software Recognition Database — more than 3.5 million titles, normalised by publisher, product and version — so “Adobe Acrobat” in four spellings becomes one entry with one licensable position.
That is what makes redundant applications, unused licences and unauthorised deployments visible rather than theoretical.
CerteroX SAM computes an Effective Licence Position continuously: purchased, used, available, required, variance and exposure, with overspend and additional-licences-required calculated alongside.
Usage is the part that turns a compliance position into a savings position. AppsMonitor meters software use at file level with first-used and last-used tracking, and a % Used metric over a rolling 90-day window. Downgrade rights and second-use entitlements are handled explicitly, and an Exclude From Licensing workflow removes MSDN, development, training and second-use devices from the count rather than letting them inflate it.
The result is that you can reharvest before you renew, rightsize a tier before you commit to it, and stop paying maintenance on a product line nobody has opened since the last refresh.
SaaS is where most organisations have the least visibility and the most leakage, so this is worth being specific about.
CerteroX SaaS Management discovers through three converging signals: identity provider sync from Entra ID and Okta, direct connector sync that pulls the authoritative user and licence list from the vendor, and a browser extension that detects SaaS domains and time-on-app with per-user attribution. Forty-seven connectors ship today. Applications resolve against a catalogue of more than 35,000, which is also what drives feature-tag classification and overlap detection.
From there the platform acts rather than reports:
Shadow AI is treated as a first-class case, not a footnote. AI tools are classified from application feature tags in the catalogue rather than a hardcoded list, so the detection set grows as the market does, and the dashboard ranks adoption risk by the share of the organisation using each tool.
Vendor audits are disruptive and expensive, and the disruption is mostly the scramble to assemble evidence. CerteroX SAM keeps entitlement, contract and evidence in one place, with dedicated licence engines for six publishers: Microsoft, Oracle, IBM, SAP, Adobe and Salesforce.
The depth matters more than the breadth. Oracle covers options and packs with evidence and override, processor types and core factors, licence pools with hosting rights, and cover-down logic for Enterprise Edition. IBM covers PVU and Virtual Processor Core metrics with an ILMT connector and the 30-minute inventory cycle that sub-capacity licensing actually requires. SAP reads named users, roles and engines through a non-invasive ABAP connector and proposes the licence type each user should hold.
Certero is a verified third-party tool vendor for Oracle: Oracle’s audit team can accept data from Certero during an official audit, as an alternative to installing Oracle’s own measurement tools.
Waste is a finance problem reported through an IT system, so the financial layer has to be real:
On the cloud side specifically, the average saving achieved across cloud environments under management is 38%.
For finance leaders, boards and investor relations, software waste is not an IT housekeeping item. It is a strategic risk. Unchecked software spend inflates operating costs, undermines the return on transformation programmes, and creates reputational exposure when a compliance failure becomes public.
Bringing it under control gives you three things a stakeholder actually cares about: a lower cost base, a smaller risk surface and evidence of fiscal discipline that survives scrutiny.
If you are in a position to influence technology strategy:
Software waste is solvable, but only with the right instrumentation and the willingness to act on what it shows. The shift that matters is from reactive licence management — assembling evidence when the audit letter arrives — to continuous optimisation, where the position is already known and the reclamation already happened. For most organisations that is not just better IT. It is a materially lower cost base.
Other posts covering the same ground.
Compliance tells you whether you are safe. Optimisation tells you what you are wasting. The six steps that turn a licence position into recovered budget — and what changes now that a large share of the spend is SaaS.
A licence optimisation programme costs money. Doing nothing costs more, but the bill arrives as an audit settlement rather than a budget line, so it never gets compared. Four questions that turn the cost of inaction into a number a budget holder can act on.
Before optimisation, rationalisation or audit defence, most organisations need something less glamorous: a trustworthy answer to what they actually own. Why the foundational phase deserves its own name — and what counts as "stuff" now that most of it never touches your network.
Everything argued above is checkable. Name the publisher, the billing account or the platform you would argue with, and the session is built around it — the reasoning attached, not a summary slide.
No gated download at the end of it.