Tool sprawl shows up in almost every environment at some point. The first step for me is getting a clear view of what's already in place and how much of each tool is actually being used. Many organizations have strong platforms that are only partially implemented, with capabilities that have never been revisited since initial deployment. From there, it involves reassessing fit. How has the environment changed, what capabilities have improved, and does the tool still align with where the organization is today? If the answer is no, that's where consolidation comes in. Reducing overlap, simplifying the stack, and making sure each tool has a clear purpose within the broader architecture.
Tool consolidation isn’t so much about cost savings as it is about clarity. Simpler environments tend to be easier to run, easier to secure, and easier to evolve over time.
Have tou given thought to AI agent sprawl inside the org? Authorized and shadow AI?
A periodic review of the security stack is invaluable. It's surprising how often existing capabilities can solve today's challenges without introducing another tool.