Security Teams Paying the Price for IT Spend Sprawl

330 enterprises. That’s how many Tangoe identified as struggling with unmanaged SaaS licenses in 2025—down from 987 just three years ago. But here’s the part nobody’s talking about: the money wasted on unused licenses increased to $20 billion annually. This isn’t just a budgeting problem—it’s a security crisis in disguise. When cost management fails, security teams pay the price in exposed endpoints, inconsistent policies, and reactive firefighting. In my assessment, this is the silent cost of IT sprawl: every dollar wasted is a vulnerability left unpatched.

Mobile phishing attacks surged 20% in Q2 2025, with executives 23% more likely to fall for AI-generated deepfakes. Why this matters: Mobile fleets are now the primary attack surface for social engineering, yet only 35% of organizations have Mobile Threat Defense (MTD) in place. The gap is staggering—mobile devices contributed to 59% of recent security incidents despite this lack of protection.

“A device without MTD is like leaving a backdoor unlocked while the front door has a lock,” warns Tangoe’s mobility analyst. “Attackers just walk in through the weakest point.”

70% of enterprises run two or more unified endpoint management (UEM) platforms—a figure Tangoe calls “the fragmentation tax.” This sprawl creates policy enforcement gaps: inconsistent patch levels, fragmented logging, and disjointed access controls. During an incident response, this fragmentation becomes a nightmare. Imagine trying to isolate a compromised device when its enrollment status is tracked in three different systems. In my view, this is bigger than it looks—UEM sprawl isn’t just technical debt; it’s a systemic failure to treat device lifecycle management as a security imperative. IDC’s 2024 study shows every additional UEM platform increases governance complexity by 30%. The math is clear: more tools mean less control.

AI budgets are growing three times faster than IT budgets, but this surge is creating accountability black holes. Untracked GPU hours, opaque data-egress costs, and shadow AI deployments are now security risks. A sudden spike in inference requests could signal insider threats or model abuse—yet only 35% of organizations monitor these metrics. Here’s what I find interesting: One Fortune 500 company’s AI team accidentally exposed customer data by overprovisioning cloud instances without security oversight. Their cost metrics flagged the anomaly before the breach was detected. This isn’t an outlier—it’s a pattern. AI’s cost dynamics are forcing security teams to adopt new metrics like “cost per token” as early warning systems.

Microsoft’s end of volume discounts for online services has forced enterprises to confront a hard truth: licensing sprawl is a security liability. Some organizations now face 13% cost increases, but the real risk lies in untracked usage. When licensing sprawl meets AI’s unpredictable consumption patterns, it creates blind spots in asset inventory and access control. This isn’t just about renegotiating contracts—it’s about tying licensing decisions to security governance frameworks. Based on industry analysis, the writing is on the wall: organizations that treat licensing as a security issue will outpace peers by 2027.

The data story here is clear: cost management failures and security risks are two sides of the same coin. SaaS sprawl creates shadow IT; UEM fragmentation weakens policy enforcement; AI’s unchecked growth introduces new attack surfaces. The numbers don’t lie—$20 billion in wasted SaaS spend correlates directly with 59% of security incidents involving mobile devices. I’m going out on a limb here, but by 2027, organizations with integrated cost-security frameworks will reduce breach costs by 40%. Those lagging behind will face a double whammy: higher expenses and higher risk. This isn’t a choice between saving money or securing systems—it’s about recognizing that cost discipline is the foundation of modern cybersecurity.