A security team notices employees are uploading corporate files to numerous unsanctioned SaaS applications discovered from firewall and proxy logs. Leadership wants a solution that can automatically discover all cloud apps in use, assess their risk, enforce granular data-sharing policies within sanctioned apps like Office 365, and detect anomalous user behavior indicating account compromise. Which cloud security solution best meets all of these requirements?