- Cyber Safety
- Posts
- The Real Risk Behind ‘Trusted’ Applications
The Real Risk Behind ‘Trusted’ Applications
In partnership with
Blu Dot surpasses 2,000% ROAS with self-serve CTV ads
Home furniture brand Blu Dot blew up on CTV with help from Roku Ads Manager. Here’s how:
After a test campaign reached 211,000 households and achieved 1,010% ROAS, the brand went all in to promote its annual sales event. It removed age and income constraints to expand reach and shifted budget to custom audiences and retargeting, where intent was strongest.
The results speak for themselves. As Blu Dot increased their investment by 10x, ROAS jumped to 2,308% and more page-view conversions surpassed 50,000.
“For CTV campaigns, Roku has been a top performer,” said Claire Folkestad, Paid Media Strategist, Blu Dot. “Comping to our other platforms, we have seen really strong ROAS… and highly efficient CPMs, lower than any other CTV partner we've worked with.”
Using Roku Ads Manager, the campaign moved from a pilot to a permanent performance engine for the brand.
Trusted Apps Often Receive Broad Permissions
Collaboration tools, CRMs, analytics platforms, and productivity apps frequently request access to emails, files, calendars, and sensitive business data by default.
OAuth Approvals Create Persistent Access
Once users authorize an application, access may continue indefinitely — even if the app is rarely used afterward.
Attackers Increasingly Abuse Legitimate Platforms
Instead of deploying malware, threat actors compromise trusted apps or trick users into approving malicious integrations.
Introducing The First Agentic CRM
Get revenue agents, workflows, and automations across every stage of your motion. Access customer data in real time through Attio's web app, MCP, API, and SDK.
Then Ask Attio anything about your business and get instant answers.
It's the CRM that runs the work behind every win.
SaaS Growth Expanded the Attack Surface Dramatically
Modern organizations rely on dozens or hundreds of interconnected services. Every integration creates another trust relationship attackers can exploit.
Application Activity Often Lacks Visibility
Many companies cannot clearly see which applications access sensitive data, what permissions they hold, or how frequently they interact with internal systems.
Applications Must Be Governed Like Identities
Review OAuth permissions regularly, restrict scopes aggressively, remove unused integrations, and monitor abnormal application behavior continuously. In modern cybersecurity, applications are part of the identity perimeter.
AI Insights That Turn Your Data Into Bigger Profits
Your store is full of hidden growth opportunities. StoreClaw analyzes your Shopify and Amazon data, identifies the highest-impact actions, and helps you grow revenue while improving margins. Start free today with 10,000 bonus tokens. No credit card required.