The NCSC's new SaaS security collection provides a lightweight approach for determining the security of any SaaS application.

https://www.ncsc.gov.uk/blog-post/saas-security-surely-its-simple