So, Blur will review plain text passwords for multiple applications across the organization,possibly logging it?
1) Why shouldn't I spend money on securing the apps with good password requirements and 2fa,instead of on Blur? It seems,integration work is needed with the app anyways.
2) This might secure the passwords but it also increases my risk. The Blur infrastructure will constitute the most vulnerable segment of my organization. How can I justify such a reduction of security? Is it not better to accept the risk of weak password usage? This feels much like getting a bullet proof vest weighing 200lbs,where it might protect me from bullets but then it also means I can't move,my protection suddenly made me a sitting duck.
3) Let's say my previous questions are without merit. Why shouldn't this be an internal self hosted app? Why an external service? Surely you can charge customers for support and license.
4) This solution becomes less relevant as apps move to SSO or secure their login. I would be concerned about developers and application stakeholders becoming complacent or resistant towards suggestions of improving app login security or they might neglect login security because Blur can fill in that gap.
Overall,my impression is that Blur remediates a specific security issue without considering the impact it will have on the organization's security posture as a whole.
Sorry for being negative,I hope OP can address these concerns as I am sure I won't be the only one to have them.