IT Glossary
Application portfolio management inventories and scores every app a company runs. Learn how APM works and what SaaS changed about the discipline.
August 7, 2026
Application portfolio management (APM) is the discipline of maintaining a complete inventory of every application an organization runs, assessing each one on business value, cost, risk, and technical health, and deciding what to keep, improve, replace, or retire. It treats the application estate as a portfolio to be actively managed rather than a list that only grows.
Classic APM assumed IT knew every application, because IT deployed them. In a SaaS estate, tools arrive through a company card, a free tier, or a single sign-on grant nobody logged. The inventory step stopped being an interview exercise and became a discovery problem: you cannot score a portfolio you have not finished finding. That is why modern APM starts from financial and OAuth data instead of a spreadsheet.
An IT director believes the company runs 60 applications. Discovery against expense data, single sign-on logs, and OAuth grants returns 143. Of those, 31 have had no active user in 90 days, 12 duplicate an existing tool, and 9 hold customer data with no signed data processing agreement. None of it was visible in the spreadsheet the portfolio review was built on. Corma produces that inventory continuously, which is what makes portfolio decisions defensible rather than anecdotal.
Both use the acronym. Application portfolio management is a governance discipline covering the whole estate. Application performance monitoring is a technical practice measuring how individual applications run.
A scoring framework that sorts applications into tolerate, invest, migrate, and eliminate, based on business value against technical quality. Gartner popularized it and it remains the most used APM classification.
Annually for the full portfolio, with contract renewals acting as natural checkpoints across the rest of the year.
Completing the inventory. Applications bought outside IT appear in no asset system, so discovery has to run against spend and identity data instead.