Overspend and overlap insights
Find where two tools fund the same capability or where spend outruns value, so you can consolidate with confidence.
Last updated June 1, 2026
The clearest savings in a security budget usually hide in two places: tools that do the same job, and spend that no longer matches the value it buys. Forest surfaces both by reading your contract links against the capabilities your tools deliver.
Overlap
Overlap appears when more than one tool delivers the same capability. Because tools map to capabilities and contracts link to tools, Forest can see when two separate agreements are funding the same security function. That is not always waste. Redundancy can be deliberate for a compliance-required capability. But unexamined overlap is often duplicate spend nobody chose on purpose.
Overspend
Overspend is cost that outruns value. Some patterns to watch:
Heavy spend on a capability you have rated nice-to-have.
Spend well above the peer average without a reason behind it. See Cost benchmarks.
Multiple contracts stacking cost onto a capability that one tool could cover.
Turning insight into action
Overlap and overspend insights are observations, not instructions. They point to where a closer look pays off. The decision to consolidate, drop, or keep a tool stays with you, weighed against criticality and the coverage you actually need.
The best time to act on these insights is before a contract renews. Pair this view with Renewal tracking so you raise the question while you still have leverage.
These insights are only as good as the links behind them. If overlap looks wrong, confirm your connections in Linking contracts to vendors and tools.